Privacy Policy — Tifluna

1) Who we are

Tifluna is provided by Saifullah Ahad ("we", "us", "our"). Our website is: https://saifullah.ai.

2) What this policy covers

This Privacy Policy explains what information Tifluna handles, how it is used, and the choices you have. Tifluna is an educational and triage-support tool. It does not diagnose. It does not replace a doctor, midwife, or community health worker. Every triage screen in the app carries this reminder.

3) Summary in one line

Tifluna stores everything on your device. It does not have user accounts, does not use analytics or advertising identifiers, and does not transmit your records anywhere. The only network calls Tifluna makes are when YOU tap "Send Feedback" or "Open map" on an emergency screen.

4) What stays on your device

• Profiles you add (pregnancies, babies, postnatal recovery entries).
• Check-in history (date, stage, danger signs you selected, triage result).
• Optional notes you add to a check-in.
• Vaccination records (vaccine code, due date, given date).
• ANC and PNC visit logs.
• Community-health-worker roster and visit logs (if you are in CHW mode).
• Your app preferences (language, country, mode, notification setting).
• App lock material: if you set an app PIN, only a salted SHA-256 hash and a 16-byte random salt are stored. The plain PIN is never stored.

All of the above is local to your device. Cloud backup is disabled (android:allowBackup="false") so the app's data and PIN material are not synced to Google Drive auto-backup.

5) Permissions Tifluna requests, and why

• POST_NOTIFICATIONS — to remind you about ANC visits, daily check-ins, and vaccination due dates. You can disable notifications at any time.
• RECEIVE_BOOT_COMPLETED — so your reminders survive a phone restart.
• VIBRATE — for the 60-second breath-counter timer.
• ACCESS_COARSE_LOCATION — only used at the moment you tap "Find nearest facility." Your location is held in memory just long enough to look up the bundled facility list, and is never stored or transmitted.
• CALL_PHONE — to allow one-tap dialing of an emergency number from the emergency routing screen. The dial intent always asks you to confirm before placing the call.
• USE_BIOMETRIC — only used if you enable biometric unlock for the App Lock feature. Tifluna uses Android's BiometricPrompt with BIOMETRIC_WEAK authenticators only; your fingerprint or face data is never given to the app.
• INTERNET — used only for two optional, user-initiated actions: "Send Feedback" (relayed through Web3Forms) and "Open map" on an emergency screen (opens your device's default map app).

6) Optional in-app feedback messages

Tifluna includes a Send Feedback option on the "About developer" screen. This feature is fully user-initiated — no message is ever sent unless you tap Send.

If you submit feedback:

• Your message text is delivered to the developer's email inbox.
• Your email address is optional. If you provide it, it is used solely so the developer can reply. If you leave it blank, the message is delivered anonymously and the developer cannot reply.
• A short technical footer is auto-attached to help reproduce bugs: app name, app version, Android version, device manufacturer, and device model. No identifiers, contacts, account data, or content from inside the app are sent.

The message is sent to a third-party email-relay service, Web3Forms (privacy policy: https://web3forms.com/privacy), which delivers it to www.saifullah.ai@gmail.com. Transmission is encrypted (HTTPS).

7) Optional App Lock

Tifluna includes an optional App Lock with two independent methods: biometric (fingerprint / face) and a dedicated 4-digit App PIN. Either, both, or neither may be enabled.

• The App PIN is separate from your device PIN. The app cannot read your device PIN, and your device PIN will not unlock Tifluna.
• If you set an App PIN, a salted SHA-256 hash of the PIN plus a random 16-byte salt are stored in Tifluna's local DataStore. The plain-text PIN is never stored.
• Biometric unlock uses Android's BiometricPrompt, which never gives your fingerprint or face data to the app.
• Cloud backup is disabled so the PIN hash and salt are never included in Google Drive auto-backup or device-to-device transfer.

8) Sharing and disclosure

Tifluna does not sell personal information.

Tifluna does not share your data with third parties except for the optional feedback feature described in section 6, where the message text and optional email address are transmitted to Web3Forms only as a relay to the developer's mailbox.

9) Data retention

On-device records persist until you delete them. You can delete individual profiles, or use Settings → "Erase all my data" to delete everything. Uninstalling the app also removes all on-device data.

For feedback emails already sent, you can email the developer at the address above to request deletion of your message from the mailbox.

10) Your choices and controls

• Permissions: you can allow or deny any permission in Android Settings → Apps → Tifluna.
• Language: Settings → Language. 32 languages supported.
• Notifications: Settings → Daily check-in notification switch, or Android system settings.
• App Lock: Settings → App lock. Off by default.
• Erase all my data: Settings → "Erase all my data" wipes every record stored by Tifluna on the device.

11) Children's privacy

Tifluna is designed for adult caregivers (mothers, fathers, community health workers) to assess danger signs in infants. The app is not directed to children. Tifluna does not knowingly collect personal information from anyone of any age, because the app does not collect data.

12) Security

All app data is local to the device. The optional App PIN is stored as a salted SHA-256 hash (16-byte random salt per set-PIN call). Cloud backup is disabled. Feedback transmission uses HTTPS.

We do not currently use SQLCipher for the local database. Migration to SQLCipher is planned for a future version. The on-device database is protected by Android's standard app-private storage isolation.

13) Medical disclaimer

Tifluna is an educational and triage-support tool, not a medical device. It does not diagnose. It does not replace a doctor, midwife, or community health worker. Triage rules and thresholds are sourced from WHO IMCI 2014, WHO Essential Newborn Care 2022, WHO ANC 2016, WHO PNC 2022, and Cochrane reviews; any clinical decision should be made by a qualified health worker.

14) Changes to this policy

If we ever introduce optional features that touch the network (for example, language pack downloads), this policy will be updated and you will see the change in the in-app About screen before any data leaves the device.

15) Contact

If you have questions or requests, contact: Saifullah Ahad
Email: www.saifullah.ai@gmail.com
Phone: +8801711134346
Website: https://saifullah.ai