Privacy and security, by design
Evidence of an incident is some of the most sensitive data there is. Here is exactly how Chameleon AI protects it.
Our promises
We can’t see your evidence
Your photos, videos and voice notes are encrypted on your device. Our servers and our storage provider only ever receive scrambled data.
You decide when the AI looks
Nothing is analysed unless you ask. For that one analysis, your device lends the keys, and they’re deleted when it ends.
Your location stays with you
Your exact position and street address never leave your device. Only a city name is sent with an incident you analyse.
No selling, no advertising
We don’t sell your data, we don’t show ads, and your content is never used to train AI models.
What happens to a video, step by step
Captured
The moment you stop recording, the file’s SHA-256 fingerprint is calculated, with the time and, if allowed, the place.
Encrypted
The file is encrypted with its own random key (AES-256-GCM, in 1 MB chunks so that no part can be swapped, removed or reordered). The camera’s readable file is deleted.
Locked
File keys are sealed with a master key kept in your device’s keychain, never synced. Viewing needs Face ID, your fingerprint or your passcode.
Uploaded, still encrypted
When you ask for an analysis, only the encrypted file is uploaded, straight from your device to private storage. Our servers refuse anything unencrypted.
Analysed, then forgotten
Your device lends that run’s keys. The file is decrypted in memory, checked against its fingerprint and given to the AI. The keys and the AI’s copy are deleted when the run ends.
More protections
Chain of custody
Every step a file goes through is written to a hash chain, on your device and on our servers. Editing, removing or reordering an entry shows. “Evidence history” checks both for you.
Recovery passphrase
Your keys can be backed up, sealed with a passphrase only you know (Argon2id + AES-256-GCM). We store the sealed backup but can’t open it. Lose both your device and the passphrase, and nobody can recover your evidence.
Private in the background
On iPhone the app blurs itself in the app switcher; on Android evidence screens are hidden from recents and screenshots. On iPhone, closed evidence files can’t be opened while the device is locked.
Discreet notifications and emails
They only say that something is ready. Never a summary, a place, a type of incident or a name. On Android, they’re hidden on the lock screen.
Official sources without your data
To find official procedures we ask general questions by country and topic. Your incident, your report and your identity are never part of them.
Limited and monitored
Rate limits protect your account against abuse, and errors are reported without your incident content.
About the AI
Analyses run on Google’s Gemini models through Google’s paid API, which may process data outside your country. Under the terms for paid services, Google doesn’t use this content to improve its products. We never use your content to train models either.