Field Capture privacy notice
Important: Field Capture is a private moderation beta. Community media is not automatically published. Exact device location is collected only when a participant deliberately starts Field Capture and accepts the collection notice.
What Enroofe collects for Field Capture
For a submitted field set, Enroofe collects the live-camera image bytes, capture time, two device-location fixes (before and after capture), reported location accuracy, a one-time server challenge, SHA-256 media hashes, the selected neutral observation category, and a short-lived salted request hash used only for abuse rate limiting. Raw IP addresses are not written to the capture database.
Why precise location is collected
The purpose is narrow: assess whether the device reported a consistent location during the in-app capture session. Exact coordinates are stored encrypted for private review. A public-facing record, if a separate publication decision is later made, must use a coarser approximate location and must not reveal the participant’s precise movement or home location.
What the capture proves
A location-recorded capture supports a statement about the Enroofe capture process and the location signals received by Enroofe. It does not prove the cause of vegetation change, prove that a chemical was used, identify a responsible person or organisation, or certify an area as safe or unsafe.
Storage and retention
Original media is placed in a private object store and exact location is encrypted separately from public coordinates. This beta assigns a 90-day deletion deadline to private capture records. Public contribution remains gated until the operator has deployed the supplied scheduled housekeeping worker. Once enabled, the worker removes expired private media and capture records automatically. Records should be deleted earlier where they are no longer needed, subject to any genuine legal preservation obligation.
People in photographs
Participants are instructed to avoid faces, children, number plates, private property and worker identification. A submission containing unnecessary personal information can be rejected or removed. A later public-media pipeline should add automated redaction plus human review before any community image is displayed.
Access, correction and contact
For privacy questions, access/correction requests or deletion requests, use the current contact channel published by Sentinuity Labs and include the Enroofe capture ID where available. Do not send precise coordinates in an ordinary email unless specifically requested through a secure channel.
Legal scope
This notice is engineered around data minimisation, notice-before-collection, security and retention principles. It is not a substitute for advice from an Australian privacy lawyer about the exact operating entity, hosting arrangements, overseas disclosures, insurance, contracts or future reward program before a public-scale launch.