Please report security concerns privately to the contact address listed in the application rather than opening a public issue. KeymapKit does not process or store passwords or payment-card details; Google Play handles Premium payments. Never include purchase tokens, order IDs, sensitive text, or device identifiers in reports. Service-account credentials and Play Developer API secrets must never be committed to this public repository.