Security

This page is how to report a security issue in Run with ME.

Report a vulnerability

Email contacts@runwithme.pl before you publish anything. Tell us what you found, which part of the product it affects, and the steps that show the issue. You may include the smallest proof needed for us to reproduce it.

Do not access accounts or data that are not yours. Do not disrupt the service, delete data, or send traffic meant to take the app down. Give us a reasonable time to fix the issue before you talk about it in public. We do not run a paid bounty program.

What this covers

Reports about the Run with ME website and the Run with ME iOS app are in scope. Strava, Apple, and the companies that host or deliver the service are responsible for their own systems. Report those issues to them.

What we do with a report

We read reports sent to that address, confirm the ones we can reproduce, and fix the ones that affect our users. We will not publish the details of an unfixed issue. We do not promise a particular response time.