Security

If you have found a security issue in Curfew, the website, or the update channel, please tell us before telling anyone else: contact@sentium.one.

We read every report and will reply. If a fix ships, we'll credit you if you'd like. We will not pursue legal action against anyone who reports a genuine issue in good faith and does not access other people's data or degrade the service for others.

We do not currently run a paid bug bounty.

How Curfew is distributed

Curfew for Mac is signed with an Apple Developer ID certificate issued to Sentium Inc. and notarized by Apple. Updates are delivered over HTTPS and are cryptographically signed; the app rejects any update that does not verify.