KOR'K Sensor

KOR'K Sensor 06 Trust and privacy

Chapter 06

Trust and privacy

A device with a camera in a child's bedroom has to earn trust. Here is what really happens, what the object shows, and what it does not do today.

The data

The real journey of a video

The diagram

At home, or at the stand Cloud, European Union Outside the European Union local Wi-Fi internet a copy without the name the report comes back to the app The device films a clip,kept in RAM films and analyseson the spot The iPhone KOR'K Scan app:imports the clip KOR'K Scan app:gets the result Supabase Frankfurt; videodeleted after30 days Gemini Google: analyses,then deletes its copyright away No video leaves At home, or at the stand local Wi-Fi internet a copy, without the name the report comes back to the app Cloud, European UnionOutside the European Union The device films a clip,kept in RAM films and analyseson the spot The iPhone KOR'K Scan app:imports the clip KOR'K Scan app:gets the result Supabase Frankfurt; videodeleted after30 days Gemini Google: analyses,then deletes its copyright away No video leaves
  • stays in the room
  • goes over the internet
  • outside the European Union

This is the goal for future versions, not the prototype: the analysis would run inside the device, and only the result would reach the app. No video would leave the home.

Sources: “Infos projet” sheet (Notion, 26 Sep 2026); design journal, steps 2 and 5; explanatory page for the stand (9 Nov 2026).

  1. The device

    In the bedroom

    Films a clip, kept in RAM. At the stand, only after explicit consent.

  2. The iPhone

    At the parent's home

    Retrieves the clip. The KOR'K Scan app imports it from the camera roll, like any other video: the app does not need to be modified.

  3. Supabase

    European Union, Frankfurt

    Stores the video, which is deleted there after 30 days. The report, however, is kept.

  4. Gemini

    Google, outside the European Union

    Receives a copy for the analysis, on the paid tier, with no training on the data. The copy is deleted straight afterwards.

  5. The report

    In the app

    Goes back to the parent. The child's first name is never transmitted. Consent can be withdrawn, and the account deleted, in the app.

Who does what

Neither the unit nor the iPhone analyses anything.

The unit
Films and crops. In the V1, it always crops the same area of floor, and it keeps the clip in RAM.
The iPhone
Carries. It fetches the clip over the same Wi-Fi network as the unit, then the KOR'K Scan app sends it to the server.
The server, then Gemini
Analyse the video and produce the report.

An iPhone is needed because the KOR'K Scan app currently exists only on iPhone. An Android version is planned, with no date: it is being developed alongside version 1.1.0 of the app, and nothing is in production yet. The unit's own pages open in a web browser, on the same Wi-Fi network.

Sources: 06-logiciel/README.md and 06-logiciel/installation/setup.sh; Amdy, for the Android version (10 Nov 2026).

We never write “videos stay in the EU”: a copy goes to Gemini, outside the EU, for the time of the analysis.

Sources: “Infos projet” sheet (Notion, 26 Sep 2026); design journal, steps 2 and 5. The orange line marks the step outside the EU.

The object

An indicator light and a shutter, visible from across the room

Indicator light

Shutter

I wanted two modes that can be told apart at a glance: white, the preview, nothing is recorded; red, recording. The indicator light stays on as long as the camera is filming. The Raspberry Pi's small status LEDs are switched off in software, so that they are not mistaken for it.

The shutter closes by hand. When closed, it covers the lens, and recording is refused or the image is black: this is one of the tests to pass before departure.

Sources: decision register; journal, steps 8, 11 and 12; V1 drawings, “Sécurité” page and checklist (9 Nov 2026). Simplified diagram; the indicator light colours match the software setting.

At the stand

The rules I set myself

Try it

  1. Presentationwhite light, nothing is recorded
  2. Consent given“I agree”, valid for 5 minutes
  3. Recordingred light, 60 s at most
  4. Clip in RAMnever written to the SD card
  5. To the iPhoneafter a second consent, clip by clip

Clips in RAM: 0

The same rules as the device's software, replayed here sped up. Ten minutes of inactivity or a restart also delete the clips. Source: 06-logiciel/README.md and kork_sensor/etat.py, checked by 16 automated tests (9 Nov 2026).

  1. 1

    A marked zone on the floor

    A sign in French, English and German shows where the camera is filming, from 1.2 to 2.7 m from the corner.

  2. 2

    Nothing without explicit consent

    Recording only starts after an “I agree” on the iPhone or verbal consent.

  3. 3

    No child without a parent

    And the device is never above a child: it is fixed at the top of a corner of panels, with the lens at 1.6 m.

  4. 4

    Clips deleted, never analysed without consent

    After the demonstration, the clips are deleted. None is sent for analysis without a second consent.

  5. 5

    Reports shown on demonstration videos

    The app's report is shown on videos prepared in advance, never on visitors' videos.

These rules do not rest on words alone: the software enforces them in code, with a tested state machine, clips kept in RAM and consent given clip by clip.

Sources: journal, step 12; decision register; 03-plans/stand/panneau-et-accord.md (9 Nov 2026).

Honestly

What the device does not do today

  • It analyses nothing. The analysis is done in the cloud, by KOR'K Scan. AI inside the device remains the goal.
  • It does not blur other people. This is in development. At the stand, we stick to the floor zone, consent and deletion.
  • It does not record continuously. The “bedroom” mode (30 s slices sorted on the device, the rest deleted in under a minute) is planned, not yet coded.
  • It does not follow the child. At the stand, the filmed zone is fixed.
  • It must never be left unsupervised with a child. It is a demonstration prototype.

The framework

KOR'K stays on the side of observation: never a diagnosis. The boundary with regulated health products is one of the points being followed for the Sensor.

Sources: journal, steps 8 and 12; Notion, “Palier 6 — KOR'K Sensor” (28 June 2026) and “Infos projet”.