Security

Pre-release policy · Updated July 19, 2026

Report privately

Email support@getholdline.com with “PRIVATE security report” in the subject. Include the affected version, reproduction steps, impact, and a safe proof of concept. Do not include real dictated content or another person's data.

What to expect

The target is acknowledgement within two business days, initial triage within five business days, and a remediation timeline after severity is understood. Holdline does not currently operate a paid bug-bounty program.

Safe research

Use your own devices and accounts, avoid privacy violations or service disruption, and stop after confirming the issue. Give reasonable time to investigate before public disclosure. This page is not authorization to access systems or data you do not own.

Supported versions

During beta, only the latest published build is supported. After general availability, the support window will be listed here and in the Store description.