Dopokaz Privacy Policy

Updated October 24, 2026. Developer: Saifullah Ahad.

Direct-Local Architecture

Dopokaz is an on-device cash handover evidence and ambiguity analysis tool. The application operates strictly offline and requests zero network permissions (no android.permission.INTERNET, no android.permission.ACCESS_NETWORK_STATE). All entered cash records, location totals, custody transfers, boundary assumptions, and calculated variance intervals are stored on your device unless you choose to export or share them. No remote servers, telemetry, tracking, or cloud services exist or receive data.

Data Stored Locally

The app stores only the data you choose to enter into audit cases:

• Case identifiers and titles
• Cash location names and counted checkpoint totals
• Transfer slips, amounts, and source/destination attributions
• Declared accounting assumptions and uncertainty notes
• Calculated joint variance bounds and alternative interpretation graphs
• Optional application security PIN (stored salted with SHA-256)

Security and Encryption

All database records and file attachments are encrypted on-device via chunked AES-256-GCM authenticated envelope encryption, utilizing a master key managed securely by the Android Keystore. Cloud auto-backup is explicitly disabled (android:allowBackup="false" and full Android 12+ data extraction exclusion rules), excluding the app storage from Android automatic backup and device-transfer configurations. Files you explicitly export are controlled by your chosen destination.

Data Export and Sharing

Export of case data or audit reports occurs solely when you explicitly initiate an export. Encrypted case archives (.dpkz) use PBKDF2WithHmacSHA256 key derivation and AES-GCM authenticated encryption. Any report or archive is shared only through the standard Android system share sheet with an application you deliberately select.

Data Retention and Deletion

You can delete individual records or entire cases directly from the application at any time. Uninstalling the application or clearing its application storage permanently erases all locally stored database entries and associated encryption keys. There is no central server copy. A previously exported archive can be restored with its passphrase. Delete exported files separately from the destinations you chose.

Contact

For inquiries regarding this policy or the application: [email protected].