Security problem with android app

I do not know if it is the right place, but I tell you here, if this were not the place for this post, you tell me where and I change it.
Thank you!

Hi Dylan, I have a problem with the application on Android. The “Zephyr Users” that log into the application, receive notifications of tasks that are not assigned to them and also see the projects to which they do not have access. I would also like to know if there is any way that users can receive an email when a comment is added (discussion) in the tasks assigned to the user.
You have your account activated if you need.
————————————————
It would be nice if you could implement some kind of document repository, because now I am using the discussion part of the tasks, and although that works well for me, it is sure that a plugin would be much better. I have seen that you have a google drive plugin, it would be interesting to try it and at what price will you put it on sale?
Thank you very much!

Miguel Angel

The page I need help with: [log in to see the link]