Skip to content

Security: KernFerm/BubblesAI

Security

Security.md

Security Policy

Reporting Vulnerabilities

If you discover a security vulnerability in BubblesAI, please report it by opening an issue on GitHub or contacting the project owner directly via Discord (@BubblesTheDev in #bubbles-ai-gpt).

Responsible Disclosure

We encourage responsible disclosure. Please do not publicly disclose vulnerabilities until they have been addressed.

Data Privacy

  • No local data storage: BubblesAI does not store chat history or sensitive information on your device.
  • API keys are stored locally and never transmitted to third parties except the selected AI provider.
  • All communications with AI providers use secure HTTPS connections.

Dependencies

All dependencies are regularly updated to minimize security risks. If you notice an outdated or vulnerable package, please notify the maintainers.

Contact

There aren’t any published security advisories