Privacy and safety

Children

Pehra never enrols, identifies or estimates the age of children, and it has no watches about children. A watch that asks about age is refused before it is saved, in words, numbers, heights and many Indian languages and scripts. The AI is told never to judge age, and its text is checked again before anyone sees it.

Faces

• Only adult staff who agreed are enrolled, from 3 to 5 photos. The photos are not kept, only templates.
• Staff are matched only on entry, gate and service door cameras. The register keeps when each was first seen and last seen each day.
• Residents and visitors are never identified: to Pehra they are a person, a car or a cab.
• Nobody can search footage with a photo of a face.
• A lookout that follows a person by how they look is off unless the operator turns it on.

Blur

Telegram gets still pictures, never video, with the faces of anyone not enrolled blurred. A phone or laptop used as a camera blurs faces with OpenCV.js before a picture leaves it. Blurring is automatic, so a face can occasionally be missed. Clips stay behind sign in, open by role, and every view is recorded.

What the AI sees

A few stills of a flagged moment and the watch's words, never the live stream or whole clips. Each society has a daily limit, and so does the whole server. The live demo asks OpenRouter for providers that keep nothing.

How long footage is kept

• Free: footage kept 7 days.
• Society: footage kept 30 days.
• Large sites: footage kept as long as agreed.

After that, footage, clips, stills, gate log rows and register rows are deleted automatically. Example pictures a society saves for a zone's state are kept, and choosing them well is the society's responsibility.

Who decides

Under India's DPDP Act the society is the data fiduciary and Pehra its processor. Pehra makes a printable notice for each camera zone. To close a society's account, email hello@dijmo.com from the owner's account email; there is no self serve deletion yet.

Next: Self hosting