1Who we are
Chameleon AI: Incident Guide (“Chameleon AI”, “we”, “us”) is a mobile app developed and operated by Houcine Bousfiha. We are responsible for the personal data described in this policy. You can reach us at chameleonai.contact@gmail.com.
2In short
- Your evidence (photos, videos, voice notes) is encrypted on your device. We can’t open it.
- Recording works without an account. We only receive data about an incident when you ask for its analysis.
- Your exact location, street address, contacts and recovery passphrase never leave your device.
- We don’t sell your data, we don’t show ads, and your content isn’t used to train AI.
- You can download your data or delete it, including your whole account, at any time.
3What stays on your device
The following are stored only on your device and are never sent to us: your incidents until you ask for an analysis, your exact GPS position and street address, the contacts you add to your emergency list and your list of emergency numbers, your encryption master keys and your recovery passphrase.
Evidence files on your device are encrypted by the app on top of your device’s own protection. Your device’s backup (iCloud or Google) may contain these encrypted files; their keys are not in the backup.
4What we collect and why
- Account
- When you sign in: your email address, and your name and profile picture if your Apple or Google account provides them. Used to identify you, secure your account and send emails you asked for.
- Incidents you ask us to analyse
- The description, type, date and time, language, city name and country of the incident; your evidence files, encrypted, with their fingerprints, sizes and durations; and what the service produces: the report, your answers, your next-steps plan and progress, and your documents. Used to provide the analysis and guidance.
- Disclaimer and preferences
- The version of the disclaimer you accepted and when, and whether you want report emails. Used to respect your choices and our obligations.
- Notifications
- Your device’s notification token, platform and app language. Used to tell you when a report, plan or document is ready.
- Region
- Your country code, worked out on your device from your time zone, device settings, connection, or a location you already allowed, together with a random installation identifier. Used to show the right emergency numbers. Coordinates are never sent.
- Nearby help
- When you search for help nearby, the chosen point is rounded to about 100 metres and sent to the map provider for that search. It isn’t stored or logged.
- Usage events
- Anonymous events tied to the installation identifier, such as “onboarding completed” or “analysis requested”. They never contain incident content, coordinates, contact names or phone numbers. Used to run background tasks and improve the app.
- Diagnostics and problem reports
- Crash and error reports (device model, system and app version, technical details of the error). When you report a problem: the reason, what you typed, and identifiers of the item concerned, plus your email only if you choose to be contacted. Never your evidence or report text.
- Chain of custody and security
- Fingerprints, sizes and events for each evidence file (for example “uploaded”, “checked”, “keys deleted”), and hashed counters used to limit abuse. We don’t store your IP address in these counters.
- Emails sent
- For reports you send by email: the date and the recipient’s domain, to enforce a daily limit.
5How the AI analysis works
An analysis only runs when you ask for one. For that run, your device lends the keys of the incident’s files. Our server decrypts the files in memory, checks them against their fingerprints and sends them, with your description, to Google’s Gemini models through Google’s paid API. Your evidence may be processed outside your country. The keys and the copies held by Google for the analysis are deleted when the run ends; unused keys expire automatically after two hours at most.
Under the Gemini API terms for paid services, Google does not use this content to improve its products. We do not use your content to train any AI model.
To find official procedures and emergency numbers, we use OpenAI’s web search with general questions by country and topic (for example “how to report a road accident” in a given country). These questions never include your incident, your report or anything that identifies you.
The AI’s output can be wrong. It is guidance, not a decision, and it doesn’t determine who is at fault.
6Legal bases
We process your data to provide the service you asked for (performance of our agreement with you), with your consent where needed (for example analysing an incident, notifications, being contacted about a problem report), for our legitimate interests in keeping the service secure, preventing abuse and fixing errors, and to comply with the law. You can withdraw your consent at any time; this doesn’t affect processing already done.
7Service providers
We use the following providers to run Chameleon AI. They process data only on our instructions and for the purposes described.
- Clerk
- Sign-in and account management.
- Neon
- Database hosting (accounts, incidents you analyse, reports, plans).
- ImageKit
- Storage of your evidence files, encrypted.
- Google (Gemini API)
- AI analysis of the incidents you ask us to analyse.
- OpenAI
- Web search for official sources and emergency numbers, without personal data.
- Inngest
- Running background tasks (analyses, deletions, notifications) from event metadata.
- Expo, Apple and Google (Firebase Cloud Messaging)
- Delivering notifications.
- Resend
- Sending emails (report ready, reports you choose to email).
- Sentry
- Crash reports, error monitoring and problem reports.
- OpenStreetMap services, OSRM, Google Places and Routes
- Finding help nearby and travel times, from a rounded point.
- Cloudflare
- Hosting this website.
We don’t sell or rent your personal data, and we don’t share it with advertisers. We may disclose data if the law requires it, and we would tell you unless prohibited. Because your evidence is encrypted with keys we don’t have, we can’t hand over readable evidence.
8International transfers
Some of our providers are located outside your country, in the European Union, the United States or elsewhere. When your data is transferred, we rely on providers that apply appropriate safeguards, such as standard contractual clauses, and we limit what is sent to what each service needs.
9How long we keep data
- Account data, incidents, reports, plans and documents: until you delete them or your account.
- Evidence copies used by the AI and the keys lent for an analysis: deleted when the run ends, two hours at most.
- Notification tokens: removed when you sign out or delete your account, or when they stop working.
- Recovery passphrase backup: until you delete your account.
- Diagnostics and problem reports: kept for a limited period by our monitoring provider, then deleted.
When you delete your account, we delete your account, incidents, reports, plans, documents, stored evidence, AI copies, recovery backup and notification tokens. You choose whether incidents saved on your device are also erased.
10Security
Evidence is encrypted on your device with AES-256-GCM and a separate key per file; keys are kept in your device’s secure keychain. Data is encrypted in transit (HTTPS). Access to evidence screens can be protected with Face ID, a fingerprint or your passcode. Each file’s chain of custody is recorded so that changes can be detected. No system is perfectly secure, but we design ours so that a breach of our servers would not expose readable evidence. See Privacy & security for details.
11Your rights and choices
Depending on where you live, including under the EU General Data Protection Regulation and similar data protection laws, you have the right to access, correct and delete your data, to object to or restrict its processing, and to data portability.
- Access and portability: Settings → Privacy & security → Download my data.
- Deletion: delete an incident from its page, or your account in Settings → Account. See Delete your account.
- Notifications and emails: turn them off in Settings → Notifications or in your device settings.
- Location, camera, microphone and contacts: managed in your device settings. The app keeps working when you refuse.
For any other request, write to chameleonai.contact@gmail.com. You can also lodge a complaint with the data protection authority of your country.
12People in your recordings
Your evidence may show other people. You are responsible for recording lawfully and respecting their privacy. We process these recordings only to provide the analysis you ask for, and they remain encrypted and private to you.
13Children
Chameleon AI is not intended for children under 16. We don’t knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.
14This website
This website doesn’t use cookies, analytics or advertising trackers. Your choice of language and appearance is saved in your browser only. Our host, Cloudflare, processes technical data such as IP addresses to deliver and protect the site.
15Changes to this policy
We may update this policy as the app evolves. We’ll show the date of the latest version at the top, and tell you in the app before important changes take effect.
16Contact
Questions or requests about your privacy: chameleonai.contact@gmail.com.