Report security issues through GitHub private vulnerability reporting. Do not include notification text, backup files, or other private phone data in public issues.
The GitHub version uses the network only for optional update checks and for an APK download you start. The Play version uses Google Play for the purchase. Ronumi code in that version makes no network requests. Backups are password-encrypted files on the device. Ronumi does not save the password.
Accessibility blocking helps you follow your own limits. It is not a device-management security boundary. Strict mode cannot stop force-stop, safe mode, or every way to uninstall the app.
Only debug builds contain the design gallery and the shell-only storage checks. Release builds omit those components.