Privacy Policy

Last updated: June 25, 2026

1. Our approach to your data

camera.ui is local-first. It runs on your own hardware, and your cameras, video, and recordings stay on your server. We designed it so that, in most cases, we never receive your video or recordings at all. This policy explains exactly what data reaches us — and that depends on how you use camera.ui. The short version: if you run camera.ui locally without an account, we receive nothing; if you use our cloud to connect remotely, we handle account and connection data but not your video; and if you subscribe to recording, we additionally process billing and notification data as described below.

2. Who we are

camera.ui is operated by [legal entity name and registered address — to be completed]. For any privacy question you can reach us by email at [email protected]. References to "we", "us", and "camera.ui" mean the operator of the camera.ui cloud services at the cameraui.com domains.

3. What we collect depends on how you use camera.ui

3.1 Running camera.ui locally (no account)

If you run camera.ui on your own network without connecting it to a camera.ui account, the software does not send any personal data to us. To stay up to date and to download AI models, your server may contact third-party services we do not operate — software registries (npm, PyPI) and GitHub (for AI models). If you choose to configure an external AI provider (such as OpenAI or Google Gemini) for AI descriptions, your server contacts that provider directly with the API key and images you supply; those providers are not operated by us and handle that data under their own policies.

3.2 Connecting through camera.ui Cloud (free account)

To reach your server from outside your network, you can create a free camera.ui account. In that case we store:

  • Account: your email address and display name. Your password is handled by our identity provider (Google Firebase Authentication) and is never stored by us.
  • Server registration: an identifier and the name you give each server. We do not store your server's address, IP, or URL.
  • Connection metadata: for each signed-in device, a device name, platform, app version, IP address, and timestamps — used to manage your sessions and protect your account.
  • Server status: a last-seen time and connection state, for diagnostics.

When you view your cameras remotely, camera.ui Cloud only helps your app and your server find and connect to each other; the session then runs directly between them. Your live video, recordings, and credentials travel directly to your own server and are not routed through or visible to us.

3.3 With an NVR subscription (paid)

If you subscribe to recording (NVR), we additionally process:

  • Billing: payments are handled by Stripe. We never receive or store your card details — only your Stripe customer and subscription identifiers, and your plan and status.
  • Licensing: which server a subscription is assigned to, the number of recording slots in use, and the license tokens issued to your server.
  • Push notifications: described in Section 4.

4. Push notifications

If you enable push notifications to a mobile device, each notification is sent from your server through our cloud and on to Apple (APNs) or Google (FCM) for delivery. The notification text may include information such as a camera name, what was detected, and the time. We forward this only to deliver it and do not store the content of your notifications. Any image preview is fetched by your phone directly from your own server, not from us. We store the push token for your device so we can address notifications to it; it is removed when you sign out or after a period of inactivity.

5. What stays on your server

  • Your video streams, recordings, and snapshots stay on your server.
  • Your camera credentials and configuration stay on your server.
  • Remote viewing runs directly to your server, so your live and recorded video is not visible to us.

6. How we use the data we collect

  • To provide accounts, remote access, and — if you subscribe — recording and notifications
  • To secure your account and notify you of sign-ins and security events
  • To process payments and manage subscriptions
  • To provide customer support and fix problems
  • To meet our legal obligations

We do not sell your data, and we do not use it for advertising or profiling.

7. Service providers (sub-processors)

We rely on a small number of providers to operate the cloud service:

  • Google Firebase Authentication — account sign-in and password handling
  • Apple Push Notification service and Google Firebase Cloud Messaging — delivering push notifications
  • Stripe — payment processing
  • Cloudflare — network and security for our cloud

Your local server may also contact npm, PyPI, and GitHub for software updates and AI models; these are operated by third parties, not by us.

8. Data retention

  • Account and subscription data: kept while your account is active, and deleted when you delete your account.
  • Connection / session metadata: kept up to 30 days after a device is last used, and at most 12 months.
  • Push tokens: removed when you sign out or after 90 days of inactivity.
  • Security and account audit records: kept for 12 months.

9. Your rights

Subject to applicable law (including the GDPR), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to certain processing
  • Receive your data in a portable form
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with your data-protection supervisory authority

To exercise any of these, contact us at [email protected].

10. International data transfers

Some of our providers (such as Stripe, Google, Apple, and Cloudflare) may process data in countries other than your own. Where they do, appropriate safeguards apply, such as the European Commission's Standard Contractual Clauses.

11. Children's privacy

Our services are not intended for users under the age of 16, and we do not knowingly collect personal information from children under 16.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date above.

13. Contact us

If you have any questions about this Privacy Policy, please contact us: