- How to report. Email security@biteapp.co.za with a description of the weakness, the steps to reproduce it, and your contact details.
- What we ask. Give us reasonable time to fix it before you tell anyone else. Do not access, change or delete other people's data beyond what is needed to show the weakness. Do not disrupt the service (no denial-of-service tests, spam or social engineering of staff, Riders or Restaurants).
- What we do. We confirm receipt within 3 business days, keep you updated, and tell you when it's fixed.
- In scope: biteapp.co.za and the BITE, BITE Restaurant and BITE Rider apps. Out of scope: third-party services such as our payment and hosting providers, Apple and Google. Report those to the provider.
- Good faith. If you follow this policy, BITE will not take legal action against you for your research.
- Rewards. BITE does not currently pay bug bounties, but may thank you publicly with your consent.
Legal