Privacy Policy

Skammtur has no advertising or user profiling. It does not sell personal data. It uses only the data needed to secure accounts, synchronize private prep records, calculate forecasts, provide selected-place weather evidence, and send an alert when enabled.

Data Skammtur processes

• Account: email address, Firebase user ID, authentication tokens, and app-attestation tokens.
• Private operating records: stall name, selected place and time zone, schedule, menu constraints, closeout tallies, sold-out marks, generated plans, and command identifiers used to prevent duplicate submissions.
• Selected-place weather: coordinates for the place you choose in search, the forecast date, temperature, rain probability, weather code, source, and freshness state. The app never requests device location permission.
• Optional notifications: Firebase Cloud Messaging device token, alert preference, schedule, and last delivery state.
• Limited service diagnostics: Firebase and Cloudflare may process network and request metadata needed for authentication, abuse prevention, reliability, and security. Skammtur does not use this data for advertising.

Where data is processed

Firebase Authentication secures the account. Firebase App Check verifies genuine app requests, and Firebase Cloud Messaging delivers optional alerts. A dedicated Cloudflare Worker validates both security tokens, computes plans, and stores private records in Cloudflare D1. Open-Meteo receives the user-selected place coordinates and date to return weather or place-search results. Processing may occur outside your country.

Provider policies: Firebase privacy, Cloudflare privacy, and Open-Meteo terms and privacy information.

Local storage and offline retry

The app’s private Room database keeps the latest synchronized response and any closeout waiting for connectivity. Android DataStore keeps preferences. This local data is removed by account deletion, sign-out cleanup, or uninstalling the app. Cloud backup and device-transfer backup are disabled.

Optional app lock

Security material for the optional app lock: if you set an App PIN, a salted SHA-256 hash of the PIN plus a fresh random 16-byte salt is stored in the app’s local DataStore. The plain-text PIN is never stored or transmitted. Biometric unlock uses Android BiometricPrompt, which never gives fingerprint or face data to Skammtur.

The App PIN is separate from your device PIN. Skammtur cannot read your device PIN, and your device PIN will not unlock the app. Cloud backup is disabled so the PIN hash and salt are not included in Google Drive auto-backup or app device transfer.

Purpose, sharing, and legal basis

Data is used to provide the requested service, secure it, synchronize records, calculate transparent estimates, deliver an enabled notification, support export/deletion, and prevent duplicate or abusive requests. Data is shared only with the processors named above for those purposes, or when legally required. It is not sold, rented, or shared with data brokers or advertisers.

Retention and deletion

Account and operating records remain until you delete the account. Short-lived idempotency results expire after 24 hours. Weather cache records expire after no more than 72 hours and are keyed by rounded selected-place coordinates rather than user ID. Service security logs follow the providers’ limited retention practices.

You can export your current server data in Settings → Export my data. You can permanently remove the Firebase account and private server records in Settings → Delete account and data. You may also contact the developer for help.

Permissions

• Internet and network state for account sync and production service access.
• Notifications only when you choose the daily prep alert on supported Android versions.
• Biometrics only when you choose fingerprint or face unlock.

Security, children, and changes

Requests use encrypted HTTPS transport, Firebase Authentication, Firebase App Check, per-user authorization, input limits, and rate limiting. No system is risk-free. Skammtur is a business operations tool for adults and is not directed to children. It has no public profiles, sharing, chat, or user-generated public content. Material policy changes will be published on this page with an updated effective date.

Contact

Saifullah · [email protected] · saifullah.ai