Security

If you find a security problem in Mutemix, please report it to us privately first, so that we can fix it before anyone can misuse it.

How to report a problem

• Email support@mutemix.com with "Security" in the subject line, in English or Croatian.
• Include the app version (⋮ > About), your phone model and Android version, a description of the problem and the steps to reproduce it.
• Do not send other people's personal data, and test only on phones and files that are yours.

What happens after you report

• An automatic reply confirms that your email has arrived.
• Within 3 working days, we tell you whether we can reproduce the problem and what we plan to do.
• We fix a confirmed problem without delay, in an update on Google Play. A serious problem gets its own update as soon as the fix is ready. We tell you when the update is out.
• If the problem is in a library used inside the app, we also inform the people who maintain it.
• If a security hole is being actively exploited, or someone breaks into the way we build or publish the app, we report it to the EU cybersecurity authorities as the Cyber Resilience Act requires. We leave out your name and email address unless the law requires them. We tell users what to do on this page and in the update notes.

Publishing the problem

• Please give us up to 90 days to fix the problem before you publish anything. We agree the date with you.
• If you report in good faith and follow this policy, we will not take legal action against you.
• If you wish, we thank you by name in the update notes. We do not pay rewards.

Scope

This policy covers the Mutemix app and the website mutemix.com. Report problems in Google Play, Google's ads and payments, or Android itself to Google or to your phone's maker. Our security contact is also listed in mutemix.com/.well-known/security.txt.