important · Mobile — Local storage
Secure Folder kept imported PIN-protected files unencrypted in Android shared storage.
Affects
Secure Folder by FluteCode, a password-protected file-vault application for Android.
A local application with broad shared-storage access, or a person using a capable file manager, can read the originals under Documents/.SecureFolder without entering the PIN.
Detail and 2 sources
The evidence covers imported media and documents, not the application’s notes, passwords or payment-card database.