Security

Bambi takes the security of our platform and our customers' data seriously. If you believe you've found a security vulnerability in Bambi's web application, mobile apps, or API, please let us know.

How to report

Email security@hibambi.com with a description of the issue, steps to reproduce it, and any supporting details. Our team reviews all reports.

Guidelines

Please act in good faith and:

• Do not access, modify, or retain data belonging to other users. If you encounter personal or health information, stop, do not save or share it, and report it to us immediately.
• Do not perform testing that could degrade or disrupt our services, including denial-of-service attacks.
• Do not use social engineering, phishing, or physical attacks against Bambi staff or customers.
• Give us reasonable time to fix the issue before disclosing it publicly.

Our commitment

We will not pursue legal action against anyone who reports a vulnerability in good faith and follows these guidelines.

Bambi does not currently offer a paid bug bounty and does not provide payment for unsolicited reports.