Security

Protection before convenience.

TradeBrace is being prepared for public release with narrow permissions, user-confirmed actions, and protected business data. The production release will also include server-enforced company access.

Current private-test protections

Narrow permissions

The test app requests internet, network-state, and microphone access—not direct call logs, message history, contacts, precise location, or background location.

Protected local records

Sensitive business text uses Android Keystore-backed AES-256-GCM encryption. Cleartext network traffic and Android backup/device transfer are disabled.

Required before public release

  • Authenticated company accounts and recovery
  • Server-issued Owner, Leadership, and Crew permissions
  • Company separation and encrypted synchronization
  • Server-verified billing, refunds, and revocation
  • Export, backup, restore, and account deletion
  • Security testing, monitoring, incident response, and protected signing

TradeBrace will not be offered as a paid team product until these controls are operating and tested. The current phone-test role selector is a testing convenience, not a production security boundary.

User-controlled actions

Madeline can navigate, dictate, and prepare drafts. Calls, texts, emails, calendar entries, role changes, deletions, and financial actions require a visible user review or confirmation. Voice sessions are foreground-only and stop on cancellation, interruption, error, or timeout.

Report a security concern

Email a clear description of the suspected issue. Do not include passwords, authentication codes, payment information, complete customer records, or exploit sensitive data in the first message. We will request a safer transfer method if needed.

Report a security concern

Privacy and deletion

Read the Privacy Notice or visit the account-deletion page.