How RG AI reduces risk by design.
The simplest way to reduce risk is to not hold data you don't need to. RG AI's local-first architecture is a security decision as much as a privacy one.
Sign-in is handled by Firebase Authentication (Google infrastructure). RG AI never sees or stores your password.
If you find a security issue, report it through the Contact page rather than a public issue tracker, so it can be fixed before it's disclosed publicly.
Note: RG AI is an actively maintained, early-stage product. Security fixes ship as they're found - there's no fixed patch schedule to publish, since promising one would be inaccurate for a product this size.