I'll explore all options available to me.
I managed an online community for tens of thousands of people for 18 years. The domain was registered to a fake address, but once I started accepting ads, I had to register a business and list my home address in the public records.
I dealt with hundreds of advertisers, and the most obvious risk was that an adversary contacts me to publish an ad, gets my company details, checks online for company address and comes ripping my heart off.
Over these years, I received multiple online threats from various people... but none have ever have showed at my door step.
I still wonder why.
Did the users I blocked and banned never really felt offended because I tried to be professional and predictable in all circumstances?
Or was it just because finding my personal address required a bit of ingenuity which the most egregious perpetrators simply lacked?
P.S. And no, this was not a gaming community nor anime lovers forum, but a place where immigrants turned in for help.
P.P.S. Before downvoting... think again about the responsibility you take on when people pay you money in return for your service.
OP mentioned their app is free
Back to my story... my online community was also free to join. This does not change much.
Once you start interacting with the world, expect the world to interact with you.