Privacy Policy — Basagga

Effective date: 15 August 2026

Basagga has no account, ads, analytics, public profile, review feed, or free-text accusation field. Structured address details and original photographs stay on your device before a three-record threshold opens.

1. Who provides Basagga

Basagga is provided by Saifullah Ahad (“we”, “us”, “our”). Contact www.saifullah.ai@gmail.com or visit saifullah.ai.

2. What the app does

Basagga lets people independently seal factual records about one of eight fixed building-condition categories. A sealed record can open only when the stock app reconstructs a valid three-record threshold for the same normalized building and condition. Basagga is not an emergency service, tenancy verifier, legal adviser, or proof that a condition is true.

3. Information entered and kept on your device

The structured address is normalized and hashed on-device. The readable address and the normalized measurement are not sent to either service. The App PIN is separate from your device PIN; only a salted SHA-256 hash is stored. Android BiometricPrompt performs biometric authentication and does not disclose fingerprint or face data to Basagga.

4. Information processed by the separated services

Relay service: receives a device-generated public key and pseudonymous identifier, signed request nonces, timestamps, a photograph SHA-256 digest for a signed acceptance receipt, an opaque threshold share, a fixed-size encrypted capsule, and—after a threshold opens—encrypted key grants. If you explicitly share the original after opening, the relay stores only its encrypted bytes.

Randomness helper: receives a blinded number, signed nonce, pseudonymous device credential, and quota timing. It does not receive the readable address, condition, measurement, relay envelope, photograph, or report contents.

The relay pads public-board responses to fixed 128-item pages. It does not return a matching count or a recognizable padding marker. Even with this separation, a service administrator, modified client, colluding services, network observer, or person controlling several aged devices may weaken privacy or abuse resistance. Basagga does not claim perfect anonymity or Sybil resistance.

5. Photographs and acceptance-time receipts

The original photograph remains in Basagga’s private app storage before opening. Only its SHA-256 digest is sent for a signed receipt. That receipt shows when the relay accepted that digest; it does not prove capture time, location, authorship, tenancy, what the image depicts, or legal effect. After opening, sharing an encrypted original is a separate, explicit action. Members of that filing group may then decrypt it.

6. Network and service-provider metadata

Cloudflare hosts the relay, randomness helper, databases, encrypted-object storage, and security edge. Cloudflare may process IP address, request timing, request size, security events, and diagnostic logs as a service provider. Basagga does not use this information for advertising, cross-app tracking, or sale. Service processing can occur in countries where Cloudflare operates.

7. Sharing and disclosure

Basagga does not sell personal data. Before opening, readable report contents are not available to other users. When a threshold opens, each participating device exchanges separately encrypted report keys so the three participating records can be read within that group. There is no public directory, rating, review, chat, follower system, person search, or public media feed. We may disclose limited service information when legally required or necessary to investigate abuse and protect safety.

8. Retention, withdrawal, and deletion

The device keeps local app data until you withdraw a sealed record, clear app storage, or uninstall. Before opening, Withdraw sealed record deletes the active relay envelope, its receipt association, related encrypted grants or object metadata, the local encrypted record, and the app-owned photograph. Short-lived anti-abuse nonce and quota rows, infrastructure logs, and recovery copies may remain temporarily under operational retention schedules.

Uninstalling without withdrawing cannot authenticate a later server deletion. Withdraw any sealed records first. After opening, group members may already possess decrypted records or photographs; deleting one service copy cannot erase copies they retained. For a deletion or safety request you cannot complete in-app, email the contact below with the record ID if available.

9. Security

Local records use Android Keystore-backed AES-GCM encryption. Device commands use P-256 signatures, report-key grants use RSA-OAEP, photographs and report contents use authenticated encryption, and service requests use replay protection and quotas. Cloud backup and device transfer are disabled. No system can guarantee absolute security.

10. Children and safety reports

Basagga is not directed to children under 13. Child sexual abuse and exploitation (CSAE), grooming, trafficking, and content that endangers a child are prohibited. Every opened item includes a Report action that prepares an email with the record ID and selected reason; nothing is sent until you choose to send it. Read the separate Basagga Child Safety Standards.

11. Your choices and rights

You can stop before sealing, deny photograph access by not choosing a photo, withdraw a sealed record before opening, choose whether to share an encrypted original, disable the optional app lock, and contact us about access, deletion, objection, restriction, or another privacy right available where you live. Because there is no account and server records are intentionally pseudonymous and encrypted, we may need a record ID and may be unable to identify a record as yours without device-authenticated proof.

12. Changes

We may update this policy when the app or services change. The current version remains at privacy.saifullah.ai/basagga.html with a revised effective date.

13. Contact

Saifullah Ahad
Email: www.saifullah.ai@gmail.com
Website: https://saifullah.ai
Location: Dhaka, Bangladesh