Legal

Company information

Djini.ai is a product of Mobile Hacking Lab B.V..

Responsible disclosure

Security is what we do, so we appreciate hearing about any issue you come across in Djini.ai, app.djini.ai, or our other services. Email contact@mobilehackinglab.com with “Security” in the subject line, and include the affected URL or component and the steps to reproduce it.

When you look into an issue, please:

• Use only your own account and data, and never access or change anyone else’s.
• Avoid anything that disrupts our services, such as denial-of-service or high-volume automated scanning.
• Give us reasonable time to fix the issue before you share it publicly.

We will acknowledge your report and keep you posted on the fix. As a young company, we do not run a bug bounty program or offer rewards, but we are genuinely grateful for every report.

Authorized use

Djini is an offensive security platform. It analyzes, tests, and exploits mobile apps and their API backends. Use it only on apps, devices, and systems that you own or that you have explicit, written permission to test. Testing without authorization may be unlawful, including under the Dutch Criminal Code and comparable laws elsewhere. You are responsible for the scope and legality of the testing you run with Djini.

Research and advisories

Our blog publishes vulnerability research, technical advisories, and proof-of-concept details. We publish them to help defenders, developers, and researchers understand and fix security issues. Vulnerabilities in third-party products are reported to the affected vendor and published through coordinated disclosure.

Research content is provided for educational and defensive purposes, as is, without warranty. Do not use it against systems you are not authorized to test.

Privacy

Analytics. We use Google Analytics 4 to count visits and see which pages and sources people use. It is set up to have minimal impact on your privacy: we have a data processing agreement with Google, IP addresses are not stored, data is not shared with Google for its own purposes, Google signals is off, and data is deleted after two months. Under the Dutch Telecommunications Act, analytics configured this way does not require consent.

Advertising. Only if you allow advertising cookies, this website also loads Google Ads. It sets cookies that show which of our ads led to a visit or a purchase, and visitors who allowed them may see our ads elsewhere. Without your permission, no advertising cookies are set and no data is used for advertising. You can change your choice at any time through “Cookie settings” at the bottom of every page. Google processes this data under the Google Privacy Policy.

Third-party content. Some page scripts are loaded from content delivery networks (such as jsDelivr and esm.sh), which receive your IP address and browser details when they serve those files.

Payments. Checkout is handled by Stripe. We do not receive or store your card details. Stripe processes your payment data under the Stripe Privacy Policy. When a purchase completes, our servers report the purchase (plan, billing period, and amount) to Google Analytics so we can measure which campaigns lead to sales.

The Djini application. app.djini.ai records usage events on our servers, such as sign-ups, scans, and feature use, to operate, secure, and improve the service. This tracking happens server-side and does not use advertising cookies.

Other linked services, such as demo booking, have their own terms and privacy policies. For questions about your personal data or to exercise your rights under the GDPR, contact contact@mobilehackinglab.com.

Trademarks

Djini and Mobile Hacking Lab are trade names of Mobile Hacking Lab B.V. Android is a trademark of Google LLC. Apple and iOS are trademarks of Apple Inc., registered in the U.S. and other countries. Other product names, logos, and brands mentioned on this site are the property of their respective owners. Naming a vendor or product in our research does not imply affiliation or endorsement.

Disclaimer

The content on this website is provided for general information. We work to keep it accurate and current but make no warranty as to its completeness or accuracy. Product features, prices, and plans may change. The terms of your subscription or service agreement take precedence over anything on this website.

Credits

The 3D head in the homepage hero is adapted from “Infinite” 3D head scan by Lee Perry-Smith, based on a work at triplegangers.com, and licensed under CC BY 3.0. It has been rendered as an animated character field.