How Kochab handles your data.

Effective date: [EFFECTIVE DATE]

This policy describes how the Kochab mobile app and kochab.io handle data. It will be finalized and dated before the app is submitted to the App Store and Google Play.

How the app works

Kochab is a client-direct app. When you add a service in the app, your phone opens a direct network connection to that service, the server you already run. The credentials you enter (URLs, API keys) are stored in your device's secure keychain and used to authenticate those direct connections.

[ENTITY] does not operate a server that receives or stores your service credentials, library data, queue contents, activity, or media. The app does not require a Kochab account, and no central user-data store exists.

Push notifications

To deliver alerts when the app is closed, Kochab registers a push token with a notification relay operated by [ENTITY]. The relay is a Cloudflare Worker. When an event occurs, the app sends a data-only notification through the relay to your device.

The relay sees a device token and a notification category (for example, "queue completed"). It never sees media titles, file names, or service contents. The relay does not retain message bodies after delivery.

This website (kochab.io)

The contact form collects the fields you submit (name, email, message) so we can respond. We do not sell or share email addresses, and you can opt out of any reply at any time.

The status endpoint exposes relay health and service-compatibility notes. It contains no information about your stack.

We use [ANALYTICS - TBD: Cloudflare Web Analytics or none].