Security
AJN BUZZ uses layered controls to reduce unauthorized access, unsafe processing and payment fraud.
Current controls
- Firebase-authenticated account and usage functions.
- Server-side verification of Firebase ID tokens and plan entitlements.
- Restricted Firestore and Storage rules.
- Exact payment amount, currency, ownership and webhook-signature checks.
- Idempotent payment activation and secrets stored outside source control.
- File-count, type, size and processing validation.
Responsible disclosure
Report a suspected vulnerability privately to ajnpdf1@gmail.com. Include reproducible details without accessing other users’ information or disrupting the service.
User security
Keep devices updated, protect your Google or email account, review checkout domains before paying, and never share OTPs or payment PINs.