Anonymous by design
Pantepoptes Citizen is operated by SBB Innovations for participating cities. The Citizen app does not ask for or store your name, phone number, email address, user account, contacts, or advertising identifier as part of an incident report. A report is identified by a private tracking secret rather than by a citizen identity.
Anonymous reporting does not guarantee that the content itself is anonymous. A face, voice, vehicle plate, home address, written description, or precise location may identify a person. Capture only what is necessary for the incident and do not include personal information unless it is essential to public safety.
Information you choose to provide
- A new photo or video captured inside the app as incident evidence.
- An optional written description of the incident.
- Precise location only when you grant location permission and choose to include it, or a city selected manually.
- A private tracking secret used only when you ask for a public-safe report update.
The app blocks selection of existing device photos and videos. It does not use advertising or third-party advertising analytics SDKs.
Internet infrastructure may temporarily process technical connection information, such as an IP address, to deliver and secure the service. Pantepoptes does not attach this information to the public tracking record or use it to build a citizen profile.
How report data is used
Report data is used to validate evidence, identify the responsible service category, route the incident to the selected city's authorized operations team or agency, coordinate a response, prevent abuse, and provide a limited tracking update. Pantepoptes does not sell citizen report data.
Who can access a report
Access is restricted to authorized city administrators, assigned agencies, and named response personnel who need the information to handle the incident. Administrative access, evidence viewing, assignment, and status changes are auditable. Public tracking does not expose exact GPS coordinates, internal notes, personnel details, or unrestricted evidence.
Service providers
SBB Innovations and participating organizations use contracted infrastructure providers only to operate Pantepoptes. This includes DigitalOcean infrastructure and DigitalOcean Spaces for encrypted evidence object storage, as well as hosting, email-delivery, mapping or geocoding, malware-scanning, and monitoring providers where configured.
These providers process information on behalf of SBB Innovations or the participating organization under their service terms. Report data is not sold, rented, or shared for behavioral advertising.
Security and retention
Production traffic is encrypted in transit. Evidence is stored in protected object storage or a controlled server fallback and is accessed through short-lived signed links. Evidence metadata is inspected, and embedded device or GPS metadata is removed when supported. Role-based access controls and audit logs protect operational access.
Evidence, incident coordinates, audit records, and operational records are retained only as long as required by the participating city's response, safety, legal, and public-record policy. Authorized administrators may archive nuisance submissions for a defined number of days, after which they are deleted. Expired data is also removed from operational storage through scheduled retention processes; protected backups expire through their own controlled lifecycle.
Keep your private tracking secret confidential. Anyone who possesses it may be able to view the limited tracking status.
Your choices
You may deny location permission and select the incident city manually. You may leave the description blank and submit only live camera evidence. To ask about access, retention, archiving, or deletion, contact the participating city or SBB Innovations and provide only the private tracking secret—never personal details you do not wish to disclose. Legal or public-record requirements may limit deletion.
Children and emergencies
Pantepoptes Citizen is not designed to create accounts or profiles for children. It is not a replacement for emergency services. If there is an immediate threat to life or safety, contact the local emergency number.
Policy changes
Material changes will be posted on this page with a revised effective date. A participating city may also publish additional retention or public-record notices that apply within its jurisdiction.
Operator and contact
SBB Innovations
Pantepoptes privacy and support
admin@pantepoptes.com
For a city-specific incident request, contact the participating city first. Do not email incident evidence or unnecessary personal information.