Privacy principles
Privacy isn't a setting. It's the architecture.
Community safety only works when the people contributing to it feel safe doing so. These are the commitments we design against — before we ship anything.
Always
- Aggregated, anonymized safety scores
- Encrypted evidence at rest and in transit
- Role-based access for review
- Configurable retention with auto-deletion
- User-initiated incident sessions only
- Voluntary, case-by-case footage sharing
Never
- Exact camera locations
- Home addresses
- Live camera feeds
- Private footage without explicit consent
- Continuous location tracking
- Identifying individuals on shared streets
GDPR
Built for European privacy expectations.
Data minimization
We collect the minimum needed to compute safety scores and respond to incidents.
Purpose limitation
Camera coverage data informs routing only. It's not sold, shared, or repurposed.
Right to withdraw
Camera owners can deregister and request deletion at any time.
This page describes the Safely prototype's design commitments. A full legal privacy policy will be published before any production data collection begins.