Security

Found a security problem in Kiritsu or its installer? Tell us privately and we will fix it first.

Report a problem

Email [support email] with "Security" in the subject: what you found, the Kiritsu version (Settings → Updates), and how to reproduce it. We reply within 3 working days and keep you informed until it is fixed. Please do not share the problem publicly until a fix is out.

How updates are kept safe

• Updates come only from Kiritsu's GitHub releases, and the app runs an installer only when its SHA-512 checksum matches the one published with that release.
• Your journal stays on your computer; the app sends no trade data anywhere.
• Security fixes are released as updates for every version still sold, and announced in the release notes.

Who handles reports

[your name], trading as [business name], the Netherlands. Actively exploited vulnerabilities are reported to the authorities as the EU Cyber Resilience Act requires.