Privacy Policy for Travallah

Introduction

Travallah ("we," "our," or "us") is operated by Kahl Health Private Limited. This Privacy Policy explains how the Travallah mobile application (the "App") works and how your information is handled.

We are committed to protecting your privacy. This policy explains how the app functions entirely on your device without any external data transmission.

1. Information Stored on Your Device

We do not collect any information. However, the app stores the following information locally on your device to provide its functionality:

1.1 Information You Store in the App

When you use Travallah, the following information is stored locally on your device:

• Trip Information: Trip names, destinations, start dates, end dates, and trip status
• Document Information: Document names, categories, file paths, file types, file sizes, timing preferences, custom dates, expected dates of need, expiry dates, tags, and metadata
• Travel Documents: Uploaded files including but not limited to:
  • Passports and identification documents
  • Visas and travel authorizations
  • Flight tickets and boarding passes
  • Hotel bookings and accommodation confirmations
  • Insurance documents
  • Vaccination certificates
  • Other travel-related documents in PDF, image, or other supported formats

1.2 Automatically Stored Information (On Your Device Only)

The App automatically stores certain information locally on your device to function properly:

• Usage Data: Document access times, last accessed dates, creation timestamps (stored locally only)
• Device Storage Paths: File paths where your documents are saved on your device
• Technical Data: File metadata, file sizes, and document organization preferences (all stored locally only)

None of this information is transmitted anywhere. It exists only on your device.

1.3 Files Shared to the App

• Shared Files: When you share files from other applications to Travallah, those files are saved directly to your device. They are not transmitted to us or any third party.

2. How Your Information is Used (On Your Device)

2.1 Primary Purposes

• Document Organization: To organize and categorize your travel documents by trip and timeline
• Document Storage: To securely store your documents locally on your device
• Document Retrieval: To provide quick and easy access to your documents when needed
• Document Management: To enable features such as:
  • Marking documents as favorites
  • Tracking document expiry dates
  • Setting expected dates of need
  • Categorizing documents by timing (pre-travel, during travel, post-travel)
  • Archiving completed trips

2.2 App Functionality

• File Sharing: To enable sharing documents from and to other applications
• Document Viewing: To display PDF and image documents within the app
• Trip Management: To create, update, archive, and organize trips
• Expiry Notifications: To alert you about expiring documents (passports, visas, etc.)
• Search and Filter: To help you quickly find specific documents

3. Data Storage and Security

3.1 Local Storage Only

3.2 Security Measures

We implement the following security measures:

• Local Encryption: All data is stored using secure local database technology
• Sandboxed Storage: App data is stored in a sandboxed environment protected by your device's operating system
• No Cloud Transmission: Documents and personal information never leave your device through our app
• Access Control: Only the Travallah app has access to its data directory

3.3 Data Backup

• Data backup is handled by your device's native backup system (iCloud for iOS, Google Backup for Android)
• We do not maintain separate backups of your data
• You are responsible for backing up your device if you wish to preserve your data

4. Data Sharing and Disclosure

4.1 No Data Collection or Sharing

We do not collect, access, share, sell, rent, or trade your personal information or documents with anyone. Since all data stays on your device and we have no backend systems, we have no ability to access or share your information.

4.2 User-Initiated Sharing

• You may choose to share documents through the app's share functionality
• When you share a document, it is sent directly to the app or service you select
• We do not track or monitor shared documents

4.3 Legal Requirements

We cannot disclose your information because we do not have access to it. All data is stored exclusively on your device. We do not collect, store, or have access to your documents or personal information in any way. If you are subject to legal process, law enforcement would need to obtain your device directly, as we have no data to provide.

5. Data Retention

5.1 Retention Period

• Data is retained on your device until you choose to delete it
• Deleting a trip or document removes it from the local database
• Uninstalling the app removes all stored data from your device (subject to device backup policies)

5.2 Archiving

• You can archive completed trips, which moves them to an archived view
• Archived trips and documents remain on your device and can be unarchived at any time

6. Your Privacy Rights

6.1 Access and Control

You have complete control over your data:

• Access: View all your trips and documents within the app
• Modify: Edit trip details, document names, categories, and metadata
• Delete: Remove individual documents or entire trips
• Export: Share documents to other apps or services
• Archive: Archive completed trips to declutter active trips

6.2 Data Portability

• Documents are stored in standard file formats (PDF, JPG, PNG, etc.)
• You can export and share documents to any compatible application
• Trip and document metadata can be accessed through the app interface

6.3 Right to Deletion

• Delete individual documents through the app's delete function
• Delete entire trips along with associated documents
• Uninstall the app to remove all data from your device

7. Children's Privacy

Travallah is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at operations@kahlhealth.com, and we will delete such information.

8. Third-Party Libraries (All Local Processing)

8.1 Third-Party Libraries

The App uses the following third-party libraries that process data locally on your device only:

• Hive: Local database for offline storage (no network communication, no data transmitted)
• Syncfusion PDF Viewer: For viewing PDF documents (local rendering only, no data sent to Syncfusion)
• File Picker: For selecting files from your device (local only)
• Share Plus: For sharing files to other apps (direct device-to-device)
• Receive Sharing Intent: For receiving files from other apps (direct device-to-device)

None of these libraries transmit any data over the internet. All processing happens locally on your device.

8.2 Zero Analytics, Zero Tracking

• No analytics services: We do not use Google Analytics, Firebase Analytics, or any other analytics platform
• No advertising services: No ads, no ad networks, no advertising identifiers
• No usage tracking: We do not track what you do in the app
• No crash reports: We do not collect crash reports or error logs
• No telemetry: No diagnostic data or performance metrics are collected
• No identifiers: We do not collect device IDs, IP addresses, or any identifying information

9. International Data Transfers

There are zero data transfers of any kind. Since all data is stored exclusively on your device and the app has no backend servers, there are no international data transfers, domestic data transfers, or any data transfers whatsoever initiated by Travallah.

Device Backups: If you enable device backups through iCloud (iOS) or Google Backup (Android), your app data may be included in those backups according to your device's backup settings. These backups are controlled by Apple or Google, not by us. Please review their privacy policies for information about how backup data is handled.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify users through the app or other communication channels
• Your continued use of the app after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: We do not collect any personal information. All data is stored locally on your device.
• Right to Delete: You can delete all data by uninstalling the app or using the in-app delete functions. We have no data to delete on our end.
• Right to Opt-Out: We do not sell personal information. We do not collect personal information.
• Non-Discrimination: Not applicable as we do not collect or process any user data.

Since we do not collect, store, or have access to your information, CCPA requests cannot be fulfilled by us. You have complete control over your information directly on your device.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: All your data is accessible directly in the app on your device. We do not have access to your data.
• Right to Rectification: You can edit all information directly in the app. We have no data to correct.
• Right to Erasure: You can delete data in the app or uninstall the app. We have no data to erase.
• Right to Restrict Processing: All processing happens locally on your device. We do not process your data.
• Right to Data Portability: Documents are stored in standard formats and can be exported through the app's share feature.
• Right to Object: Not applicable as we do not process your data.

Legal Basis for Processing: The app processes data locally on your device to fulfill its function. We (Kahl Health Private Limited) do not act as a data controller or processor because we do not collect, access, or process your data in any way.

13. Data Security Incidents

Since we do not collect or store any user data on our servers, there can be no data breach or security incident on our end. Your data exists only on your device.

Your data security depends entirely on:

• Your device's security (password, biometric lock, encryption)
• Physical security of your device
• Your device's operating system security updates
• Your backup security settings (iCloud, Google Backup)

We recommend enabling device encryption, using strong passwords or biometric authentication, and keeping your device's operating system updated.

14. 100% Offline Architecture

15. Permissions

The App requires the following device permissions:

• Storage Access: To save and retrieve documents from your device
• File System Access: To organize documents in the app's directory
• Share Intent Access: To receive files shared from other apps

We only use these permissions for their stated purposes and do not access other data on your device.

16. Consent

By downloading, installing, and using Travallah, you consent to:

• The collection and use of information as described in this Privacy Policy
• The storage of documents and data locally on your device
• The app's access to device storage for document management

You can withdraw consent at any time by uninstalling the app.

17. Disclaimer

While we implement security measures to protect your data:

• You are responsible for the security of your device
• We recommend using device passwords, biometric authentication, and encryption
• We recommend enabling device backups to prevent data loss
• We are not responsible for data loss due to device failure, damage, or theft

18. Governing Law

This Privacy Policy is governed by the laws of India, without regard to conflict of law provisions. Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts in India.

19. Questions and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or our data practices:

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.

20. Acknowledgment

By using Travallah, you acknowledge that:

• You have read and understood this Privacy Policy
• You agree to the collection and use of information as described
• You understand the offline-first nature of the app
• You are responsible for the security of your device and data