Security and support

18 October 2026 · ANKYR+YRD LIMITED, Cayman Islands

Reporting a security problem

If you think you have found a security weakness in Chargewise, email support@chargewiseapp.net with "Security" in the subject: what you found, the address or screen it affects, and the steps to see it again. We acknowledge every report within 5 working days and tell you when it is fixed.

Please do not access, change or download other people's data, and do not run tests that could disrupt the service — if a check needs an account, use your own. We do not run a bug bounty. We will not take legal action against research done in good faith that follows these rules.

The machine-readable version of this policy is at /.well-known/security.txt.

How Chargewise is kept secure

In short (the full account is in "How Chargewise has been checked"):

We reviewed the app against the two main OWASP web security standards: the Top 10 (2025) and the Application Security Verification Standard 5.0.0, Level 2. Nothing rated high is open.
On 17 October 2026 two independent outside scans (MDN HTTP Observatory, Qualys SSL Labs) both gave the live app the top grade, A+.
Every change runs through automated tests before release; nothing ships while a test fails.
An encrypted backup is made every night; only ANKYR+YRD LIMITED holds the key.
On app.chargewiseapp.net you sign in with a one-time link sent to your email, so there is no password to steal or forget.

Support

Chargewise is free. Support is by email to support@chargewiseapp.net; we aim to reply within 5 working days. Please include the build number (Settings → About), your phone and browser, and what happened — never health details. Settings → About → Report a problem starts the email with the build and phone filled in.

Supported devices: Android phones with Chrome. On iPad the app works and notifications arrive, without their buttons (Apple doesn't show them). iPhone has not been tested yet.

Updates and end of support

When an update is ready, the app says "There is a new version of the app" with an Update now button. A published security problem in a component Chargewise ships is fixed within 7 days; a high or critical one in the tools used to build and deploy it, at the next release and within 30 days.

If Chargewise ever ends, we will give at least 12 months' notice by email and in the app. Your data stays exportable until then (Settings → Checks → Data → Export CSV) and is deleted when the service closes.

Telling you about incidents

If a security incident affects your data, we tell you by email without undue delay, and within 5 days of finding it.