Kuhama Privacy Policy

Information you enter

The app stores household counts, mobility categories, cargo categories, vehicle capacity, route estimates, warning-relative times and recorded journeys. Optional names are display labels stored only on the device that entered them. No name, note, photograph, precise location or other free text is included in lane messages. The app does not request location, microphone, contacts or SMS access.

Storage on your device

Household state and local labels are saved in an encrypted app-private journal using a key held by Android Keystore. Signing keys identify the device within a lane. Android backup and device-transfer exclusions are configured for app data. Actual behavior on supported devices remains part of release testing. Access to an unlocked device may allow someone to use the app; there is no additional app password.

Sharing with known neighbors

A lane is invite-only. Anyone holding its invitation can join and read its shared structured facts. Show invitations only to neighbors you trust. Every member can see counts, mobility needs, vehicle details, cargo categories and journey records. Each device derives its own plan from those facts. Names stay local.

State can be exchanged as encrypted text or a QR code. The system QR scanner uses Google Play services; Kuhama does not receive or store camera photographs. Scanner availability may require a Google component download. A large state update may not fit one QR or one SMS; this build does not promise that it will.

Cloud relay

When you choose Sync lane, Cloudflare Workers, a Durable Object and a D1 database relay encrypted state snapshots. The relay stores opaque lane identifiers, public signing keys or their identifiers, sequence numbers, encrypted packets and receipt times. It does not receive the lane encryption key or local names. Cloudflare necessarily processes network information such as IP addresses and request timing. The backend cannot create another member's valid signature, but it can delay or withhold information.

The current relay keeps the latest snapshot submitted by each device. It has no automatic expiry or in-app remote deletion endpoint. Local deletion and leaving do not erase relay snapshots or copies held by neighbors. This retention limit is disclosed while deletion and retention requirements are reviewed. Contact the developer for a deletion request; do not send an invitation, encryption key or private household details by email.

Optional notifications

If you enable silent lane update notifications, Firebase Cloud Messaging and Google Play services process an installation identifier, notification token and opaque lane-topic subscription to deliver an update prompt. Firebase is used for push delivery only; Kuhama does not use Firebase for household data, advertising or analytics. Notification content is a generic request to open the app and sync. It is not a verified plan or an official warning. You can turn notifications off in Neighbors or in Android Settings. Delivery is not guaranteed.

Leaving and deleting

Leave this lane creates a signed departure record locally. Share or sync that update so other members can learn that you left. You do not need another person's permission. Leaving does not revoke an invitation key already copied by someone else; use a new lane for future private collaboration.

About and data → Delete all data on this phone removes the household journal and its Keystore keys after confirmation and turns off the app's notification subscription. Other devices and the relay can retain already received copies. Uninstalling removes app-local data, subject to Android's behavior.

Other services and choices

Feedback opens your chosen email app. Information you send voluntarily is handled by your email provider and the developer for support. Kuhama has no advertising SDK, purchases, public profile, chat or public feed. We do not sell household data. Service providers may process infrastructure records under their own policies: Cloudflare and Google.

Contact and changes

Contact Saifullah Ahad at [email protected]. This page will be updated when the app's data practices change.