If you find a security issue, please don't open a public issue — email robinroy.work@gmail.com instead.

Worth knowing when assessing impact: the app holds accessibility access (it can see which app is in the foreground), but it has no network permission — nothing ever leaves the device. All data (your rules and usage log) lives in local app storage.