| Version | Supported |
|---|---|
| 0.1.x | ✅ |
NotifPlus is designed with a strict Zero-Trust Local-Only Architecture:
- Zero Internet Access: The application does NOT declare or use
android.permission.INTERNET. - Sandbox Storage: All notification payloads, attachments, and preferences are stored strictly in private internal storage (
filesDir,noBackup="true"). - Anti-Leakage: Sensitive message payloads and notification data are never forwarded to log output (
Logcat). - Biometric Protection: App access can be protected using device biometric authentication (AndroidX Biometric).
If you discover a potential security vulnerability within NotifPlus, please report it responsibly:
- Do NOT open a public GitHub issue for security-critical findings.
- Submit your report directly via GitHub Private Vulnerability Reporting or contact the maintainer: Adrian Syah Abidin.
- Include details of the vulnerability, reproduction steps, and potential impact.
We take security and privacy seriously and will respond promptly to validate and address reported issues.