Report a vulnerability.

If you believe you found a security issue affecting IKANDY or ikandy.app, email support@ikandy.app with the subject Security Report.

What to include

• The affected feature, page, or application version.
• Clear reproduction steps and the potential impact.
• Any screenshots or proof-of-concept material that does not expose another person's data.
• A safe way to contact you for follow-up questions.

While testing

Please do not access, change, retain, or publish another person's data; disrupt service; use social engineering; or run automated testing that materially degrades availability. Stop testing and contact us if you encounter sensitive information.

Give us a reasonable opportunity to investigate and address a report before making it public. We do not currently operate a paid bug-bounty program.