Privacy Policy - Kuyu

1) Who We Are

Kuyu is developed by Saifullah Ahad as an independent tool for collaborative tube-well siting in rural communities.

2) What Kuyu Does

Kuyu enables community members and funding partners to map households, water points and barriers, compare preliminary well plans, and record agreement. The solver checks marked exclusions and entered cost limits on a candidate grid. It does not verify walking paths, land permission, suitable drilling depth, water quality or dry-season yield. Field surveys, local quotes and water testing remain necessary.

3) Permissions Used and Why

• ACCESS_COARSE_LOCATION: Location (approximate) is collected for the app's function; it is optional; it is collected only when the person allows it; and it is used only to place the settlement's center. Location is strictly foreground only and never tracked continuously or in the background.
• INTERNET and ACCESS_NETWORK_STATE: Used to synchronize settlement map marks, solver options, and agreement records with the Kuyu coordination API.
• POST_NOTIFICATIONS: Supports site-update notifications. Google Firebase Cloud Messaging (FCM) can issue an installation identifier and push token; the current Kuyu backend does not send site-update pushes.

4) Information We Collect and Process

• Location: Optional foreground device location helps place the settlement center after permission. You can instead choose it manually. Submitted center and marker coordinates are sent to Kuyu even when location permission is refused. No background location tracking is used.
• Settlement Data: Household coordinates, sizes, trips per day and vulnerable-carrier flags; water-point coordinates, status, depths and notes; barrier polygons; confirmations, reports and agreement records.
• Planning Figures: Site budget, maximum wells, pump choice, funding deadline and local well/pump cost estimates are stored and shared with site members. Solver input snapshots and complete proposed plans are retained. No payment, bank-account or card details are requested.
• Device Identifiers: A hashed Android ID is sent during registration. The backend issues a random device identifier and authentication token. Google FCM also processes installation identifiers and push tokens. These identifiers are not personal names but can link activity from an installation.
• Notes: No account name, email or phone number is required. Do not enter unnecessary personal information in site names, notes or reports. The current app has no photo-upload feature.

Kuyu contains no advertising SDKs, no third-party tracking libraries, and no commercial data brokers.

5) Data Storage, Security & Deletion

Network transmission uses HTTPS/TLS. Site data and pending offline marks are cached in an on-device database. Kuyu's Cloudflare Workers and Durable Objects process and store synchronized site data, budgets, input snapshots, results and agreements. Members who join using the site code can view shared site data; protect that code. Google Firebase processes messaging identifiers. OpenStreetMap tile servers receive tile requests, the viewed map area and network information such as IP address when maps load. We do not sell data or use it for advertising.

Shared records and earlier solver snapshots are retained for the life of the site; there is no automatic expiry. The app supports reporting and disputing marks, but has no in-app site or marker deletion control. Removing the app does not remove server records. For correction, access or deletion requests, contact [email protected] with the site identity. We may need to verify your relationship to the site and consider other participants' records. Do not send your authentication token. No fixed deletion deadline is promised here.

6) Child Safety and User Content Standards

Kuyu prohibits harmful, abusive or sexually explicit content, including Child Sexual Abuse Material (CSAM) and Child Sexual Exploitation and Abuse (CSAE). Marks and notes can be reported in-app or to [email protected] for review. Kuyu is intended for people aged 13 and over; do not submit children's names or other unnecessary identifying details.

Read our full standards at: https://privacy.saifullah.ai/kuyu/child-safety.