What's New in Version 1.1.4 • Now available worldwide - train anywhere, anytime • Try all premium features free for 3 days • Quick Timer always free for casual training • Improved stability and performance • Bug fixes and optimizations

What's New - Version 1.1.3 ## Critical Security Update ### Google Cloud API Key Rotation - **Immediate Security Response**: Replaced compromised Google Cloud API keys that were inadvertently exposed in development documentation - **Enhanced Key Management**: Implemented strict API key restrictions with iOS app bundle ID validation and service-specific access controls - **Zero User Impact**: All API services continue to function normally with the new secure keys - no user action required ### Comprehensive Security Improvements - **API Key Restrictions**: All Firebase API keys now restricted to: - Specific iOS bundle identifiers only - Required Firebase services only (Auth, Firestore, Functions, Analytics) - Production environment validation - **Removed Hardcoded Credentials**: Eliminated all API keys from scripts and documentation files - **Environment-Based Configuration**: Migrated to secure environment variable management for all sensitive credentials ## Enhanced Security Measures ### Firebase App Check Integration - **Request Validation**: All API requests now validated through Firebase App Check - **Bot Protection**: Prevents unauthorized automated access to backend services - **Device Attestation**: Ensures only legitimate app installations can access Firebase services ### Improved Credential Management - **Secret Rotation Policy**: Implemented automatic 90-day rotation for all service credentials - **Audit Logging**: Enabled comprehensive security audit trails in Google Cloud Console - **Monitoring & Alerts**: Set up real-time alerts for any suspicious API usage patterns ## Technical Security Details ### API Keys Updated - Replaced all 6 potentially exposed Firebase API keys - New keys implement strict domain and app restrictions - Previous keys have been revoked and are no longer functional ### Files Sanitized - Removed API keys from 8 utility scripts - Sanitized 3 documentation files containing sensitive information - Updated .gitignore to prevent future credential exposure ### Compliance & Best Practices - **OWASP Compliance**: Follows OWASP Mobile Security best practices - **Zero Trust Architecture**: Implements principle of least privilege for all API access - **Defense in Depth**: Multiple layers of security validation for all requests ## User Privacy Assurance - **No User Data Exposed**: The exposed keys were API identifiers only - no user personal data was at risk - **Continued Privacy**: All user data remains encrypted and secure - **Proactive Protection**: This update is a preventive measure to maintain the highest security standards ## For Apple Reviewers - **Security Timeline**: Issue detected via Google Cloud security scanning on 2025-09-18, resolved within 24 hours - **Scope**: Limited to API key exposure in development files - no production data compromise - **Verification**: All new keys tested and validated in production environment - **Compliance**: Adheres to App Store Guidelines section 2.3.3 (Accurate Metadata) and section 5.1.1 (Data Collection and Storage) --- This security update demonstrates our commitment to maintaining the highest standards of data protection and rapid response to potential security concerns. No user action is required, and all app functionality continues normally with enhanced security.

What's New in Version 1.1.2 SECURITY & RELIABILITY • Enhanced security for Live Activities and notifications • Improved connection reliability for timer syncing • Better performance during extended practice sessions BUG FIXES • Fixed Live Activity updates in background mode • Resolved Dynamic Island animation issues • Improved timer accuracy and synchronization PERFORMANCE • Faster app launch times • Reduced battery usage during sessions • Smoother animations and transitions We've been working hard behind the scenes to make your Growth Method experience more secure and reliable. This update includes important security enhancements and bug fixes to ensure your practice sessions run smoothly.

Bug Fixes - Fixed subscription loading issues in TestFlight - Resolved critical issue where subscription options weren't appearing for some users - Improved subscription product detection - Enhanced retry logic with better handling of App Store Connect delays - Fixed privacy and terms links - Legal document links on paywall now properly display content Improvements - Better error messages - More helpful feedback when subscription products are temporarily unavailable - Enhanced TestFlight compatibility - Improved detection and handling of sandbox vs production environments - Subscription status verification - Added checks to confirm active subscriptions even when products fail to load - Improved diagnostic logging - Better crash reporting to help identify and fix issues faster Technical Enhancements - Removed deprecated service references for cleaner codebase - Implemented exponential backoff for product loading retries - Added subscription entitlement verification using StoreKit 2's currentEntitlements API - Enhanced environment detection for TestFlight and App Review scenarios This build focuses on reliability and fixing the subscription purchase flow, especially for TestFlight users. If you experience any issues with subscriptions, please use the "Try Again" button or restart the app.