hightimized runs entirely in the browser. There is no server, no database, and no API. Your bill data never leaves your device.
If you discover a vulnerability in the client-side code, please report it via GitHub Security Advisories: https://github.com/ByteWorthyLLC/hightimized/security/advisories/new
Do not open a public issue for security vulnerabilities.