Kuhama Privacy Policy

Information you enter

The app stores household counts, mobility categories, cargo categories, vehicle capacity, route estimates, warning-relative times and recorded journeys. Optional names are display labels stored only on the device that entered them. No name, note, photograph, precise location or other free text is included in lane messages. The app does not request location, microphone, contacts or SMS access.

Storage on your device

Household state and local labels are saved in an encrypted app-private journal using a key held by Android Keystore. Signing keys identify the device within a lane. Android backup and device-transfer exclusions are configured for app data. Actual behavior on supported devices remains part of release testing. Access to an unlocked device may allow someone to use the app; there is no additional app password.

Sharing with known neighbors

A lane is invite-only. Anyone holding its invitation can join and read its shared structured facts. Show invitations only to neighbors you trust. Every member can see counts, mobility needs, vehicle details, cargo categories and journey records. Each device derives its own plan from those facts. Names stay local.

Lane invitations can be shared using an on-screen QR code or invitation code. State updates are exchanged through the encrypted relay using the Sync lane action, with manual text import available as a fallback. The system QR scanner uses Google Play services; Kuhama does not receive or store camera photographs. Scanner availability may require a Google component download.

Cloud relay

When you choose Sync lane, the app sends an HTTPS request to the Cloudflare relay. The relay receives your device public signing key, a signature, and an end-to-end encrypted snapshot (AES-256-GCM) of your structured facts (counts, mobility categories, vehicle specs, cargo tiers and trip events). The relay also records opaque lane identifiers, sequence numbers and receipt times. It never receives your lane encryption key, personal names or private notes. Cloudflare processes standard network metadata such as IP addresses and request timing.

The latest encrypted snapshot stays on the relay and in neighbors' copies. The relay has no automated expiration or in-app remote deletion endpoint. Deleting data in the app removes only what is on the phone. To request deletion of a relay snapshot, contact the developer at the email address below with your opaque lane identifier and device public key. Do not send an invitation code, lane secret, or personal household details by email.

Optional notifications

If you enable silent lane update notifications, Firebase Cloud Messaging and Google Play services process an installation identifier, notification token and opaque lane-topic subscription to deliver an update prompt. The notification token is registered directly with Google and never leaves the phone to the relay. Firebase is used for push delivery only; Kuhama does not use Firebase for household data, advertising or analytics. Notification content is a generic request to open the app and sync. It is not a verified plan or an official warning. You can turn notifications off in Neighbors or in Android Settings. Delivery is not guaranteed.

Leaving and deleting

Leave this lane creates a signed departure record locally. Sync that update so other members learn that you left. You do not need another person's permission. Leaving does not revoke an invitation key already copied by someone else; use a new lane for future private collaboration.

Using About and data → Delete all data on this phone removes only what is on the phone: it permanently deletes your local household journal, Keystore keys, and notification subscriptions. It does not erase the latest encrypted snapshot stored on the relay or copies already received by neighbors. Uninstalling also removes only local app data. To ask the developer to delete a relay snapshot, email the contact address below.

Other services and choices

Feedback opens your chosen email app. Information you send voluntarily is handled by your email provider and the developer for support. Kuhama has no advertising SDK, purchases, public profile, chat or public feed. We do not sell household data. Service providers may process infrastructure records under their own policies: Cloudflare and Google.

Contact and changes

Contact Saifullah Ahad at [email protected]. This page will be updated when the app's data practices change.