I’m Safe: Skyddsrum — Security

Last updated: 14 October 2026

How to report a security problem in I’m Safe: Skyddsrum, what happens after you do, and how long the app gets security updates.

Report a vulnerability

Email emil@im-safe.se, in English or Swedish. It helps if you include:

• what you found and where: the app, the list of temporarily closed shelters it downloads, or these pages on emilalm.app;
• the steps to reproduce it, and the app and iOS version if it concerns the app;
• what an attacker could do with it;
• whether you want to be credited, and under what name.

Questions that are not about security go to the same address. Our support page answers the common ones.

What happens next

• We confirm that we got your report within 5 working days.
• We assess it and tell you what we found and what we plan to do.
• We fix confirmed vulnerabilities as quickly as their severity calls for, and tell you when the fix is out.
• Once it is fixed, we credit you if you want us to.

There is no bug bounty.

Coordinated disclosure

Please don’t publish a vulnerability until a fix is out, or until 90 days have passed since your report, whichever comes first. If a fix needs longer, we will tell you why and agree on a new date with you.

Testing in good faith

The app has no account and no server of its own. We will not take legal action against you, or report you to the police, for research that follows these rules:

• Test on your own devices.
• Don’t try to change the list of temporarily closed shelters that everyone’s app downloads. A wrong list can send people to a closed shelter.
• Don’t attack the services the app relies on, such as Apple, GitHub or MCF. Report problems in them to them.
• No denial of service, spam or social engineering.

How we tell users

The App Store release notes say when an update fixes a security problem. If a vulnerability in the app is being actively exploited, we say so on this page and what you can do to protect yourself, and we report it to the authorities as EU law requires.

Security updates

I’m Safe: Skyddsrum gets security updates until at least October 2031. Updates come through the App Store, so install them when they are offered, or turn on automatic updates.

Who is responsible

I’m Safe: Skyddsrum is made by Emil Alm, an individual based in Sweden. His postal address is under Contact in our terms.