Pattern Launch Center

-  

Assumption of Risk Memorandum of Understanding

I. Purpose

This Memorandum of Understanding (MOU)  regarding the assumption of risk, is entered into between Pattern Resource Group LLC and - , as they seek to cooperate and accelerate their respective missions. Both parties understand the following.

II. Description of Agreements

General Security Goals

  • To protect the user's app information on the device.
  • To protect the user from being tracked through our system either through identification numbers or through general internet traffic patterns.
  • To protect the user from incrimination in basic searches of the phone or the opening of the app.
  • To provide as much security as possible for the sharing of the app and resources.


What are the basic security risks of mobile apps?

  • Possible incrimination for having Bible verses on the phone.
  • Possible incrimination for having an app that encourages the sharing of the gospel with others.
  • Possible incrimination for sharing a Bible resource with other people digitally.
  • Possible linking/exposing other believers/people because of the sharing.
  • Possible exposure of personal information.
  • Possible internet or digital tracking mechanisms.


What security risks does the Pattern Platform specifically address?

  • To create an app which can function offline (without the internet) so as to protect users in sensitive countries. We didn't want an app that was communicating with our system without the user being aware.
  • To create a system that receives and sends encrypted journey sets. All files downloaded from our server travel through an encrypted connection and are also encrypted individually. This prevents easy access to the content. When using other apps, or bluetooth, to send journey sets, the sets are encrypted but not every app uses an encrypted connection.
  • To create an app whose content is stored encrypted. This protects the user from simple phone searches of its databases. Except for any PDFs or MP3 files that are exported from our app, all other files are encrypted on the device in order to prevent easy searching for the content.
  • To create an app with a PIN code lock screen to keep unwanted eyes from seeing the content. There is a normal PIN code lock screen and also a PIN screen that is a functioning calculator to further disguise the app's real content.
  • To create an app which does not store any user information. The app does not require any personal information to be used. Our server system does not store any device or specific location information when more materials are downloaded.
  • To create an app for Android devices which can share the app from phone to phone without connecting to our servers. This facilitates the endless sharing of the app and content despite our servers potentially being blocked by governments.

 
What specific security risks remain in Pattern created apps?

  • People learn about the different names or logos of the app and start looking for them on devices. No matter what our disguise is for the app, it will always be possible to "know the book by its cover." The app will be out in the wild and surely it will fall into the "wrong hands." However, the likelihood of the average official, policemen, or family member recognizing the app during an intentional search is very low.
  • People discover how much the app is used on the device. Operating systems have settings areas that show things like "Battery usage by app." Our app will appear in the list just like any other app. Operating systems keep logs/lists of when functions are used, including things like a list of file transfers or installs. This could show that our app was installed. It could also show that a file was transferred from one phone to another (without listing the name of the file).
  • People reverse engineer our encryption key we use for sharing resources. This is certainly possible. However, the device or the encrypted file still needs to reach the correct department who knows what they are looking at and then have the correct encryption key. There is a much higher probability that other incriminating information on the device will be found in the web browser, texts, or social media apps. The encryption key allows us to pass journey sets and the app through the internet without easy snooping of the contents.
  • People learn the PIN code to the app somehow. Users have a tendency to reuse PIN codes, use obvious codes, or simply enter the code in plain site of others. If this happens, the content of the app will be known. However, nothing else will be known – no usernames or emails.

 

III.        EFFECTIVE DATE

The MOU is effective from the date of its signature and remains in effect until changed or terminated by either organization. When either party is dissatisfied with this agreement, they will amicably go their separate ways.

Leave this empty:

Signature arrow sign here

Signed by Nolan Sanders
Signed On: August 28, 2023


Signature Certificate
Document name: Assumption of Risk Memorandum of Understanding
lock iconUnique Document ID: 2d3efde4e5a6d01eea4ddcfaf207df4d3224380c
Timestamp Audit
August 19, 2022 12:26 pm EDTAssumption of Risk Memorandum of Understanding Uploaded by Nolan Sanders - office@patternplatform.app IP 66.119.29.50