diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 8ecc73a..a32461c 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -47,6 +47,8 @@ android {
             //    It allows early testers to test drive the app without us worrying about signing
             //    https://developer.android.com/studio/publish/app-signing
             storeFile = file("${rootProject.projectDir}/keystore/debug.keystore")
+
+            // ℹ️ When time comes, these values should come from `secret.properties` file or CI/CD secrets.
             storePassword = "android"
             keyAlias = "androiddebugkey"
             keyPassword = "android"
diff --git a/keystore/README.md b/keystore/README.md
index 94ec088..37e758b 100644
--- a/keystore/README.md
+++ b/keystore/README.md
@@ -4,6 +4,10 @@ The debug keystore file is added to the repository to make it easier for develop
 the app without having to generate a new keystore file each time. The debug keystore is used for
 signing the app during development and CI builds, and it is **not intended for production use**.
 
+> [!NOTE]  
+> The debug keystore is generated automatically by Android Studio
+> and copied from the `$HOME/.android/debug.keystore` location.
+
 ## Related Resources
 - https://developer.android.com/studio/publish/app-signing
 - https://source.android.com/docs/security/features/apksigning
\ No newline at end of file