Responsible Disclosure

We take Becca's security seriously, and we welcome good-faith reports from anyone who finds a weakness. This page explains how to tell us, and what you can expect.

How to report

Email hello@meetbecca.com with the subject "Security". Describe what you found, the steps to reproduce it, and what you believe the impact is. Screenshots or a short recording help.

What we ask of you

• Give us reasonable time to investigate and fix the issue before sharing it publicly.
• Do not access, change, or download data that is not yours. If you stumble into someone else's data, stop and report it.
• Do not disrupt the service or use automated attacks against it.
• No extortion. Good-faith reports are welcome; demands are not.

What you can expect from us

We will acknowledge your report, take it seriously, keep you informed as we fix it, and credit you if you would like. We will not pursue legal action against research conducted in good faith within these rules.

Scope

meetbecca.com, app.meetbecca.com, and the Becca application. The Becca Box will be added here when it ships.