mChat · document
Report a flaw
If you find something, write to support@medtra.ca with security in the subject. You will get an answer from a person, not a form.
What we commit to
Acknowledging within three business days, telling you honestly whether we understood, and keeping you posted on the fix. If the flaw is real and you want it, your name goes in the fix message.
What we do not promise
No cash reward: mChat is free and has no budget for one. Saying so plainly beats announcing a programme and never honouring it.
What interests us most
Anything that would let the server read a message, impersonate an identity in the directory, or enter a call room uninvited. Those are the product's three promises; a flaw breaking one counts for more than ten display defects.
Known limits, already
There is no self serve account deletion yet: write to support@medtra.ca. No need to report it: we know, it is written down, it is to be built.