VOXFLOW / SECURITY

Security

What VoxFlow collects, what it does not, and how to report a vulnerability.

14 / VF—2026

Principles

Argon2id passwords, opaque sessions, Ed25519 entitlements, OS safeStorage and ciphertext-only sync.

Not collected

The desktop app does not collect screenshots, visited URLs, active-field contents, accessibility trees, contacts or browsing history. Website visit statistics require separate permission.

Report a vulnerability

Send a reproducible report to the security email below. Do not expose other users’ data and allow reasonable remediation time.

Contact and owner

Говор Андрей Игоревич
Tax ID: 502987410721
141018, Московская область, г. Мытищи, Новомытищинский просп., д. 82
Phone: +7 977 355-71-30
security@voxflow.space