Qulqulet: Downhill Speed Alert

1. Binding Trust Model & Core Principles

Qulqulet provides model-based downhill estimates for drivers of heavy trucks, buses, and commercial vehicles. It does not measure brake temperature or guarantee a safe speed. Its data handling is described below:

• Driving works without internet: All map-matching, road projection, and thermodynamic brake-temperature modeling execute locally on your physical device. No internet connectivity is required while driving.
• Zero Driver Scoring: Qulqulet never monitors driver habits, evaluates performance, scores driving safety, or calculates fleet compliance metrics.
• No Fleet Surveillance: There is no fleet portal, owner dashboard, telematics reporting, or background data transmission. The application serves the driver and the driver alone.
• Zero Telemetry & Zero Trackers: We do not include third-party analytics SDKs, advertising frameworks, crash telemetry reporting tools, or remote configuration servers.

2. Location Information & Platform GPS

Qulqulet requires precise location data exclusively during an active driving session to perform real-time map matching and detect upcoming descending grades:

• Platform-Only GPS: Location updates are requested solely via the standard Android platform LocationManager (GPS provider) at 1 Hz. Google Play Services Location APIs are intentionally excluded.
• Foreground Service Operation: GPS is accessed exclusively while a drive is actively running via a foreground service of type location, clearly identified by an ongoing persistent notification.
• Zero Background Location: Qulqulet does not request or possess the ACCESS_BACKGROUND_LOCATION permission. When you stop a drive, location polling ceases immediately.
• Transient Memory Processing: GPS coordinates are processed entirely in volatile device memory to match your position against locally installed road network tiles. Raw GPS fixes are never stored in databases, never written to disk, and never transmitted across the network.

3. Vehicle Profiles & Fleet Isolation

To provide accurate thermodynamic brake heat calculations (under the Federal Highway Administration Grade Severity Rating System), the app stores your vehicle parameters:

• Configuration Elements: Vehicle category (e.g., truck, trailer, bus), gross vehicle weight (tonnes), brake system type (air/drum, disc), and engine retarder status.
• Local Device Storage: Vehicle details are kept in the app's private storage on the phone. They are not encrypted and are not stored in a database. Phone backups of the app are turned off (allowBackup="false").
• Vehicle QR Sharing: The app shows a vehicle as a QR code on screen. The other driver scans it in Qulqulet or pastes the vehicle code. No server, account or internet is used.

4. On-Device Trip Records & Local Encryption

Qulqulet records a minimal local log of completed driving sessions to assist the driver in reviewing downhill descents:

• What Is Recorded: A trip record keeps its date and time, each downhill passed, its advisory top speed, and the kilometres driven at or under that speed.
• What Is NEVER Recorded: We never record GPS positions, the route, turn-by-turn tracks, who drove, or incident reports.
• Encryption at Rest: Trip records are encrypted on-device before storage using AES-GCM encryption with keys managed by Android Keystore. Hardware backing depends on the device.
• User-Initiated Export & Erasure: Trip logs can only be exported as a standard CSV file through the driver's explicit operating system file-picker action. The driver may delete individual trip records or wipe the entire trip history at any time.

5. Road Pack Downloads & Network Egress

Qulqulet uses the network to retrieve the public road-pack catalogue and download or update selected road packs:

• Static File Retrieval: Road pack files (containing OpenStreetMap road vectors and Copernicus GLO-30 elevation data) are fetched over HTTPS from Cloudflare R2 storage. The hosting provider receives ordinary request information such as the IP address, requested file and request time; this policy does not promise that the provider keeps no logs.
• No User Telemetry: Pack download requests carry zero user tokens, device identifiers, serial numbers, or location parameters.
• No Pre-Calculated Speeds: Road packs contain geometry and elevation profiles only. Model-based speed advisories are calculated on your phone from the entered vehicle parameters; they are not safety guarantees.
• Wi-Fi Safeguards: Wi-Fi only is on by default. Downloads start only when Android reports an unmetered internet network. They pause if the network becomes metered or disconnects, keep the bytes already saved, and resume automatically when an unmetered network returns while the app is open. Turning off Wi-Fi only allows downloads on metered networks, including mobile data.

6. Third-Party Services & Permissions

Qulqulet minimizes operating system permissions to the bare essentials required for road safety instrumentation:

• ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION: Used exclusively during active drive sessions for real-time map matching.
• FOREGROUND_SERVICE & FOREGROUND_SERVICE_LOCATION: Required to maintain uninterrupted downhill advisory alerts on the dashboard.
• POST_NOTIFICATIONS: Required to display the mandatory ongoing foreground service indicator and persistent drive status.
• INTERNET & ACCESS_NETWORK_STATE: Used solely to fetch public static road packs over HTTPS and check whether Android reports an unmetered network.
• CAMERA (optional): Used only for scanning a vehicle QR. Permission is asked when the driver taps Scan. Frames are read on the phone and never stored.
• ai.saifullah.qulqulet.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION: An app-only signature permission added by AndroidX to protect internal broadcast receivers. It does not ask for access to phone data.

7. Children's Privacy & Commercial Independence

Qulqulet is an industrial tool designed for professional and commercial vehicle operators. We do not knowingly collect or solicit any personal data from children under the age of 13 (or under 16 in the European Economic Area).

The app has no advertising, no paid features and no in-app purchases.

8. Contact & Developer Information

For questions, security inquiries, or technical feedback regarding this Privacy Policy and Qulqulet's data practices, contact:

Developer: Saifullah
Portfolio: https://saifullah.ai
Public Contact: [email protected]