Privacy Policy
Last Updated: October 14, 2025
1. Introduction
SlimeWatch ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video-based community safety application and services.
By using SlimeWatch, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account using Replit Authentication, we collect: name and email address, profile information from your Replit account, and authentication credentials and session data.
2.2 Video Content and Metadata
When you upload incident videos, we collect and process: video files showing antisocial behavior incidents, GPS location data (latitude, longitude) from video metadata, timestamps indicating when the video was recorded, device metadata, and user-provided descriptions and incident categorization.
2.3 Facial Recognition Data
Our service requires facial recognition processing, which involves: extraction of 128-dimension facial descriptors from video frames, face detection confidence scores and matching thresholds, facial landmark data for recognition accuracy, and group clustering data to identify repeat individuals.
Important: We do not store raw facial images separately. Facial descriptors are mathematical representations used solely for matching purposes and cannot be reverse-engineered into photographs.
2.4 Usage and Technical Data
We collect IP addresses and browser information, device type and operating system, pages visited and features used, and error logs and performance metrics.
3. How We Use Your Information
3.1 Core Service Delivery
We use your information to process and validate incident videos using AI analysis, perform facial recognition to identify repeat offenders, share validated reports with businesses within a 20-mile radius, provide real-time alerts when faces are scanned and matched, and generate danger assessments and mobility analysis.
3.2 AI and Third-Party Processing
We use OpenAI's GPT-4o-mini Vision API to validate videos for legitimate antisocial behavior, categorize incidents (shoplifting, violence, dine-and-dash, etc.), assess urgency and threat levels, and generate mobility and pattern analysis reports.
4. Data Sharing and Disclosure
4.1 Community Sharing
Validated incident reports are shared with other SlimeWatch users (businesses) within a 20-mile radius of the incident location, including video content and thumbnails, incident location and timestamp, facial recognition data for matching purposes, and AI-generated categorization and danger assessments.
4.2 Third-Party Service Providers
We share data with trusted service providers: OpenAI (video analysis and AI validation), Replit Object Storage (secure video and media file storage), Replit Authentication (account and session management), and Neon PostgreSQL (database services).
4.3 Legal Requirements
We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5. Data Storage and Security
We implement industry-standard security measures including encrypted data transmission using HTTPS/TLS protocols, secure cloud storage with enterprise-grade providers, access controls and authentication systems, and regular security audits and updates.
Data Retention: We retain incident videos and facial recognition data for as long as necessary to provide our services and comply with legal obligations.
6. Your Data Protection Rights (GDPR Compliance)
If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have the following rights: Right to Access, Right to Rectification, Right to Erasure, Right to Restrict Processing, Right to Data Portability, Right to Object, and Right to Withdraw Consent.
To exercise these rights, please contact us at trevor.smith@kanndoo.org or 07368 488822.
7. Children's Privacy
SlimeWatch is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to maintain your session and improve user experience. For detailed information about our cookie usage, please see our Cookie Policy.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
10. Contact Information
Email: trevor.smith@kanndoo.org
Phone: 07368 488822
11. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases: Contract Performance (to provide our services as agreed), Legitimate Interests (business security and community safety), Consent (where you have explicitly agreed to data processing), and Legal Obligations (compliance with applicable laws).