Privacy Policy

Effective date: 31st October 2026 Last updated: 31st October 2026 Applies to: the Kahf Router mobile app (iOS and Android), the Kahf Router firmware that runs on your router, and the Kahf Router parts of your Kahf ID account.

---

The short version

Kahf Router is a family-safety router. It is built so that the sensitive part — what your family actually browses — stays inside your home.

• Your browsing history is not sent to us. DNS query logs and activity reports are generated and stored on your router, in your home. Activity Reports are off until you turn them on.
• We do store the settings needed to restore your router — device names, MAC addresses, zone assignments — in your Kahf ID account, so a factory reset or a new phone doesn’t lose your setup.
• We never see your router password or your parent PIN. The PIN is never stored anywhere. The router password is stored only as an encrypted blob that we cannot decrypt.
• Remote management runs over a relay we cannot read. The connection is end-to-end authenticated; the relay forwards bytes it cannot decrypt.
• We do not sell your data, and we do not use it for advertising.

The rest of this page is the detail.

---

1. Who we are

Kahf Router is provided by LEGAL ENTITY NAME, company registration number, registered at registered address (“Kahf”, “we”, “us”).

For any privacy question, or to exercise the rights described in section 11, contact us at support@kahf.co. If applicable: Our data protection officer / EU representative / UK representative is NAME AND CONTACT.

2. What this policy covers

This policy covers three things that work together:

Component	What it is
The Kahf Router app	The mobile app you use to manage the router.
The Kahf Router firmware	The OpenWrt-based software running on the router in your home. It performs the DNS filtering, scheduling and reporting.
Kahf ID	Your Kahf account (id.kahf.co). It authenticates you, holds your router backup and your subscription.

It does not cover: websites and apps your family visits through the router (they have their own policies), your internet service provider, or the app stores you download the app from.

3. How the product is built, and why it matters for privacy

Understanding the architecture explains most of the answers below:

• The router is the boundary. Filtering decisions, DNS lookups, schedules and activity logs are all evaluated and stored on the router itself. Your family’s browsing does not pass through Kahf servers.
• The app talks to the router directly over your home Wi-Fi.
• Kahf ID is a backup and identity store, not a traffic path. It holds who you are, what you bought, and a copy of your router configuration — not your traffic.
• Away-from-home management (Premium) uses a relay. The router keeps an outbound-only connection to a Kahf relay server. The relay passes through end-to-end authenticated messages; it cannot decrypt or read them, and no ports are opened on your home network.

4. What we collect

4.1 Account data (stored in Kahf ID)

• Your Kahf ID identifier, and the email address and/or phone number associated with it.
• Where you sign in via a third-party identity provider (e.g. Google), the basic profile that provider returns to us (identifier, email address, and name if provided).
• Which router(s) are linked to your Kahf ID, and your role on each (owner or co-admin).
• Co-admin invitations you send or accept, including the Kahf ID email address or phone number you invite.

4.2 Router and network configuration (stored on the router, backed up to Kahf ID)

• Device names you assign, and the MAC addresses and local IP addresses of devices on your home network.
• Zone assignments (Safe Zone / Unrestricted Zone).
• Your control settings: blocklist categories, custom blocked and allowed websites, SafeSearch and YouTube Restricted state, ad/tracker blocking, Bedtime, Offtime, App Time Rules, guest network settings.
• Router metadata: model, firmware version, LAN address, uptime/online status, and update state.

We back this up so you can restore your setup after a factory reset, a router replacement or a new phone.

4.3 Activity and reports data

Off by default. Activity Reports are only produced after you explicitly enable them in the app.

• DNS query logs — the domains looked up by devices on your network. These are written to the router only, on volatile storage, and rotated automatically. They are not uploaded to Kahf.
• Aggregated traffic reports — counts and totals (for example: blocked requests per category, time online per device, top categories). If you enable syncing of reports to your account, these aggregates may be stored in Kahf ID so you can view history across devices.

Retention: 7 days on the Free plan, 90 days on Premium.

4.4 Security credentials

Credential	What we do with it
Parent PIN	Never stored — anywhere. It is used to derive keys in the app at the moment you enter it.
Router root password (plaintext)	Never stored.
Router root password (encrypted)	Stored as a blob encrypted with a key derived from your PIN, held in your phone’s secure storage and backed up to Kahf ID. We cannot decrypt it — without your PIN, it is meaningless to us.
Recovery code	Stored hashed in Kahf ID. We cannot recover the original code; we can only check one you present.
SSH keys	Generated and kept in your phone’s secure storage only. Never uploaded.
Session tokens	Kahf ID access/ID tokens, held in your phone’s secure storage.

4.5 App and device diagnostics

• App version, platform and OS version, device model, and language, so we can support you and target firmware/app updates.
• The app also keeps an on-device diagnostic log — a record of what the app has been doing (router connection attempts, session expiry, sync failures), redacted of secrets, held in memory only, and never transmitted anywhere automatically. It disappears when the app closes. You can view it, copy it, or clear it from Troubleshooting at any time, and you decide if and when to share it with support.
• We use self-hosted product analytics to understand app usage — see 4.9.

4.6 Purchases

Premium is purchased through the Kahf ID payment page. We record that you hold an active Kahf Router subscription, its identifier and its expiry. We do not receive or store your card number — payment is handled by our payment processor, PAYMENT PROCESSOR NAME, under its own privacy policy.

Your router periodically re-checks that the subscription is still active, by sending only the subscription identifier and your user identifier to Kahf ID.

4.7 Notifications

If you enable push notifications, we store a push token issued by Apple (APNs) or Google (FCM) so we can send alerts — a new device joining, a bypass attempt, the router going offline, a firmware update, a weekly report being ready. The notification content is kept minimal.

4.8 Support

If you contact support, we keep the correspondence and whatever you choose to include in it.

4.9 Product analytics

We use OpenPanel, self-hosted on our own infrastructure (op.kahf.co.uk) — not a third-party analytics company — to understand how the app is used and where people get stuck. We record:

• which screens you visit and which onboarding step you’re on, so we can see where setup breaks down;
• button and toggle interactions, so we can tell which controls people actually use;
• whether Kahf ID sign-in succeeds or fails (and why), so we can fix broken sign-in flows;
• unhandled app errors, so we can fix bugs.

Analytics events are linked to your account by an opaque internal identifier only — never your email, name, PIN, router password, or the content of your family’s browsing. This data is never sold, shared with advertisers, or sent to any third-party analytics provider; it stays on servers we operate. You can ask us to delete your analytics history via support@kahf.co.

5. What we do not collect

To be unambiguous, Kahf Router does not:

• upload your family’s browsing history or DNS query logs to Kahf servers;
• inspect, log or store the content of your traffic (pages, messages, video, files) — filtering happens at the DNS level, and Kahf sees none of it;
• read the traffic passing through the away-from-home relay;
• sell, rent or share your personal data with data brokers;
• use your data to build advertising profiles or serve ads;
• track you across other websites and apps.

6. Why we use your data, and our legal basis

For users in the UK/EEA, the “legal basis” column is the GDPR basis we rely on.

Purpose	Data used	Legal basis
Sign you in and link you to your router	Account data, tokens	Performance of a contract
Provide filtering, schedules and device management	Router configuration	Performance of a contract
Restore your setup after a reset or new phone	Configuration backup, encrypted password blob, recovery code hash	Performance of a contract
Show you Activity Reports	DNS logs (on-router), aggregated reports	Consent — you enable it, and can withdraw at any time
Send you security and status alerts	Push token, event metadata	Legitimate interests (keeping your network secure); consent where required by your OS
Take payment and manage your subscription	Purchase record, subscription status	Performance of a contract
Deliver firmware and blocklist updates	Router model, firmware version	Performance of a contract; legitimate interests (security)
Detect tampering, bypass attempts and abuse	Security event metadata	Legitimate interests (protecting users and the service)
Support you	Support correspondence, diagnostics	Legitimate interests; performance of a contract
Meet legal obligations	As required	Legal obligation

7. Where your data lives, and how long we keep it

Data	Stored where	Retention
Parent PIN	Nowhere	Never stored
Router root password (plaintext)	Nowhere	Never stored
Router root password (encrypted blob)	Kahf ID + phone secure storage	Until you delete your account or unlink the router
Recovery code	Kahf ID, hashed	Until you delete your account
Device MAC addresses and names	Router + Kahf ID (backup)	Until you delete your account or remove the device
Zone assignments and control settings	Router + Kahf ID (backup)	Until you delete your account or remove the router
DNS query logs	Router only, volatile, rotated	7 days (Free) / 90 days (Premium)
Aggregated traffic reports	Router; Kahf ID if you enable report history	7 days (Free) / 90 days (Premium)
SSH keys	Phone secure storage only	Until you clear local data or uninstall
Push token	Kahf ID	Until you disable notifications or delete the account
Subscription record	Kahf ID	For the life of the account, plus any period required for tax and accounting law
Support correspondence	Support systems	e.g. 24 months
Backups	Encrypted backups	Deleted data disappears from backups within e.g. 30 days

Servers are located in REGION / COUNTRY, operated by HOSTING PROVIDER.

8. Who we share data with

We share personal data only with service providers who process it on our instructions, and only as far as needed:

Recipient	Purpose	Data
HOSTING PROVIDER	Hosting Kahf ID and the relay	Account and configuration data
PAYMENT PROCESSOR	Taking payment	Payment and billing data (we never see the card)
Apple / Google	Delivering push notifications; app distribution	Push token, notification payload
CDN PROVIDER	Serving firmware and blocklist updates	Router IP address and request metadata
Google (if you use Google sign-in)	Authenticating you	Whatever their consent screen shows
None	Diagnosing failures	Diagnostic data stays on-device (see 4.5) — no third party receives it
None (self-hosted on our own servers)	Understanding product usage and fixing sign-in/onboarding issues	Screen/step views, button and toggle interactions, sign-in outcomes, error messages — linked to an internal identifier only, no third party receives it (see 4.9)

We also disclose data where we are legally obliged to (a valid court order or lawful request), or where necessary to establish or defend legal claims. Because your browsing history never reaches us, we cannot produce it in response to such a request.

If Kahf is involved in a merger, acquisition or asset sale, data may transfer to the acquirer under this policy; we will tell you first.

9. Children and other people in your household

Kahf Router is a parental-control product. It necessarily processes information about the internet use of people in your home, including children.

• The account holder must be an adult and must be the person responsible for the home network. You are responsible for having the authority to apply these controls, and for telling members of your household — in an age-appropriate way — that the network is filtered and that activity may be reported.
• Per-site browsing history for children under 13 is not stored in Kahf ID. It stays on the router and is rotated daily. Only aggregated time and category counts are retained.
• We do not knowingly collect personal data directly from children, and children do not have Kahf Router accounts.
• If you believe a child’s personal data has reached us in a way this policy does not describe, contact support@kahf.co and we will delete it.

10. Security

• Secrets on your phone are held in the platform secure store (iOS Keychain / Android Keystore), never in plain application storage.
• The router password is encrypted with a key derived from your PIN, which we never receive. A brute-force lockout protects PIN entry.
• Firmware updates are cryptographically signed; the router refuses unsigned or altered images, and rolls back automatically if a health check fails after an update.
• Traffic between the app, the router and Kahf ID is encrypted in transit.
• The away-from-home relay is outbound-only and end-to-end authenticated — no inbound ports are opened on your home network, and the relay cannot read the messages it carries.
• Access to production systems is restricted and logged.

No system is perfectly secure. If we suffer a breach that puts your rights at risk, we will notify you and the relevant regulator as the law requires.

11. Your rights and your controls

In the app

You want to	Do this
Turn off activity reporting	Settings → Notifications / Reports → disable Activity Reports
Wipe secrets from this phone	Settings → Clear local data
Unlink this router	Settings → Remove router
Delete everything	Settings → About & Support → Delete account

Deleting your account removes your Kahf ID data, including the configuration backup, encrypted password blob and recovery code hash. The app will also offer to factory-reset your router, which you must confirm on the device; data held only on the router is destroyed by that reset. Deletion is irreversible.

Your legal rights

Depending on where you live, you may have the right to: access a copy of your data; correct it; delete it; restrict or object to processing; withdraw consent (for example, for Activity Reports) without affecting past processing; and receive your data in a portable format. You may request a JSON export of your settings and anonymised reports via support@kahf.co.

We do not carry out automated decision-making with legal or similarly significant effects.

Write to support@kahf.co. We respond within 30 days / one month, and we do not charge for reasonable requests. If you are unhappy with our response you may complain to your data protection authority — in the UK, the ICO; in the EEA, your national supervisory authority; in Türkiye, the KVKK / KVKK Board.

If you are in California

We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding 12 months. You may exercise your rights to know, delete, correct and opt out through the same contact address, and we will not discriminate against you for doing so.

12. International transfers

Your data may be processed in countries other than your own. Where we transfer personal data out of the UK/EEA, we rely on adequacy decisions / Standard Contractual Clauses / the UK IDTA together with appropriate technical safeguards. Contact us for a copy of the mechanism used.

13. Cookies and the website

The mobile app does not use advertising cookies or third-party trackers. The website and the Kahf ID sign-in and payment pages use cookies and similar storage described in our Cookies Policy.

14. Changes to this policy

We will update this page when the product changes. Material changes will be announced in the app and, where required, we will ask for your consent again. The “Last updated” date at the top always reflects the current version, and previous versions are available on request.

15. Contact us

KAHF YAZILIM A.S Registered address Privacy: Support: support@kahf.co