REstart runs as your home screen, so it sees which apps you open and holds your notes and settings. Every decision about what it reads, stores and sends is made in this repository and is my responsibility.

Please do not open a public issue for a security problem.

• Use GitHub's private vulnerability reporting: Security → Report a vulnerability on this repository, or
• write to hallo@remaker.ch. If you need encryption, say so in a first mail and you will get a key.

Tell me what you found, how to reproduce it and which version you tested. You will get an answer within 7 days. When the fix is released, the advisory names you unless you prefer not to be named.

• No analytics, no ads, no crash uploads. After a crash the app shows the contact address as plain text; nothing is sent.
• The only network request the app makes on its own is the weather, to open-meteo.com, with the location rounded to about 1 km.
• Launcher data is excluded from cloud backup and from phone-to-phone transfer. Notes stay out of screenshots.
• Backup files are encrypted with the user's password (AES-256-GCM, key from PBKDF2-HMAC-SHA256 with 600,000 rounds) and hold only the settings listed in the code. The automatic backup does not store the password: the key derived from it is kept wrapped by a key in the Android Keystore. A forgotten password cannot be recovered.
• Third-party widgets are rendered without loading their code into the launcher's process.
• Nothing typed into the drawer leaves the device.

Only the latest release receives fixes.