Last updated October 26, 2026

Security

Protecting the information people trust us with is fundamental to My Day Compass. This page explains how we approach security and how to report a vulnerability.

How we protect information

• Encryption of data in transit between our apps and servers, using current TLS.
• Databases that are not reachable from the public internet, with least-privilege access for people and services.
• Encrypted backups, monitoring and alerting.
• Verified sign-in through established identity providers; we never store readable passwords.
• Security review of changes before they are released, and prompt application of security updates.

Reporting a vulnerability

If you believe you have found a security vulnerability in My Day Compass, please email support@iniyara.com with the subject “Security report”, a description of the issue, the steps to reproduce it, and its potential impact. We will acknowledge your report within 5 business days, keep you informed of our progress, and let you know when the issue is resolved.

Guidelines for research

When investigating a vulnerability, please:

• use only accounts you own or have explicit permission to use, and never access, modify or delete other people’s data;
• stop and report immediately if you encounter personal information, and do not retain or share it;
• avoid degrading the Services, including through denial-of-service testing, spam or automated scanning that generates significant traffic;
• do not use social engineering, phishing or physical attacks against our staff, users or providers; and
• give us a reasonable opportunity to resolve the issue before disclosing it publicly.

Out of scope: reports from automated tools without a demonstrated impact, missing best-practice headers without a practical exploit, self-inflicted issues, clickjacking on pages without sensitive actions, and vulnerabilities in third-party services, which should be reported to those providers.

Safe harbor

If you make a good-faith effort to comply with these guidelines, we will consider your research authorized, will not pursue or support legal action against you related to it, and will work with you to understand and resolve the issue. This does not authorize access to data that is not yours, or any activity that violates the law. We do not currently offer monetary rewards.

Contact

Email support@iniyara.com with the subject “Security report” · Machine-readable contact: /.well-known/security.txt