IziCamera — Privacy Policy

Effective date: July 4, 2026 (draft — review before publishing)

IziCamera ("the app", "we") turns your spare phone into a home security camera. This policy explains what data the app handles, where it goes, and what control you have. The short version: your cameras exist for your eyes, not ours — we do not sell your data, we do not use your footage to train AI, and most video never touches our servers at all.

1. Who we are

IziCamera is operated by [YOUR NAME / COMPANY NAME], contact: pcmdsiziadvertising@gmail.com. (Add a postal address before Play Store publication if required in your jurisdiction.)

2. What data we collect and why

Data	What it is	Why we need it
Account	Email address and a password (stored hashed by our authentication provider)	To create and secure your account
Camera metadata	Camera names, camera codes, online status ("last seen"), battery level, charging state, connection type (WiFi/mobile)	So your dashboard can show whether your cameras are alive and healthy
Motion events	Time, duration, detection type (e.g. "person"), and whether the alarm fired	Your Event History
Snapshots & thumbnails	Still images captured at motion events, manual snapshots, and a periodically refreshed preview image per camera	So events have pictures and your dashboard has previews
Video clips (recordings)	Recorded on the camera phone itself. A clip is uploaded to our storage only when you ask to watch or share it remotely	Remote playback that you explicitly request
Live video/audio streams	Transmitted directly between your devices using WebRTC (peer-to-peer where possible). We do not record or store your live streams. Our signaling server only helps your devices find each other; a relay (TURN) server may carry the encrypted stream when a direct connection is impossible	Live viewing
Push notification tokens	A device token from the notification service	To deliver motion/doorbell/offline alerts
Trust Circle shares	Which accounts you shared a camera with and their permission level	Family sharing

We do not collect: contacts, precise location, advertising identifiers, or anything from your phone unrelated to the camera function.

3. What we do NOT do

• We do not sell or rent your personal data.
• We do not use your images, clips, or streams to train AI models. Person/animal/vehicle detection runs entirely on your own device.
• We do not watch your cameras. Access to camera data is scoped to your account and the people you explicitly share with.

4. Where data is stored

• Recordings live on the camera phone's own storage, under the cap you choose; oldest clips are deleted automatically.
• Account data, events, snapshots, and camera metadata are stored with our backend provider (Supabase).
• Signaling/relay servers pass connection messages and, when needed, encrypted media; they do not store footage.

All live media is encrypted in transit (WebRTC DTLS-SRTP). (Note: signaling currently uses a plain WebSocket; snapshot/clip links are unlisted URLs. Both are scheduled for hardening — TLS signaling and private storage with expiring links — before public release. Update this section when done.)

5. Sharing with others

Camera access can be shared with other IziCamera accounts at "view-only" or "view & control" level. The people you share with can see that camera's live stream, events, snapshots, and clips. You can revoke a share at any time in the app.

6. Data retention

• Recordings: kept on the camera phone until the storage cap rotates them out or you delete them.
• Events and snapshots: kept until you delete them or your account.
• Account deletion (in-app: Account → Delete Account) permanently removes your account, cameras, events, snapshots metadata, shares, and push tokens.

7. Your rights (GDPR / LGPD)

Depending on where you live, you have the right to access, correct, export, or delete your personal data, and to complain to a supervisory authority. The in-app account deletion covers erasure; for anything else, email pcmdsiziadvertising@gmail.com.

8. Children

IziCamera is not directed at children under 13 (or the higher age your country sets), and we do not knowingly collect their data.

9. Changes

We will update this policy as the app evolves (for example, when subscriptions or ads are introduced) and note the new effective date here. Material changes will be announced in the app.