Privacy Policy - Tafahaona
1) What Tafahaona does
Tafahaona is an adult-only family-reconnection tool. Two people can privately compare descriptions of one separated relative. It does not publish a directory, photograph, current location, match score, or near-match signal, and it does not establish anyone's identity.
2) Data handled on your device
If you create an entry, you provide a person's name, approximate age, broad birth region, an optional distinguishing detail, a private verification question and answer, and a contact channel you consider safe. These details are encrypted with an Android Keystore key before local storage. They are used only for the comparison and mutual-confirmation workflow.
App preferences include first-use completion, an optional dedicated app-PIN verifier, biometric-unlock preference, a random installation tag used for abuse limits, and the current daily request count. Android cloud backup is disabled. Tafahaona receives only biometric success or failure from Android; it does not receive or store biometric templates.
3) Data sent to the private relay
Blinded comparison elements: 32 padded VOPRF inputs are evaluated without the relay learning the underlying names or features.
Opaque protocol data: random-looking mailbox, envelope, and revocation tags plus fixed 4,096-byte end-to-end encrypted frames carry proposals, questions, confirmations, and contact release.
Anti-abuse data: a random installation tag, proof-of-work nonce, day, and payload digest enforce request limits and prevent replay. This is not an advertising identifier.
Safety reports: a report contains a random report ID, opaque subject tag, reason code, and a fixed 1,024-byte sealed context containing a one-way evidence digest, not readable peer text.
The relay is not sent readable names, questions, answers, contact details, photographs, current locations, address-book contacts, a server-side match score, or a result log linking two people.
4) Why this data is used
- Evaluate blinded comparison features and relay encrypted fixed-size messages.
- Release a contact channel only after both private answers verify.
- Apply revocation, daily request limits, replay protection, reporting, and blocking.
- Keep interrupted comparisons resumable on unreliable networks.
5) Service provider and sharing
Cloudflare operates the Worker and Durable Object infrastructure used as the private relay. Cloudflare processes network traffic and opaque protocol records to provide and secure that service under its Privacy Policy. Tafahaona's Worker observability logging is disabled. We do not use analytics, advertising, crash-reporting, account, payment, social-login, or push-notification SDKs.
We do not sell personal data. We do not share readable search records with advertisers, data brokers, governments, humanitarian agencies, or other users. A user's contact detail becomes readable only on the other device after mutual verification.
6) Retention and deletion
- Encrypted relay frames expire after 14 days.
- Local entries expire after 90 days unless you revoke them sooner.
- Opaque revocation records expire after 90 days.
- Daily budget and replay records are removed after their short enforcement window.
- Sealed abuse reports are retained for up to 180 days for safety investigation and legal compliance.
Use Revoke and remove entry on an entry to send its revocation tag and delete its encrypted local record. Clearing Tafahaona's app storage or uninstalling removes all local app data. To request deletion of a safety report or ask a privacy question, email www.saifullah.ai@gmail.com with the approximate report date; some minimal records may be retained where law requires.
7) Permissions
INTERNETandACCESS_NETWORK_STATE: run and retry private relay operations.USE_BIOMETRIC: optionally unlock Tafahaona through Android's biometric prompt.
Tafahaona does not request camera, microphone, contacts, location, notification, storage, SMS, call-log, accessibility, or advertising-ID permission.
8) Feedback
The Send feedback action opens your chosen email app with the developer address and subject. Tafahaona itself does not send or collect that email. Your email provider processes anything you choose to send under its own terms.
9) Security and limits
Local records use authenticated encryption; transport uses HTTPS; peer content uses end-to-end encrypted, fixed-size frames; and the VOPRF server provides a proof checked by the app. These safeguards reduce exposure but no system can guarantee identity, safety, delivery, or absolute security. Use a low-risk first message and never disclose a current location because a proposal is not proof of identity.
10) Children's privacy and safety
Tafahaona is intended only for adults aged 18 and over and is not directed to children. It prohibits child sexual abuse and exploitation, grooming, trafficking, sexual solicitation, and attempts to obtain a child's current location or sexual content. Read the separate Child Safety Standards. If a child is in immediate danger, contact local emergency services.
11) Changes
We may update this policy when the app or law changes. The current version and effective date will remain published at this address.
12) Contact
Developer: Saifullah Ahad
Email: www.saifullah.ai@gmail.com
Phone: +880 1711-134346
Website: saifullah.ai