diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 4505d91..e6eeb93 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -6,7 +6,6 @@ variables:
   ANDROID_SDK_TOOLS: "9477386"
   
   # Keystore credentials stored as GitLab CI/CD variables
-  KEYSTORE_FILE: "${CI_PROJECT_DIR}/keystore.jks"
   KEYSTORE_PASSWORD: $KS_PASSWORD
   KEY_ALIAS: $KS_ALIAS
   KEY_PASSWORD: $KS_KEY_PASSWORD
@@ -53,8 +52,10 @@ assembleRelease:
   script:
     - |
       if [[ "$CI_COMMIT_TAG" =~ release ]]; then
-        echo "Copying keystore file"
-        cp $KEYSTORE_FILE $CI_PROJECT_DIR/app/keystore.jks
+        echo "Downloading keystore file from GitLab secure files"
+        curl --header "JOB-TOKEN: ${CI_JOB_TOKEN}" \
+             --output $CI_PROJECT_DIR/app/keystore.jks \
+             "${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/uploads/${KEYSTORE_FILE_ID}"
         echo "Building signed release APK"
         ./gradlew assembleRelease -Pandroid.injected.signing.store.file=$CI_PROJECT_DIR/app/keystore.jks \
                                   -Pandroid.injected.signing.store.password=$KEYSTORE_PASSWORD \