Jiroshi

1. How to Report Bugs or Security Issues

If you notice any bugs, issues, or potential security vulnerabilities while using Jiroshi in normal, intended use, we truly appreciate you taking the time to let us know.

You can report them by emailing us at app.jiroshi@gmail.com. Please see the sections below on what we do and do not authorize (including penetration testing).

2. Not a Bug Bounty Program

It is important to understand that this is strictly not a bug bounty program. While we value and appreciate responsible reports, there are no rewards, incentives, or monetary payouts of any kind associated with reporting bugs or vulnerabilities.

By sending a report, you acknowledge that you are doing so voluntarily, without any expectation of compensation or recognition.

3. MVP Status and Scope of Fixes

Jiroshi is currently an MVP (Minimum Viable Product) and not a full-fledged, production-grade platform yet.

This means our primary focus is on validating the core experience and critical flows. As a result, minor issues, cosmetic bugs, or smaller edge cases may be intentionally deprioritized or not addressed immediately.

We will prioritise fixing issues that:

Impact core functionality or prevent normal usage of the product.
Pose a reasonable security risk or data integrity concern.
Cause significant confusion or break critical user journeys.

Simpler bugs that can be reasonably overlooked at this MVP stage may not be fixed right away, even if reported. This is a deliberate product decision while we evolve the platform.

4. No Unauthorized Penetration Testing or Security Scanning

Jiroshi is an MVP. The product has not yet been fully validated in the market, and we are not inviting or authorizing proactive security assessments at this stage.

We do not authorize penetration testing, vulnerability scanning, automated security probes, or any form of active security testing against our systems, APIs, or infrastructure unless we have explicitly agreed in writing beforehand.

If you run such tests without our prior written consent, you may be in violation of applicable law and our Terms of Service. We reserve the right to take appropriate action, including blocking access and pursuing legal remedies.

Once the product is validated and we are ready for formal security reviews, we may publish clear guidelines and, where appropriate, invite authorized testing. Until then, we ask that you limit your interaction to normal use and report only what you discover in that context.

5. Responsible Behaviour

Do not perform any penetration testing, scanning, or probing of our systems unless we have explicitly authorized it in writing (see Section 4). If you discover a security-related issue during normal use, please do not publicly disclose details before we have had a reasonable opportunity to investigate and address it. Avoid any actions that could harm other users, compromise data, or disrupt the platform.

By reporting issues privately and responsibly—and only from normal, authorized use—you help us improve the stability and safety of Jiroshi for everyone.

6. Contact

For all bug reports, security concerns, or questions about this page, please write to:

Email: