Privacy Policy - Lebese

1) Who we are

Lebese is provided by Saifullah Ahad ("we", "us", "our"). Website: saifullah.ai.

2) What Lebese does

Lebese helps a household photograph or manually enter milk-delivery slip readings, calculate an expected payment from a selected rate rule, reconcile a statement, and review statistical patterns in its own confirmed records.

3) Data stored only on your device

Lebese can store the dairy name, currency, selected or custom rate rule, slip photos, confirmed quantity/fat/SNF/CLR readings, expected and printed amounts, arithmetic traces, monthly statement lines and totals, optional feed/animal/medicine/collection context notes, and derived pattern results.

This household information stays in the app's private storage on your device. It is not uploaded to us, sold, shared, used for advertising, or used to train an AI model. Lebese has no account, user profile, analytics SDK, advertising SDK, billing SDK, cloud database, or crash-reporting SDK.

4) Camera and on-device text recognition

Lebese requests CAMERA only after you choose to photograph a slip. A full-resolution photo is saved in the app's private storage and processed locally. You can deny camera access and enter the numbers manually.

Text recognition runs on-device through Google ML Kit supplied by Google Play services. Google Play services may download the text-recognition model, but Lebese does not send the photographed image or recognized slip text to Google or to the developer.

5) Public rule catalog and internet access

Lebese uses INTERNET and ACCESS_NETWORK_STATE to download a small versioned public rule catalog over HTTPS from lebese-rules.pages.dev. The request contains no slip image, reading, amount, household record, account, advertising identifier, or app-generated user identifier. A validated copy is cached for offline use; a failed refresh does not replace a valid cache.

Cloudflare, which serves the static file, may process ordinary network metadata such as an IP address as needed to deliver and secure the request under its own policies. We do not operate a user database or receive household records from this service.

6) Optional app lock

If you set a Lebese App PIN, a salted SHA-256 hash of the PIN plus a fresh random 16-byte salt is stored in the app's local DataStore. The plain-text PIN is never stored or transmitted. Biometric unlock uses Android BiometricPrompt; fingerprint or face data is handled by Android and is never given to Lebese.

The Lebese App PIN is separate from your device PIN. Lebese cannot read your device PIN, and your device PIN or pattern will not unlock Lebese. Cloud backup and device-to-device transfer are disabled (android:allowBackup="false"), so the App PIN hash, salt, and household records are not included in Android backup.

7) Export and sharing

When you choose Export deliveries, Lebese creates a CSV file in temporary app storage and opens Android's share sheet. Nothing is shared until you choose another app or recipient. The receiving app's privacy terms then apply.

8) Retention, deletion, and your controls

• Correct every OCR field before saving; low-confidence fields are marked for review.
• Delete an individual delivery from its arithmetic screen.
• Delete all delivery, statement, and context records from Settings.
• Revoke camera or biometric permission in Android Settings.
• Clear app storage or uninstall Lebese to remove its local data.

9) Security

Lebese uses encrypted HTTPS for the public catalog, rejects cleartext network traffic, validates downloaded JSON, stores records in Android private app storage, disables Android backup and device transfer, and offers optional independent App PIN and biometric methods. No method can guarantee absolute security on a compromised device.

10) Accuracy and decision boundary

OCR can be wrong, dairy rules can change, and published sources may cover only named dates or combinations. Lebese requires review, records the rule version, and refuses unsupported dates or sparse-table points rather than estimating them. Calculations and pattern reports are informational record-checking tools, not legal proof, a payment demand, an accusation, or veterinary advice.

11) Children

Lebese is a household record utility and is not directed to children under 13. It has no social features, messaging, public profiles, or user-generated content service, and it does not knowingly collect personal information from children.

12) International data transfers

We do not transfer household records because Lebese does not transmit them. A request for the public catalog may be routed internationally by Cloudflare as part of normal static-content delivery.

13) Changes to this policy

We may update this policy when Lebese's real data practices change. The current version and effective date will remain at privacy.saifullah.ai/Lebese.html.

14) Contact

Privacy questions or requests: Saifullah Ahad
Email: www.saifullah.ai@gmail.com
Website: https://saifullah.ai
Location: Dhaka, Bangladesh