Chjamu privacy policy

Developer: Saifullah Ahad
Effective: 7 September 2026 · Package: ai.saifullah.chjamu

1. What the app does

Chjamu records maternal or newborn warning signs, recommends a care action and lets a person raise an alarm to a private circle of people they have enrolled. Each listening phone keeps its own escalation countdown. A human must hold a button to acknowledge an alarm.

The current engineering build has not completed clinical review. It does not replace a nurse or doctor. Do not rely on it to rule out danger or to guarantee that another person will hear an alarm.

2. Information handled

• On your phone: entered name, pregnancy stage or days since birth, symptom answers, care actions, facility and phone numbers, circle members and roles, paired Bluetooth addresses, signed acknowledgement and alert history, and optional app-lock settings. These are stored in an encrypted local database. Biometric templates remain with Android; Chjamu receives an authentication result. A chosen PIN is salted and hashed.
• Encrypted circle messages: health answers, care context, names, entered contact numbers, membership changes and alert events are encrypted before transmission. Circle members hold the keys and can read information delivered to them. Enrollment codes contain or unlock the circle key; share them only with people you intend to enroll.
• Delivery metadata: Cloudflare handles opaque device, circle and event identifiers, public signing keys, push tokens, encrypted message bodies, request nonces and delivery order. As a network provider it processes connection information such as IP addresses. Our relay does not store plaintext symptoms, names, phone numbers or family relationships.
• Push delivery: Google Firebase Cloud Messaging processes app-installation identifiers, push registration tokens and message-delivery information. Push signals tell a phone to fetch encrypted circle messages. No symptom text is placed in the push notification payload.
• Camera: the camera reads an enrollment QR code after permission is granted. Frames are processed on the phone and are not saved or uploaded.

Chjamu does not access location, the address book, SMS inbox, call history or microphone. It does not include advertising, analytics or a crash-reporting SDK.

3. Purposes and permissions

Information is used to provide care questions, organize an enrolled circle, deliver alarms, verify signed human acknowledgement, resume pending alerts and produce a clinic sheet. Networking supports the encrypted relay, same-network discovery and direct TCP transfer. Bluetooth connects only to phones already paired in Android settings.

Notifications, Do Not Disturb access, alarm scheduling, foreground listening, wake locks and vibration support timely alarms. Full-screen alarm and battery settings are controlled by Android and the user. A stopped, disconnected or muted device may not ring. The app cannot restart itself after a user force-stop.

4. Sharing and providers

Information is disclosed to the circle members you choose. Cloudflare Workers, Durable Objects and D1 carry and retain encrypted messages and routing metadata. Firebase Cloud Messaging provides push delivery. The developer and relay do not hold your circle decryption key. Same-Wi-Fi and paired Bluetooth transfers carry the same encrypted, signed envelopes.

Calling and texting open your chosen phone or SMS application; you decide whether to place the call or send the message. Export opens Android's share chooser with a readable PDF. Your selected recipient or application then receives that file under its own privacy practices. Optional web links open your browser.

5. Retention and deletion

Saved information stays on your phone until you delete it, clear app storage or uninstall. Open alerts cannot be deleted silently: acknowledge and resolve or cancel them first. Use Your phone and choices → Your information → Erase this phone's information to erase local records and request removal of the circles this device owns or leave other circles. This requires internet access for the relay request to complete.

Encrypted relay event history is retained until the circle owner erases that circle. The relay cannot distinguish an unresolved alarm by reading encrypted health content, so it does not expire event history silently. Closing or leaving a circle stops its use for new alerts; existing copies and pending local countdowns remain on other enrolled phones. The server retains an opaque tombstone after erasure to prevent a deleted circle from being recreated by replay. Short-code invitations expire after fifteen minutes; authentication challenges and nonces have short expiry periods.

Deleting one written page removes the local record, not other phones' copies or exported PDFs. Removing app storage does not by itself issue a server deletion request. For help with deletion, contact the address below; do not send medical details or secret enrollment codes. We cannot recover an erased device's encryption or signing keys. Provider security and backup retention are governed by their policies.

6. Feedback and safety reports

Feedback and safety reporting open an email composer addressed to www.saifullah.ai@gmail.com. Nothing is sent until you send the email. Its contents and sender address are processed by your email provider and the developer's mailbox for support. Do not include health answers, enrollment keys or information about children that is unnecessary for your report. Ask us to remove a support email when the issue is closed, subject to necessary legal retention.

7. Children

Chjamu is intended for adult patients, caregivers and care-circle members. Adults may enter information about a newborn in their care; that information is sensitive and should be shared only with trusted caregivers. We do not knowingly solicit accounts from children. Child sexual abuse and exploitation are prohibited. Read the separate child-safety standards and use the in-app safety report or contact email to report a concern.

8. Changes

We will update this page and its effective date when data handling changes. Material changes will also be reflected in the app's information screen where appropriate.

9. Contact

Saifullah Ahad
www.saifullah.ai@gmail.com
saifullah.ai

Cloudflare privacy policy · Firebase privacy information · Privacy policy directory