Atentli Privacy Policy

Effective: 30 September 2026
Developer: Saifullah Ahad
Android package: ai.saifullah.atentli

What Atentli does

Atentli reads public satellite pictures to show past river edges near a saved place. It shows recorded distances, compares saved plots and offers an optional river-flow outlook. It does not predict land loss, provide an official warning or replace local authorities.

Your saved places

The exact coordinates and the name you give a place are stored in the app's private database on your phone, encrypted with an Android Keystore key. Draft place details use the same protection. These details are not sent to the developer or to the public-data providers. Atentli has no account system, advertising, analytics or crash-reporting service.

Android cloud backup is disabled. Explicit data-extraction rules exclude app files, databases, preferences and external app storage from cloud backup and device-to-device transfer. Clearing the app's data or uninstalling removes its local records. A lost encryption key cannot be recovered by the developer.

Public-data requests

When you choose a first look, Atentli connects directly over HTTPS to AWS Earth Search and the Sentinel COG archive. Requests identify a public discovery grid or an analysis block approximately 20 km across, and selected public picture byte ranges. They do not include your exact pin or your saved label. These grid requests reveal the general region being examined.

Open-Meteo receives public river-grid centres for historical discharge and optional flow outlooks. If you choose to search for a town or village, the words you enter are sent to Open-Meteo Geocoding. The search explanation appears before you submit. Short map links are not followed: coordinates embedded in a link are parsed on the phone.

Each provider necessarily receives the connection's IP address and request metadata, and may retain service logs under its own policy. The developer does not operate a request relay or shared-map server. See Open-Meteo's terms and privacy information, AWS Privacy Notice and Element 84 privacy information.

Location and permissions

Location access is optional and foreground only. Tapping “I'm here now” requests a current location through Android's location service. Precise location positions the pin against 20 m satellite pixels; you may instead type coordinates or use a family code. There is no background location permission or tracking. You can revoke location permission in Android Settings.

Internet and network-state access support public-data downloads and the Wi-Fi preference. A foreground data-sync notification keeps a user-requested first look visible while it continues. Notification permission is optional for local flow updates. There is no camera or broad photo-storage permission: a system picker reads only the QR picture you choose.

Family codes and sharing

A family text code or QR contains the exact coordinates and the place name. It is a readable transfer format, not encryption or a private link. Anyone you give the code to can read both. The app explains this before opening Android's share sheet. The receiving app and recipient are your choice; their handling is governed by their own policies. Atentli does not upload, publish or moderate codes on a server.

Optional app lock

An App PIN is separate from your device PIN. A random 16-byte salt and salted SHA-256 hash are stored in local DataStore; the plain PIN is never stored or transmitted. Repeated unsuccessful attempts introduce a delay. Biometric unlock uses Android's BiometricPrompt for fingerprint or face only. The app does not receive biometric data, and your device PIN or pattern is not an app-unlock method.

Storage, downloads and deletion

Saved river masks contain public satellite information. Completed masks remain on the phone for later viewing. Raw compressed picture chunks use a size-capped cache and are removed after their year's mask is completed. Public metadata may be cached to resume work and avoid repeated requests. Monthly data-use totals stay on the phone.

Data and deletion lets you clear raw picture chunks, delete a place with an Undo action, or confirm deletion of all saved places, masks and drafts. Optional lock settings can be changed or removed in Privacy and access. Android's Clear storage removes all app data, including lock settings. Copies already shared with another person cannot be deleted from their device by Atentli.

Background flow checks

Daily flow checks run only after you turn them on for a place. You can turn them off and choose whether they may use mobile data. The watch fetches a small flow outlook only; it never downloads raw satellite tiles. Notifications describe flow, not bank movement. No flow watch is scheduled without opt-in.

Feedback, children and changes

Send feedback opens your chosen email app addressed to the public support email below. Atentli does not send the email itself or automatically attach a saved pin, label or code. Information you choose to email is used to respond and investigate your request; ask by email to delete that correspondence.

Atentli is intended for adults. It has no public posts, social accounts or chat. See its child-safety standards. If you believe a child has sent personal information to the developer, contact us. Policy changes will appear on this page with a revised effective date.