1. Introduction and what Khutla does
Khutla is provided by Saifullah Ahad. It records a small boat's own trip, moves signed and encrypted trip bundles between nearby Khutla phones, and lets a linked shore phone calculate a probability-ranked area when a trip passes its expected return time.
Khutla is a trip-evidence and search-planning tool. It does not send automatic alerts, contact authorities, or replace marine equipment, local procedures, or professional assistance.
Khutla has no user account, public profile, social feed, advertising, analytics, or live fleet map. Positions belong to a boat trip rather than a person, and another carrier cannot open the coordinates inside a carried bundle.
2. Data we collect
- Boat-trip information: when you deliberately start a trip, the travelling phone records precise latitude and longitude, timestamp, Android monotonic time, speed over ground, bearing, accuracy, expected trip duration, the boat name you enter, and return state. Location is not recorded before a trip starts.
- Relay information: Khutla creates random pseudonymous boat, trip, route, and bundle identifiers; signed sequence and expiry values; encrypted track payloads; and custody/delivery state. Route and bundle identifiers are not advertising identifiers.
Khutla does not collect contacts, phone numbers, photographs, microphone audio, financial data, advertising identifiers, or biometric templates.
Optional App Lock material stays on the device. If you set a Khutla PIN, a salted SHA-256 hash plus a fresh random 16-byte salt is stored in local DataStore. The plain-text PIN is never stored. BiometricPrompt never gives fingerprint or face data to Khutla. The Khutla PIN is separate from the device PIN; the app cannot read the device PIN, and the device PIN cannot unlock Khutla. Android cloud backup is disabled.
3. How we use data
- Record, compress, encrypt, sign, and display the boat's active trip.
- Compare bundle digests, resume interrupted transfers, maintain custody counts, and deliver only bundles a receiving phone lacks.
- Retrieve a linked route's encrypted bundles when a shore phone has network access.
- Return a delivery receipt through later contacts so carrying phones know when shore received a bundle.
- Calculate a deterministic, widening probability field from the latest readable trip evidence after the return line passes.
4. Data sharing and service providers
Nearby Khutla phones: direct Nearby Connections exchanges can share bundle identifiers, trip identifiers, sequence/return state, expiry, custody state, origin public key and signature, and encrypted payload. Precise coordinates remain inside AES-GCM ciphertext. A linked phone with the matching secret can decrypt them.
Cloudflare: a carrier can upload the same opaque bundle to the Khutla Worker and D1 relay over HTTPS. Cloudflare processes and temporarily stores ciphertext and routing metadata so the unguessable linked route can retrieve it. Once shore acknowledges retrieval, the row is marked delivered and hidden from later shore reads but retained until expiry so a carrier can collect the receipt. The relay has no account directory and no endpoint that lists routes globally.
Google Play services: Khutla uses the Fused Location Provider for active-trip locations and Nearby Connections for direct device contact. Their operation is subject to Google's applicable terms and privacy policy.
Email composer: the optional feedback action opens your chosen email app with your message and a Khutla version/device footer prefilled. Khutla does not send or collect the email itself. You can review or edit everything before sending; your email provider processes a message only if you choose to send it.
SMS composer: if you choose the last-hop action, Khutla opens the system SMS app with a compact retrieval reference. Khutla has no SMS permission and does not send the message. The recipient and mobile provider receive it only if you choose to send it.
We do not sell data, use it for advertising, or share it with data brokers.
After linking, Khutla keeps direct relay discovery ready through a low-priority ongoing notification. This does not record location. Location collection starts only when you deliberately start a trip and stops when you mark the boat returned.
5. Retention, security, and deletion
Track samples are encrypted in Android app-private storage. Origin bundles are signed with an Android Keystore P-256 key and encrypted with AES-GCM. Network transfer uses HTTPS; Nearby Connections protects its transport as provided by Google Play services.
- Returned bundles are set to expire after 7 days.
- Unresolved active bundles expire after the expected return plus no more than 30 days. The Cloudflare relay rejects retention beyond 31 days from upload and deletes expired rows daily and during reads.
Use Settings → Delete all Khutla data to remove trips, track samples, carried bundles, custody receipts, search assignments, the link secret, local identifiers, encryption keys, and App Lock material from that phone. Clearing Android app storage or uninstalling does the same. A local deletion cannot recall an encrypted bundle already carried by another device; those copies expire automatically.
6. Optional feedback
The About screen contains a voluntary feedback action that opens your email app. Nothing is transmitted until you review the draft and tap Send in that email app. Do not include another person's location, medical information, passwords, or other sensitive information. If you send feedback, you may later request deletion of the resulting correspondence by emailing us from the same address and identifying the message.
7. Children's privacy
Khutla is intended for adults operating small boats and adults who keep the linked shore phone. It is not directed to children under 13, and we do not knowingly collect personal information from children.
8. Changes to this policy
We may update this policy when Khutla's data practices or applicable requirements change. The current version and effective date will remain available at https://privacy.saifullah.ai/Khutla.html.
9. Contact
Saifullah Ahad
Email: www.saifullah.ai@gmail.com
Website: https://saifullah.ai
Phone: +880 1711-134346
Location: Dhaka, Bangladesh