● Safety

"Don't send it off the device" — first principle.

mendoi-apps is built around keeping your data on your device whenever possible. We follow store review policies, minimize third-party sharing, and request only the permissions a feature needs.

01 How we operate
  • Least privilege We only request permissions the feature needs, when you use it.
  • On-device first Photo apps process images on-device whenever possible. No upload if not required.
  • Secrets and keys Signing keys and API tokens are kept out of the repo and accessed only via CI secrets.
  • Store policy compliance We follow the App Store Review Guidelines and Google Play Developer Policy.
  • Accurate disclosures iOS PrivacyInfo, App Privacy, and Google Play Data Safety are kept aligned with the implementation.
  • Encrypted transit External calls are HTTPS. We use trusted SDKs (Firebase, AdMob).
03 Accessibility

Designed for everyone

  • Continuous VoiceOver / TalkBack improvements
  • Dynamic type support (large fonts available)
  • Dark mode and contrast ratios in place
  • Primary buttons sized at 44pt+ tap targets
  • Clear undo paths to prevent accidental taps
04 Vulnerability reports

Found something?

If you spot something suspicious or a possible vulnerability, please get in touch. We confirm and patch as fast as we can.

Go to Contact →

Choose "Security report" in the anonymous contact form.