Privacy Policy — Veivuke

1. Who provides Veivuke

Veivuke is provided by Saifullah Ahad, an independent app developer in Dhaka, Bangladesh. Contact www.saifullah.ai@gmail.com or visit saifullah.ai.

2. Who the app is for

Veivuke is an adult-to-adult service. A parent or other responsible adult may photograph one child's completed Year 1–2 homework page and receive a structured second look from another adult. There are no child accounts, child profiles, public posts, user search, chat, comments, lessons, payments, or direct contact between users.

3. Information handled

• Covered homework page: the app processes a camera photo on the device. It blocks upload when a face is detected, proposes dark masks over likely identifying details, and requires the adult to confirm that no face, name, school mark, ID, address, email, or phone number remains visible. Only the masked copy is uploaded.
• Anonymous adult account: an opaque account ID, device-generated public signing key, encrypted session credential, recovery-code hash, chosen subject categories, availability, and account timestamps.
• Checking data: structured choices such as “Looks right,” “Needs another look,” or “Not sure,” a selected mistake category, response timing, internally derived confidence, and agreement between independent checks. Veivuke uses these signals privately for matching; it never displays an ability level or public score.
• Optional rough area: if you allow approximate location, the app converts the last available approximate location into a broad quarter-degree area cell. Exact coordinates are not uploaded, stored, or shown to another person. You can skip this permission.
• Safety and operations: reports, account-to-account blocks, page status, subject/year band, mask and question counts, reciprocity balance, fatigue guard, and idempotency/rate-limit events.
• Notifications: a Firebase Cloud Messaging device token, if notifications are enabled, so the app can announce an assigned check or ready result.

4. Information not collected

Veivuke does not ask for a real name, email address, phone number, child's name, school, child account, contact list, advertising ID, precise location, payment information, or profile photo. It has no advertising or analytics SDK and does not sell personal information.

5. Camera and on-device safety processing

The camera opens only when an adult starts “Send one page.” Veivuke uses Google ML Kit models delivered through Google Play services for face detection and text-region detection on the device. The original unmasked photo is not sent to Google by Veivuke and is deleted from the app's temporary storage after processing or when the flow is abandoned. If safety processing cannot finish, upload fails closed.

6. Why information is used

Information is used only to operate the requested exchange: protect identity, match a page to an adult with relevant privately inferred experience, deliver the masked page, obtain an independent second review when required, show one parent action, prevent overload, send optional status notifications, respond to reports, prevent blocked users from being paired again, and secure or delete the account.

7. Service providers and international processing

• Cloudflare: Workers processes signed API requests, D1 stores account and workflow records, private R2 temporarily stores masked page images, and Queues enforces image expiry.
• Google Firebase: Firebase Cloud Messaging delivers optional push notifications. The Firebase project is used for messaging only; Veivuke does not use Firebase Analytics.
• Google Play services: may deliver the on-device ML Kit models used for privacy screening.

These providers may process data in countries outside yours under their own security and legal safeguards. Data is not shared with advertisers or data brokers.

8. Retention

• A masked page image is deleted immediately after its result is marked seen, after removal or reporting, or automatically within six hours of upload (the scheduled limit is approximately 5 hours 45 minutes).
• Structured result details and the parent action are removed when the result is marked seen.
• A minimal operational record (for example subject, year band, timestamps, and final non-content status) may remain while the anonymous adult account exists to enforce limits and integrity.
• Encrypted task-image copies on a checker's phone are removed after submission/reporting or expiry.
• Safety reports and blocks may be retained as necessary to prevent abuse, meet legal duties, and protect users. They do not retain the reported page image after quarantine.
• Deleting the account removes its credentials, settings, notification token, owned pages, checks, local encrypted data, and active contributions. Limited safety records may be retained only when legally or operationally necessary.

9. Security

Requests are signed by a P-256 key held in Android Keystore. Sensitive local values and cached files use AES-GCM keys held in Android Keystore. Server access uses HTTPS, private object storage, short-lived images, assignment checks, rate limits, and replay-resistant idempotency keys. App Lock is optional: biometric mode accepts fingerprint or face only, never the device PIN/pattern fallback; a separate 4–8 digit Veivuke App PIN is stored as a salted SHA-256 digest using a random 16-byte salt. No system can guarantee absolute security.

10. Permissions

• CAMERA: photograph one finished page.
• INTERNET and network state: send the masked page, checks, account requests, and notifications.
• ACCESS_COARSE_LOCATION: optional broad-area matching only.
• POST_NOTIFICATIONS: optional check/result alerts on supported Android versions.
• USE_BIOMETRIC: optional App Lock.

11. Your choices and deletion

You may skip rough-area matching, turn notifications off in Android Settings, pause availability without losing access to help, remove any page before completion, report any assigned item, export account data, or permanently delete the account inside More → Your account. If the app is unavailable, use the web deletion page with the account ID from your export and your recovery code.

12. Children's privacy and safety

Children do not use Veivuke directly. Adults must keep faces and identifiers out of every shared page. We prohibit child sexual abuse and exploitation (CSAE), grooming, sexual content involving minors, attempts to identify or contact a child, and any unsafe or non-homework content. Read the separate Child Safety Standards.

13. Changes and contact

Material updates will be posted here with a new effective date. For privacy requests or questions, email www.saifullah.ai@gmail.com. For urgent child-safety concerns, use the in-app report action and the contact in our Child Safety Standards.