Privacy Policy — Shigowa

1. Who provides Shigowa

Shigowa is provided by Saifullah Ahad. Contact [email protected] or visit saifullah.ai.

2. What Shigowa does

Shigowa lets a sender and receiver independently record the two ends of a money transfer, pair those records with a code, and compare what arrived with dated currency reference values. It does not send, hold, exchange, lend, or receive money.

3. Information processed

• Transfer records: amounts, three-letter currencies, transfer service, payout method, dates, completion state, pairing code, and any optional context note you enter.
• Pseudonymous device account: a random device identifier and public cryptographic key. Shigowa does not ask for your name, email address, phone number, or contacts.
• Security and integrity signals: a protected, coarse network cluster and device relationship signals used to detect repeated or coordinated evidence. Raw network addresses are not published.
• Optional notifications: a Firebase Cloud Messaging token when you enable paired-record notifications.
• Safety controls: reports, report details, and blocks you submit.
• Local settings: app-lock choices, a salted slow hash of a Shigowa PIN, reduced-motion preference, sync cursor, and queued offline work. The PIN itself is never stored or sent.

4. Why information is used

We use this information only to create and pair records, calculate dated comparisons, synchronize offline work, show eligible aggregate route evidence, prevent manipulation, moderate reported content, deliver optional notifications, and support export or deletion requests.

5. Service providers and disclosure

• Cloudflare hosts the Shigowa API and isolated database and processes requests needed to operate the service.
• Google Firebase Cloud Messaging delivers optional paired-record notifications. Firebase is used only when notifications are enabled.
• Historical currency reference sources are requested by the server to calculate dated comparisons; they do not receive your transfer record or device identifier.

We do not sell personal information, use it for advertising, or provide it to data brokers. Information may be disclosed when required by law or necessary to respond to child-safety, fraud, or security incidents.

6. Aggregate route evidence

A sender-only claim never enters public evidence. A route cell is shown only after at least 8 confirmed pairs across 5 independent clusters. Public output may show a corridor, service and method, broad amount band, 90-day window, sample counts, aggregate statistics, and moderated aggregate notes. It never publishes exact household amounts, exact event times, pairing codes, device identifiers, or raw notes. Related records are excluded as a group.

7. Retention

Raw transfer records and the pseudonymous device account remain while the account is active so records can sync and evidence can be recalculated. A notification token remains until notifications are disabled or the account is deleted. Safety reports are retained as needed to review and enforce the rules. Local data remains until you delete it, clear app storage, or uninstall the app.

8. Your controls

Deleting the account removes its device key, push token, raw transfer records, confirmations, pairing bindings, blocks, and reports submitted by that account. Affected aggregates are recalculated from the remaining eligible pairs. Records supplied independently by another account are controlled by that account.

9. Security

Connections use HTTPS. Mutations are signed with a P-256 key held in Android Keystore and use idempotency keys. Android backup is disabled for Shigowa. Optional biometric unlock and the dedicated Shigowa PIN are independent; device credentials are not used as an app-lock fallback. No system is completely risk-free.

10. Children and user content

Shigowa is intended for adults. Optional notes and reports must not contain personal contact details, harassment, or content that exploits or endangers a child. Shigowa prohibits child sexual abuse and exploitation (CSAE), including CSAM, grooming, solicitation, and sexualization of minors. See the Shigowa Child Safety Standards.

11. International processing

Cloud infrastructure may process information outside your country. The safeguards and limited purposes described in this policy apply wherever processing occurs.

12. Changes and contact

We may update this policy when the service or legal requirements change. The current version and effective date will remain at this URL. For privacy, deletion, or safety questions, email [email protected].