Privacy Policy

Effective June 13, 2026 · Dromos Inc.

This Privacy Policy explains how Dromos Inc. ("Dromos", "we", "us") handles information in connection with the HazSight Android application (the "App") and the website at hazsight.ai (the "Site"). HazSight is designed to function without collecting personal information. This policy describes that design.

1. Information processed on your device

When you point the App at a placard and capture an image, the image and the resulting safety guidance are processed locally on your device by an on-device AI model and a local copy of the 2024 Emergency Response Guidebook. On the path from image capture to displayed and spoken guidance, the App makes no network calls. Captured images are not transmitted to us or to any third party except through the optional features described in Section 3.

2. Device permissions

• Camera — used solely to capture the image you analyze. Images are processed on-device.
• Location — optional. Requested only if you enable community alerting (Section 3). When used, a coarse, approximate location (a geohash) is attached to anonymous alerts; we do not store identity-linked location.

3. Optional features that transmit data

3.1 Anonymous community alerting

If you opt in, the App can broadcast and receive anonymous proximity alerts about nearby hazardous-materials incidents through a relay service operated on Cloudflare (a Cloudflare Worker backed by Cloudflare Workers KV). Alerts carry a coarse geohash and hazard information only. The relay does not store who sent an alert, your account (there is none), your precise location, or device identifiers, and alert records are transient (subject to short time-to-live and cooldown logic). This feature is off until you enable it.

3.2 Optional diagnostic reporting

If you opt in, the App can send a diagnostic report to help us improve identification accuracy. A report may include the captured image, technical diagnostics, your device model, and optionally a coarse location. If you choose to provide them — for example, so we can follow up with you — a report may also include your name and email address; these are never required, and a report sent without them stays anonymous. A report never includes your IP address or a persistent device identifier. Reporting is off until you enable it and is sent asynchronously.

4. The website

The Site is a static informational page hosted on Cloudflare Pages. We do not set advertising or analytics cookies on the Site. As with any website, our hosting provider (Cloudflare) automatically processes standard request metadata (such as IP address and user agent) for security, abuse prevention, and content delivery, in accordance with Cloudflare's own terms and privacy practices.

5. How we use information

We use the limited, anonymous information described above only to operate and improve HazSight's safety functionality and to maintain the security and reliability of the Site and relay. We do not use it for advertising, profiling, or sale.

6. Sharing

We do not sell personal information. We rely on infrastructure providers ("processors") strictly to operate the service — currently Cloudflare for Site hosting and the alert relay. The on-device AI model (Google Gemma) runs locally on your device; analyzing an image does not send it to Google. We may disclose information if required by law or to protect rights and safety.

7. Data retention and deletion

On-device data. The App stores your settings, search history, and any cached guidance locally on your device; we never receive this data. You can delete all of it at any time by clearing the App's storage (Android: Settings → Apps → HazSight → Storage → Clear data) or by uninstalling the App, which removes all on-device data immediately.

Community-alert records. Anonymous alerts on the relay are automatically and permanently deleted one hour (3,600 seconds) after they are broadcast; broadcast-cooldown sentinels expire after five minutes. These records carry no account, identity, or device identifier, so there is nothing tied to you to delete and no action is required on your part.

Diagnostic reports. If you opt in to send a diagnostic report, it opens a support ticket so we can investigate and improve identification accuracy, and we retain the report for as long as needed for that purpose. A report includes your name and email address only if you chose to provide them; when you do, we remove your name and email 90 days after the related ticket is closed and has had no further activity. A report contains no IP address or persistent device identifier, and each carries only a one-time random ID that is never stored on your device. You can ask us to delete a report you sent, or just your contact details, at any time by emailing privacy@dromos.ai; we will action the request and confirm.

There are no user accounts, so there is no account data to retain or delete.

8. Children

HazSight is a public-safety tool intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children.

9. Your choices and rights

Community alerting and diagnostic reporting are opt-in and can be disabled at any time in the App's settings. Because HazSight is designed not to hold information that identifies you, we may be unable to associate any data with a particular individual. For privacy questions or requests, contact us at the address below and we will respond as required by applicable law.

10. International users

HazSight is operated from the United States. If you use it from another country, you understand that any data transmitted through optional features may be processed in the United States and other countries where our processors operate.

11. Changes

We may update this Policy. Material changes will be reflected by a new effective date at the top of this page.

12. Contact

Dromos Inc. — privacy@dromos.ai

See also the Terms of Service and the Safety Disclaimer & Limitation of Liability.