Oakvow icon

Oakvow Privacy Policy

Effective July 28, 2026

Oakvow is provided by Saifullah Ahad. Contact: [email protected].

Sealed record bodies are encrypted on the owner's device before upload. Oakvow's services receive ciphertext and separately encrypted guardian shares. The developer has no master key or content backdoor.

Information Oakvow handles

How information is used

Information is used only to authenticate members, synchronize the private family circle, store encrypted records, enforce the authoritative check-in/release process, deliver notifications, and protect the event history from tampering.

Infrastructure providers

Google Firebase processes authentication, synchronized circle data, encrypted records, and push delivery. Cloudflare processes authoritative timing, encrypted share release, event integrity, and notification delivery. Oakvow does not sell data or share it for advertising.

Security

Network traffic is encrypted in transit. Sensitive record bodies use client-side AES-256-GCM. Guardian shares use X25519 sealed boxes. Local owner and guardian material is protected by Argon2id, Android Keystore, and device authentication.

Open Shelf facts are intentionally readable by authenticated members of the invited family circle. They are not end-to-end encrypted and should not contain secrets intended for the Sealed Envelope.

Permissions and data not collected

Oakvow uses network access, network state, notifications, and biometric/device-credential access. It does not request location, contacts, SMS, call logs, camera, microphone, or broad storage access. It does not use the Advertising ID, advertising SDKs, analytics SDKs, or tracking SDKs.

Optional feedback

About Developer → Send feedback opens your chosen email app with the public support address and subject filled in. Oakvow does not send a feedback message itself, attach diagnostics, or read your email. Your email provider processes anything you choose to send.

Safety-report actions work the same way. They open your email app with a record type and non-secret record ID. Oakvow never attaches a record body or illegal material.

Retention

Circle content remains until deletion by the owner. Active authority state and device tokens are removed with the circle. A content-free signed audit chain may retain irreversible actor digests so its tamper evidence remains verifiable; those digests cannot recover an account or record contents.

Account and data deletion

Delete data inside Oakvow from Trust → Delete account and circle. Owner deletion recursively removes Open Shelf facts, ciphertext, encrypted shares, invitations, membership documents, device tokens, and active authority state. A guardian can delete their own account record and local keys.

If the app is unavailable, email [email protected] from the account email and request Oakvow deletion.

Children

Oakvow is a private family information tool and is not directed to children under 13. It has no public profiles, public posts, discovery, chat, or stranger contact. Oakvow prohibits child sexual abuse and exploitation. Read the Child Safety Standards for reporting instructions.

Legal and safety limits

Oakvow is not a legal will, does not decide inheritance, and is not an emergency, medical, financial, or legal service.

Changes and contact

Updates will appear on this page with a revised effective date. Questions may be sent to [email protected]. Website: saifullah.ai.