Privacy Policy — Liafuan

1) Who we are

Liafuan is provided by Saifullah Ahad. Contact us at www.saifullah.ai@gmail.com or visit saifullah.ai.

2) What Liafuan does

Liafuan helps a family record speech, add rough meanings and spellings, review phone-suggested acoustic boundaries, compare observed forms, and export a family-owned dictionary. The complete capture, analysis, editing, playback, search, local comparison, and export workflow works on the device. A separate shared catalogue is optional, entry by entry.

3) Information kept on your device

• Language and private household labels, session history, prompts, rough meanings and spellings, notes, timing boundaries, confidence values, and bounded acoustic fingerprints.
• Original AAC-LC voice recordings in app-private storage.
• Contribution state, locally blocked anonymous household keys, and shared-catalogue cache data.
• App preferences, a salted one-way verifier for an optional Liafuan PIN, and optional anonymous service credentials.

The private household label is not uploaded. Android backup is disabled. Local entries and recordings remain until you delete them, clear Liafuan's app data, or uninstall the app.

4) Microphone and biometric access

RECORD_AUDIO is requested only after you open a recording session and press the recording control. Audio is recorded for the family folio and analysed on the device. Liafuan does not perform speech recognition or cloud transcription.

Fingerprint or face access is optional and is handled by Android's BiometricPrompt. Liafuan receives only the success or failure result, not biometric data. A Liafuan PIN is a separate option and is not your device PIN.

5) Optional shared catalogue

Nothing is contributed automatically. You choose one entry, confirm contribution, and separately choose whether to include its short audio clip.

Using the shared catalogue creates a random, anonymous device-household identity. Depending on the action you choose, Liafuan sends the following to the Liafuan service:

• a normalized language key and meaning key used to locate related forms;
• for a contributed entry: rough meaning, rough spelling, a bounded 16-value acoustic fingerprint, an anonymous household witness key, revision and revocation identifiers;
• a short audio clip only when you separately select audio for that entry;
• for safety reports: the shared contribution identifier and the reason you select.

No name, email address, profile, contact list, photograph, exact location, advertising identifier, or private household label is sent. Checking shared forms does not upload your local entry.

6) How cloud information is used and disclosed

Cloudflare Workers, Durable Objects, and R2 process and store optional catalogue traffic for service delivery, abuse prevention, revocation, and deletion. Cloudflare may process routine network metadata such as an IP address as part of delivering and protecting the service; Liafuan does not write that metadata into its catalogue database.

Active rough forms, bounded fingerprints, and anonymous household witness counts may be returned to other Liafuan users who search the same normalized language and meaning. Uploaded audio is stored for the selected contribution but is not returned by the current shared-variant interface. We do not sell data, use it for advertising, or use analytics, crash-reporting, or tracking SDKs.

7) Retention, withdrawal, and deletion

• Active shared contributions remain in the catalogue until withdrawn, the anonymous shared identity is deleted, or moderation hides them.
• Withdrawing an entry removes it from catalogue results and deletes its optional R2 audio object. The family's local entry remains.
• Deleting the shared identity revokes its access token, withdraws all linked contributions, and deletes all linked optional audio. The local folio remains.
• The service retains non-public withdrawn contribution rows, revoked anonymous installation records, and moderation reports as bounded integrity and safety records. They are no longer returned as active catalogue content and contain no name, email, private household label, or recording. There is currently no fixed automatic expiry for these records.

For the in-app steps and an email route for a further deletion request, see Shared-data deletion instructions. Limited records may still be retained where reasonably necessary for security, abuse prevention, disputes, or legal obligations.

8) Your controls

• Delete any local entry and its recording from the entry screen.
• Withdraw a contributed entry without deleting its local copy.
• Report any displayed shared form or hide its anonymous household on this device.
• Delete the anonymous shared identity and all active contributions from Settings → Safety & data.
• Export the complete local folio as M4A, JSON, CSV, EAF, a manifest, and SHA-256 checksums.
• Revoke microphone or biometric permission through Android Settings.

9) Security and international processing

Cleartext network traffic is disabled. Service tokens and revocation secrets are kept in app-private storage, and the server stores token/revocation hashes. Optional cloud information may be processed in countries where Cloudflare operates. No security method can guarantee absolute protection.

10) Child safety

Liafuan is intended for adults working with family speech and is not directed to children under 13. Shared contributions must not contain child sexual abuse or exploitation, identifying material about a child, abuse, or other unsafe content. Read the separate Liafuan Child Safety Standards.

11) Changes and contact

We may update this policy when Liafuan's practices change. The effective date above will be updated. Questions, safety concerns, and privacy requests can be sent to www.saifullah.ai@gmail.com.