KrimeScene · Legal Document
This Privacy Policy ("Policy") describes how KRIMEWATCH FOUNDATION INC ("KFI," "we," "us," or "our") collects, uses, stores, and safeguards your information when you use the KrimeScene mobile application and all associated services (collectively, the "Services").
By using the Services you acknowledge that you have read and understood this Policy and agree to the collection and use of your information as described herein. If you do not agree, please stop using the Services immediately.
This Policy is incorporated into and forms part of our Terms & Conditions.
Table of Contents
The data controller responsible for your personal information is:
KRIMEWATCH FOUNDATION INC (KFI)
Operating the KrimeScene mobile application
Email: contact@krimewatch.com
For all privacy-related questions, requests, or complaints, please contact us at the email address above. We aim to respond within 30 days.
| Data Type | Description | Required? |
|---|---|---|
| User Content | Videos, photos, text reports, incident descriptions, neighbourhood alerts, and any other content you voluntarily submit through the Services. | Optional |
| Missing Persons Reports | Information you submit when reporting a missing person — such as the person's name, description, last known location, and a photo — along with any subsequent status updates you submit. This content is displayed to other users of the Services for community awareness purposes. | Optional |
| Support Communications | Messages or feedback you send directly to KFI when you contact us for support. | Optional |
When you use the Services, we collect a limited set of device-level identifiers necessary to operate the app correctly on your device:
| Data Type | Description | Purpose |
|---|---|---|
| Mobile Device Identifier (mobUID) | A unique identifier associated with your mobile device — this is the sole means by which the app identifies you. There is no username, email, or password. Your device's mobUID is used to associate your content and activity within the Services, and to apply content moderation actions (such as warnings or access restrictions) where required. | Device identification, app functionality, content moderation |
| Device Information | Basic technical information — device model, operating system type, and OS version — collected solely to ensure the app functions correctly on your device. | App compatibility and functionality |
| Location Data | Approximate or precise geographic location, collected only when you actively use location-based features such as local crime search, neighbourhood monitoring, or neighbourhood alerts. You can disable location access at any time in your device settings. | Location-based features and neighbourhood alerts |
| Camera & Microphone | Accessed only when you actively use video recording or photo features. We do not access the camera or microphone in the background at any time. | Video and photo upload features |
We collect information only through the following limited means:
We do not collect information through analytics SDKs, API logs, third-party social platforms, or any passive background tracking mechanisms.
We use the limited information we collect strictly and only for the following purposes:
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| To identify your device and enable access to the Services | Mobile device identifier (mobUID) | Contract performance |
| To display community crime reports, alerts, and safety information | User content, location data | Contract performance |
| To enable neighbourhood monitoring, local crime search, and neighbourhood alerts | Location data, user content | Consent / Contract performance |
| To display and update missing persons reports submitted by users | Missing persons submission content | Contract performance / Legitimate interest |
| To facilitate emergency call features within the app | Device information, location data | Vital interest / Contract performance |
| To process and display videos and photos you upload | User content, camera/microphone access | Contract performance |
| To ensure the app functions correctly on your device | Device information, mobUID | Contract performance / Legitimate interest |
| To issue in-app warnings and apply content moderation actions for Terms violations | mobUID, user content | Legitimate interest / Legal obligation |
| To detect and prevent fraud, abuse, or violations of our Terms | mobUID, user content | Legitimate interest / Legal obligation |
| To respond to your support requests or inquiries | Support communications, mobUID | Contract performance / Legitimate interest |
| To comply with applicable legal obligations | As required by applicable law | Legal obligation |
We share your information only in the following limited and necessary circumstances:
We engage a limited number of trusted third-party vendors solely to help us operate the core infrastructure of the Services — for example, cloud hosting providers that store your content and device data. These providers:
Content you submit to public areas of the Services — including incident reports, videos, neighbourhood alerts, and missing persons reports — is visible to other KrimeScene users by the nature of the platform. Please see Sections 6 and 7 for important information about public content.
KFI currently has no formal agreement or partnership with any governmental, regulatory, or public safety authority and does not proactively share user information with any such authority. However, in the event that we receive a lawful and binding legal demand — such as a court order, subpoena, or mandatory legal process issued under applicable law in the United States or India — we may be legally compelled to disclose certain information. In such cases, we will:
KFI does not voluntarily share or report user information to any governmental, regulatory, or public safety authority absent a mandatory legal obligation.
If KFI undergoes a merger, acquisition, reorganisation, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.
KrimeScene is a community awareness platform. When you post videos, photos, incident reports, neighbourhood alerts, or other content through the Services, that content may be visible to all other users of the Services. Content you post publicly is not private.
If your post contains personal information about a third party, you are solely responsible for ensuring you have the legal right to share that information.
KrimeScene includes a community-based missing persons awareness feature. When you submit a missing persons report, the information you provide — including the person's name, description, last known location, photograph, and status updates — is displayed publicly to other users of the Services for community awareness purposes.
| Data Type | Description | Visible to Other Users? |
|---|---|---|
| Person's name | Name of the reported missing individual. | Yes |
| Physical description | Age, height, appearance, and clothing details provided by the submitter. | Yes |
| Last known location | Location information provided voluntarily by the submitter. | Yes |
| Photo | A photograph of the missing individual, if voluntarily provided. | Yes |
| Status updates | Updates to the report status (e.g. "found safe") submitted by users. | Yes |
| Submitter's mobUID | Used internally by KFI for moderation purposes only. Not displayed to other users. | No — internal only |
Missing persons data submitted through the Services is used solely to:
KFI does not share missing persons data with any governmental, regulatory, or public safety authority unless legally compelled to do so as described in Section 5.3.
Missing persons reports contain personal information about individuals who have not themselves submitted their data to the Services. By submitting a missing persons report, you represent and warrant that:
You are solely responsible for the accuracy and lawfulness of missing persons information you submit. KFI accepts no liability for false, inaccurate, or unauthorised missing persons submissions.
We retain only the data we collect, for only as long as necessary to provide the Services:
| Data Type | Retention Period |
|---|---|
| Mobile Device Identifier (mobUID) | Retained for as long as you use the Services. If you stop using the app and request removal of your device's data, we will process that request within 30 days. Contact us at contact@krimewatch.com. |
| Device information | Retained for as long as your mobUID is active in our system. Deleted upon confirmed deletion of your device's data. |
| User-submitted content (videos, photos, reports, alerts) | Retained until you delete the content within the app, or until KFI removes it in accordance with our Terms & Conditions. |
| Missing persons reports | Retained until the report is removed by the submitter, marked as resolved, or removed by KFI. KFI may retain a record of removed reports for moderation and safety purposes for a reasonable period. |
| Location data | Used in real time to power location-based features only. Historical location data is not stored persistently. |
| Support communications | Retained for as long as needed to resolve your inquiry and for a reasonable period thereafter, then deleted. |
To request deletion of any data we hold associated with your device, contact us at contact@krimewatch.com. We will process your request within 30 days.
KFI implements commercially reasonable technical and administrative security measures to protect the limited personal information we hold from unauthorised access, disclosure, alteration, and destruction. These include:
If you believe your device's data or the Services have been compromised, contact us immediately at contact@krimewatch.com.
KrimeScene is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Because the app uses device identification (mobUID) rather than account registration, we rely on users and their parents or guardians to comply with the age requirement set out in our Terms & Conditions.
If you are a parent or guardian and believe your child under 13 has used the Services and submitted information, please contact us at contact@krimewatch.com and we will take prompt steps to delete any such information associated with that device from our systems.
Users aged 13 to 17 must have parental or guardian consent as outlined in our Terms & Conditions. KFI is not liable for underage use that occurs without parental knowledge or consent.
The Services may integrate with or link to third-party services necessary to operate the app — primarily cloud hosting and infrastructure providers. We do not integrate with social media platforms, advertising networks, analytics providers, or third-party tracking tools.
Third-party service providers we engage (such as cloud hosting) have their own privacy policies and security practices. These providers process your data only on our behalf and under contractual data protection obligations. KFI is not responsible for the independent privacy practices of third-party providers beyond what we contractually require of them.
The Services may contain links to external websites or resources. KFI has no control over, and is not responsible for, the content or privacy practices of any linked third-party websites.
KFI does not currently use third-party artificial intelligence (AI) services to process your personal data. If this changes, this Policy will be updated accordingly.
Regardless of where you are located, you may exercise the following rights with respect to your personal information by contacting us at contact@krimewatch.com:
| Right | What it means |
|---|---|
| Access | Request confirmation of what personal information KFI holds associated with your device (mobUID). |
| Correction | Ask us to correct inaccurate data we hold, including inaccurate missing persons report data you submitted. |
| Deletion | Request that we delete personal information associated with your device (mobUID) from our systems. |
| Restriction | Ask us to limit how we use your information in certain circumstances. |
| Objection | Object to processing where we rely on legitimate interests as the legal basis. |
| Withdraw Consent | Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing. |
We will respond to all rights requests within 30 days. We may need to verify your identity (by confirming your device's mobUID) before fulfilling your request.
If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data. KFI acts as the data controller for your personal data.
Legal bases for processing. We process your personal data under one or more of the following lawful bases: (a) performance of a contract with you; (b) our legitimate interests, provided these are not overridden by your fundamental rights and freedoms; (c) compliance with a legal obligation; or (d) your consent, where explicitly obtained.
Your GDPR rights include: the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing based on legitimate interests. You also have the right to lodge a complaint with your local data protection supervisory authority.
To exercise your GDPR rights, contact us at contact@krimewatch.com. We will respond within 30 days.
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information.
You have the right to:
Categories of personal information collected in the past 12 months: Identifiers (mobile device identifier / mobUID); Device information (device model, OS version); Geolocation data (when location features are actively used); Audio/visual information (videos and photos you upload); User-generated content (incident reports, neighbourhood alerts, missing persons submissions).
We have not sold or shared personal information for cross-context behavioural advertising in the past 12 months or at any time.
To submit a CCPA/CPRA request, contact us at contact@krimewatch.com. We will respond within 45 days as required by law.
If you are located in India, the Digital Personal Data Protection Act, 2023 (DPDP Act) applies to our processing of your personal data. KFI acts as the Data Fiduciary under the DPDP Act and processes your personal data in accordance with its requirements.
Your rights as a Data Principal under the DPDP Act include:
Consent. KFI obtains your consent prior to processing your personal data where required under the DPDP Act. By using the Services, you provide consent to the processing described in this Policy. You may withdraw consent at any time by contacting us.
Grievance Officer. In accordance with the DPDP Act and applicable Indian law, KFI designates the following contact for grievance redressal:
KRIMEWATCH FOUNDATION INC — Grievance Officer
Email: contact@krimewatch.com
We will acknowledge your grievance within 48 hours and aim to
resolve it within 30 days.
If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India once it is constituted under the DPDP Act.
KFI operates in the United States and India. Your personal information may be stored and processed in either or both of these countries. Data protection laws in these countries may differ from those in your jurisdiction.
Where we transfer personal data from the EEA or UK to countries not deemed adequate by the relevant supervisory authorities, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
By using the Services, you acknowledge that your information may be transferred to and processed in the United States and India as described in this Policy.
KFI may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or the Services. When we make material changes, we will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify you via the app.
Your continued use of the Services after an updated Policy is posted constitutes your acceptance of the changes. If you do not agree to the updated Policy, you must stop using the Services. We encourage you to review this page periodically.
For any questions, requests, or complaints about this Privacy Policy or our data practices, please contact:
KRIMEWATCH FOUNDATION INC (KFI)
Email: contact@krimewatch.com
We will acknowledge your inquiry within 48 hours and resolve it within 30 days. If you are not satisfied with our response, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.