Allanfa: Exit Route Planner

Allanfa is an exit route planner for workers who need a shared view of floor movement without a named organizer. Separate observations remain sealed until a threshold opens one evacuation planning model.

RECORD WHAT YOU CAN VERIFY

Enter the normal occupied headcount and usable clear widths for a main work aisle, stair, and final exit door. Each invite controls one sealed slot, so repeated entries from one invite replace that slot instead of increasing the threshold.

OPEN ONLY TOGETHER

An Allanfa floor uses nine separate invite slots and opens after six valid installation-bound observations. One installation can claim only one slot for a floor. Each slot must be refreshed across at least 24 hours; duplicate installation tags and identical activity histories count once. A new floor also remains sealed for at least 24 hours. Before opening, the app shows no participant list and no contribution progress count. Every relay record has the same fixed size and is addressed by a random mailbox code.

READ THE ROUTE MODEL

When the floor opens, Allanfa combines the structured measurements into an egress capacity estimate. The Floor view shows:

- Estimated occupied headcount
- Modelled floor-clear time and uncertainty range
- Ranked doorway, corridor, and stair bottlenecks
- Approximate people-per-minute capacity for each constrained segment
- Queue estimates tied to upstream demand
- Possible route matches kept separate for explicit review
- Observed width ranges when measurements conflict
- A visual route band that pinches at the limiting segment

TEST ONE PHYSICAL CHANGE

The Change view runs a counterfactual against the current model. It identifies the single width adjustment with the largest modelled reduction while holding headcount and other route measurements fixed. This makes the assumption visible and keeps the comparison focused.

SHARE BY QR CODE

A creator keeps one of nine slots and prepares eight separate colleague invites. After sharing, the creator erases those eight Shamir shares and retains only its own share plus share-free deletion capabilities; erased invites cannot be displayed again. Colleagues scan one invite with the optional camera flow, add a structured observation, and seal it. Camera frames are processed on the device and are not saved or uploaded. A full invite code can also be entered manually.

DESIGNED FOR UNCERTAIN OBSERVATIONS

Measurements from different people will not always agree. Allanfa keeps the observed low and high widths, uses them in repeated simulations, and widens the displayed range instead of silently averaging a contradiction away. It presents an estimate with evidence, not a pass/fail safety verdict.

DATA AND ACCESS CONTROLS

Allanfa does not use named accounts, profiles, advertising, analytics, location, contacts, or notifications. Floor records are encrypted before transmission and stored as independent 4,096-byte relay objects. If a request fails, the already sealed record stays in protected local storage for retry or removal. Relay objects expire after 45 days. A creator can delete the floor, and a participant can withdraw only their slot before clearing the device.

Optional App Lock supports two independent methods: fingerprint or face through Android BiometricPrompt, and a dedicated Allanfa PIN. The Allanfa PIN is separate from the device PIN. Local backup is disabled.

IMPORTANT LIMITS

Allanfa is a planning aid. It is not an evacuation alarm, building-code certificate, official inspection, or replacement for emergency services, workplace procedures, or qualified safety professionals. Do not use its estimate as the only basis for a safety decision.

SUPPORT

Privacy policy: https://privacy.saifullah.ai/allanfa.html
Child Safety Standards: https://privacy.saifullah.ai/allanfa/child-safety
Contact: www.saifullah.ai@gmail.com

Recent changes:
Create or scan a sealed floor invite, add a guided route observation, and open a shared capacity model only after the installation-bound threshold and maturation period are met. Review contradictions, possible route matches, bottlenecks, uncertainty, and one focused width-change scenario.

Fixed-size relay records expire after 45 days. Camera frames stay on-device. Sealed offline records can be retried or removed.