Legal Center
Transparency is our foundation. Everything you need to know about KFirst in plain language.
Quick Access
Jump to any policy section
Privacy Policy
Last updated: November 18, 2025
Simple Promise
Your construction data stays on your device. Cloud backup is optional, and only you hold the key to decrypt it. We never see your business data.
1. What We Store Locally (On Your Device)
The following data is stored exclusively on your device in an encrypted SQLCipher database and is never transmitted to our servers unless you explicitly enable cloud backup:
- Project data: Project names, descriptions, start/end dates, status
- Financial records: Expense entries, income entries, category labels, payment methods, transaction notes
- Reports: Generated PDF/CSV reports, templates
- App settings: Your theme preferences, notification settings, currency format
⚠️ Important: K-First does not access, view, or transmit this data to any server unless you enable cloud backup.
2. Optional Cloud Backup (Pro Feature)
When you explicitly enable cloud backup:
- Your data is encrypted on your device using AES-256 before being uploaded to Firebase Cloud Storage
- The encryption key is derived from your Firebase Authentication credentials and never leaves your device
- K-First servers cannot decrypt your backups (zero-knowledge architecture)
- Backups are stored in Firebase's secure infrastructure (Google Cloud Platform)
✅ What this means: Even if someone gains unauthorized access to Firebase storage, they cannot read your project or financial data without your device and credentials.
3. Account & Authentication Data
If you create an account (required for cloud backup or Pro features), K-First uses Firebase Authentication, which processes:
- Email address: Used for account recovery and communication
- User ID: A unique identifier (Firebase UID) to link your account to encrypted backups
- Authentication tokens: Temporary session tokens to verify your identity (Firebase manages these securely)
We do not collect passwords directly—Firebase Authentication handles credential management. Learn more: Firebase Privacy Policy
4. Advertising Data (Free Tier Only)
If you use the free tier, rewarded ads are provided by Google Mobile Ads SDK. Google may collect:
- Ad-specific identifiers: Advertising ID (Android) or IDFA (iOS)
- Device information: OS version, device model, screen size
- IP address: For approximate location-based ad targeting
- Ad interaction data: Clicks, views, impressions
ℹ️ K-First does not receive, store, or use these identifiers. Google processes ad data per their Privacy Policy.
5. When We Share Data
K-First shares data only in these limited, necessary cases:
| Service Provider | What's Shared | Purpose |
|---|---|---|
| Firebase (Google) | Email, UID, encrypted backups | Cloud backup, authentication |
| Google Mobile Ads | Ad ID, device info, IP | Ad delivery (free tier only) |
| Razorpay | Email, payment method | Pro subscription processing |
Legal disclosures: We may disclose data if required by law (e.g., court order, government request).
6. Your Rights & Data Control
You have the right to request deletion of your K-First account and all associated data:
In-app deletion
Go to Settings → Account → Delete Account. This permanently deletes your database, Firebase account, encrypted backups, and cancels subscriptions.
Email request
Contact our support team with "Account Deletion Request". We'll process it within 7 business days.
🚨 Important: K-First does not retain decrypted business data. After deletion, we cannot recover your projects, expenses, or logs.
7. Children's Privacy
K-First is designed for adult professionals (18+). The app is not intended for, and does not knowingly collect data from, children under 13. If you believe a child under 13 has created an account, contact us immediately at our support team.
8. Data Location & International Transfers
If you enable cloud backup, your data may be processed in Firebase's infrastructure:
- Primary region: asia-south1 (Mumbai, India)
- Backup regions: Firebase may replicate across Google Cloud Platform regions
📍 Kerala users: Your encrypted backups may be stored in Mumbai (asia-south1). Zero-knowledge encryption ensures geographic location doesn't affect confidentiality.
9. App Permissions
K‑First requests only the permissions needed for core features like network access, taking site photos, and optional map usage.
✅ Requested
- • Internet
- • Network state (to detect connectivity)
- • Camera (optional, for taking new photos of sites and bills)
- • Location (optional, only if you use map-based site tagging)
❌ Never Requested
- • Storage (broad file system access)
- • Contacts
- • SMS/Phone
- • Microphone
- • Biometric
When you add photos to logs or expenses, K‑First uses the system photo picker and only receives the images you explicitly select. The app does not scan your entire gallery or request broad storage permissions.
10. Web Analytics & Cookies (kfirst.in Only)
When you visit the K-First website (kfirst.in), we use Google Analytics 4 (GA4) to understand how visitors interact with our tools and library. This helps us improve the user experience.
What GA4 Collects:
- Page views: Which pages you visit and for how long.
- Device/Browser info: Screen size, OS, browser type.
- Anonymized IP: Your IP address is anonymized by Google before storage.
- Referral source: How you arrived at our site (e.g., Google Search, direct link).
Cookies Set:
_ga,_ga_*: Used by Google Analytics to distinguish users and sessions. Expires after 2 years.
Your Choices:
You may decline analytics cookies via the consent banner displayed on your first visit. If you decline, GA4 will not be loaded. You can also clear cookies from your browser settings at any time.
ℹ️ Note: This section applies only to the K-First website. The K-First Android App does not use GA4 web cookies; it uses Firebase Analytics as described in Section 4.
Terms of Service
Last updated: November 18, 2025
1. General Terms (K-First App)
By using the K-First mobile application, you agree to use the app responsibly and in compliance with applicable laws. The app is designed for professional engineers and contractors for project management, site logging, and expense tracking.
- You must be 18 years or older to create an account.
- You are responsible for maintaining the confidentiality of your account credentials.
- You agree not to misuse the app for fraudulent or illegal activities.
2. Web Platform Terms (kfirst.in)
In addition to the App Terms above, the following provisions apply specifically to the K-First website (kfirst.in):
2.1 Digital Library ("The Kerala Engineering Vault")
K-First provides archived copies of publicly available Government of Kerala documents (e.g., KMBR, KPBR, PWD Circulars) for educational and reference purposes only. FirstBridge Studios:
- Is NOT affiliated with the Local Self Government Department (LSGD), Kerala Public Works Department (PWD), or any State or Central Government body.
- Does NOT guarantee that hosted documents are the latest versions or free from transcription errors.
- Accepts NO liability for decisions made based on documents downloaded from K-First. In case of ANY discrepancy, the official Kerala Gazette notification shall prevail.
2.2 Web-Based Calculators & Estimators
The tools hosted on kfirst.in (including but not limited to Steel Calculator, Permit Fee Calculator, Valuation Generator, Material Estimator, Area Converter, and Setback Calculator) are provided as preliminary estimation aids. FirstBridge Studios:
- Does NOT provide professional structural engineering, architectural, or legal advice.
- Does NOT guarantee the accuracy of calculations for official Government submissions, tender documents, or structural certifications.
- Accepts NO liability for financial losses, construction defects, or regulatory penalties arising from reliance on these tools.
- Strongly recommends that all outputs be verified by a Licensed Structural Engineer or Chartered Architect before use in any official capacity.
2.3 Conflict Resolution (Strictest Warning Applies)
Certain tools and library pages may display additional specific disclaimers. In the event of any conflict between a page-level disclaimer and these Master Terms, the stricter, more protective warning shall apply.
Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, FIRSTBRIDGE STUDIOS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY. THIS INCLUDES DAMAGES ARISING FROM USE OF WEB TOOLS, RELIANCE ON LIBRARY DOCUMENTS, OR ANY ERRORS IN ESTIMATION OUTPUTS.
Refund Policy
Last updated: November 18, 2025
30-Day Money-Back Guarantee
We offer a full refund within 30 days of your Pro subscription purchase, no questions asked.
How to Request a Refund
Email us at our support team with:
- Subject: "Refund Request"
- Your registered email address
- Reason for refund (optional)
Processing: We'll process your refund within 5-7 business days. You'll receive a confirmation email once complete.
After 30 Days
Refunds are not available after 30 days, but you can cancel your subscription anytime. Your data remains on your device, and you'll continue using the free tier.
Shipping Policy
Last updated: November 18, 2025
Digital Product - No Physical Shipping
KFirst is a digital mobile application. There are no physical goods or shipping involved. After purchasing a Pro subscription via Razorpay, your account is upgraded instantly, and Pro features unlock immediately in the app.