PLAIN-LANGUAGE PROJECT NOTES
Privacy and security
KinGuardian is a prototype. These notes describe what the current code does and its limits. They are not a promise of emergency response or a formal security certification.
Account information
The service stores your username, a password hash, recovery-code hashes, session hashes, and basic timestamps in Cloudflare D1. Passwords and recovery codes are not stored as readable text. Registration does not need an email address or phone number. If the site operator enables the optional Cloudflare Turnstile check, Cloudflare processes browser and connection signals to help distinguish people from automated requests.
Contacts and location
External contact details are encrypted in your browser before storage and use a separate passphrase. If you lose that passphrase, the app cannot restore those details. Location is requested only after you choose to start a share. The server still sees the participating account IDs and timing, while the coordinates are encrypted for selected members.
Messages and notifications
KinGuardian does not automatically send SMS, email, or WhatsApp messages. Manual links open a composer only after you choose to use them. Browser push requires setup, permission on the device, and a working push service; provider acceptance does not prove that a phone displayed a notification.
Emergency limits
The SOS action can record an alert, but the current prototype does not automatically notify contacts or emergency services. Do not rely on KinGuardian for urgent help. Use the emergency service number verified for your current location.
View emergency informationHosting and browser limits
Cloudflare hosts the website and database. The hosting operator controls the code delivered to your browser and may process service metadata. If you choose a map link, your browser opens OpenStreetMap with the coordinates you selected. If you open a phone or messaging composer, that app receives the information you included.
Missing protections
This prototype does not have phone OTP, email verification, multi-factor authentication, an independent penetration test, or a verified global emergency-number directory. Keep your password, recovery codes, and private-data passphrase safe. If you lose every recovery code and forget your password, the account cannot currently be recovered.