Zero-Knowledge Hardware Encryption (AES-256-GCM)

Your Family Records. Zero-Knowledge Protected.

Neither GharKoRukh engineers, Cloudflare, nor any external party can ever view your vehicle Bluebooks, licenses, or passports. All encryption and decryption happen strictly inside your browser device before bytes ever touch the network.

AES-256-GCMHardware Accelerated
100,000 IterationsPBKDF2 SHA-256 Keys
Cloudflare R2Zero Egress Sovereign Storage
Tenant RLSStrict Household Isolation

The 5 Pillars of Our Zero-Knowledge Security

Engineered specifically to give families in Nepal absolute cryptographic sovereignty over their civic documents.

1. Client-Side PBKDF2 Key Derivation

Your 256-bit AES vault key is derived deterministically inside your browser using the native Web Crypto API with 100,000 PBKDF2 iterations. Master key secrets never traverse the network.

2. In-Browser Compression & Encryption

Photos taken on mobile cameras are scaled in-memory to crisp web formats (<1MB) before being converted into opaque binary ciphertext blobs with random 12-byte initialization vectors.

3. Cloudflare R2 Ciphertext Storage

Encrypted .enc files reside in Cloudflare R2 object storage with zero egress download fees. Cloudflare only holds encrypted noise with zero access to your unencrypted files.

4. Tenant Row-Level Security (RLS)

PostgreSQL Row-Level Security enforces tenant boundaries at the database engine level. Database clients can only read items matching their authenticated family membership.

5. Family vs. Private Granular Visibility

Vehicles, utility bills, and tax slips are shared with family members. Sensitive personal identity items (passports, health records) marked private remain strictly hidden from everyone else.

6. Zero Advertising & Tracking

We do not sell user data, vehicle registrations, phone numbers, or document scans. There are no third-party behavioral advertising scripts or data brokers.

Your Data Sovereignty & Rights

You maintain 100% control over your family vault records and scans at all times.

Complete Offline JSON Export

Download an offline JSON file of all vehicle registrations, renewal deadlines, and notes directly to your personal device at any time.

Instant Right to be Forgotten

Resetting or deleting your household vault immediately purges all database rows and Cloudflare R2 ciphertext blobs permanently.

Privacy & Security FAQ

Common questions about zero-knowledge encryption in Nepal

Can GharKoRukh engineers or server admins see my Bluebook scans?

No, it is mathematically impossible. Document scans are encrypted inside your browser before upload using a key known only to your family. The server only receives opaque ciphertext.

What happens if I lose my mobile phone?

You can sign in to your authenticated account on your new device or scan your family's invite QR code to regain access to your shared household vault and documents.

Can I show my Bluebook scan to traffic police without active internet?

Yes, previously decrypted scans are cached locally in your browser's private vault storage, allowing instant offline presentation during roadside traffic checks in Nepal.

Start Securing Your Family Records Today

Free tier with 50 document allowance and zero egress transfer fees.