Download safely
Only download desktop installers from kymeloapp.com. Each published Windows build includes a SHA-256 checksum on the download page so you can verify the file before running it.
How the app protects data
- Local media indexes and playback history are stored on your device.
- Network connections use encrypted HTTPS where the remote service supports it.
- Jellyfin credentials are used only to connect to the server you configure.
- We keep dependencies and release tooling under review during development.
Report a vulnerability
Email support@kymeloapp.com with the affected version, reproduction steps and potential impact. Do not access other people’s data, disrupt services or publish an unpatched issue. We will acknowledge useful reports and coordinate a reasonable disclosure window.