Privacy and data safety
Workers can't stay safe if they're afraid to speak up. Sombra keeps as little as possible, for as short a time as possible.
What we keep
- A random worker code (like w-a6ju) stored on the worker's own phone. No names, phone numbers, emails or photos.
- The day's plan: crews, fields, hours, water, shade.
- Messages between a crew and its crew boss, with their translations and our model's health label.
What we never keep
- Voice recordings. Audio is sent once for transcription and we never store it; only the text is kept.
- Location. Field positions are set by the crew boss; workers' phones are never tracked.
- Anything after the day. Plans and messages delete themselves after 48 hours, and End day removes the plan from every phone at once.
Who sees what
- On the phone, a worker sees their own crew's plan and their own messages only.
- The crew boss sees each crew's channel separately.
- No ads, no tracking scripts, no selling or sharing of data.
Services that touch the data
- OpenRouter and Groq (AI): receive message text to translate and understand it. Nothing else.
- Groq Whisper: receives a short audio clip to turn speech into text.
- Upstash (storage): holds plans and messages for up to 48 hours, encrypted in transit.
- Open-Meteo (weather): receives field coordinates only. Never any worker data.
- API keys stay on our server and are never sent to phones or browsers.
Safety limits
- Sombra supports a crew boss; it is not a medical device and never replaces calling 911.
- AI can be wrong, so plain code enforces the heat law, and the AI can only raise a health alert, never lower one.
- This is a hackathon prototype: anyone with a plan's link can open it. A real rollout would add a crew-boss login, worker consent in their language, and SMS for workers without smartphones.