Privacy Policy
Effective Date: April 11, 2026
Snitch Cam ("we", "our", or "us") is a personal security camera service that lets you turn an old Android phone into a time-lapse camera and monitor it from a dashboard app on your main phone. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data.
This policy applies to the Snitch Cam camera app (Android), the Snitch Cam dashboard app (iOS and Android), the Snitch Cam website (snitch.cam), and the related backend service at api.snitch.cam (together, the "Service").
By creating an account or otherwise using the Service, you agree to the practices described in this policy.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Your name
- Your email address
- A password, which we store only as a salted bcrypt hash — we never store or log your plaintext password
- Optional profile fields you choose to add, such as a profile picture or phone number
1.2 Images and Timelapse Videos
The camera app captures images on a schedule you configure (or when you tap "instant capture" from the dashboard) and uploads them to our cloud storage so you can view them in the dashboard app. If you generate timelapse videos from those images, the rendered videos are also stored in our cloud storage.
We store the full-size image and a small thumbnail for each capture, along with metadata: the capture time, the camera device's battery level at the time of capture, and whether the camera was charging. We do not collect or derive location data from your images.
1.3 Camera Device Information
The camera app reports limited device information so the dashboard can show you the camera's status and so we can keep the capture service running reliably on unattended devices:
- Device model, Android version, and a unique device identifier for pairing
- Current battery level and charging state
- Connection status and the timestamp of the camera's last activity
- A device token used to send push notifications (for example, a "camera went offline" alert)
1.4 Subscription Information
If you upgrade to Snitch Cam Pro, your subscription is processed through Apple's App Store or Google Play, and subscription state (active, expired, renewal date, product ID) is managed for us by RevenueCat. We receive the status of your subscription so we can unlock paid features — we do not receive or store your payment card details, Apple ID, or Google account.
If you redeem a promo code, we record which code you redeemed so the same code can't be redeemed twice by the same account.
1.5 Logs and Technical Data
Our backend automatically logs basic request metadata to operate the Service — for example, timestamps, HTTP methods, response codes, IP addresses, and error traces. These logs are retained for operational troubleshooting and rotated on a short schedule. We do not use them for advertising or profiling.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Store and deliver your captured images and timelapse videos
- Authenticate you and keep your account secure
- Let you know when your camera device goes offline or has a low battery
- Unlock paid features based on the subscription state reported by RevenueCat
- Diagnose technical problems and improve reliability
- Respond to your support requests and legal obligations
We do not use your information to build advertising profiles, train machine learning models, or sell data to third parties under any circumstances.
3. How and Where We Store Your Data
We store your data across the following infrastructure providers:
- Amazon Web Services (AWS) S3 — stores your captured images, thumbnails, and rendered timelapse videos. Our S3 bucket is in the us-east-1 region (Northern Virginia, USA). Objects are encrypted at rest using AES-256 (AWS S3 server-side encryption) and in transit using TLS.
- MongoDB Atlas — stores your account record, camera pairings, image metadata, shoot plan configurations, and subscription state. Encrypted at rest and in transit.
- Railway — hosts the application backend that processes your requests. No user data is persisted on Railway servers — they just run our application code.
All transfers between your apps and our backend are encrypted with TLS 1.2 or higher.
Retention
We keep your data for as long as your account is active, subject to the tier-specific retention rules below:
- Free tier: captured images are automatically deleted 30 days after they were taken.
- Pro tier: captured images are kept for as long as you have an active Pro subscription. If you cancel Pro and your total storage exceeds the Free tier limit, your account enters a 30-day read-only grace period — during this window your images remain visible but no new uploads are accepted. At the end of the grace period, the oldest images are automatically removed until your storage fits within the Free tier limit.
- Account deletion: when you delete your account, all of your images, videos, camera pairings, and profile data are permanently removed from our systems on the next run of our cleanup job (within 24 hours).
4. Who We Share Data With
We do not sell, rent, or trade your personal information or images to any third party.
We share limited data with the following service providers strictly to operate the Service:
- Amazon Web Services — cloud storage for your images and videos.
- MongoDB Atlas — managed database for your account and metadata.
- Railway — application hosting.
- RevenueCat — subscription management and receipt validation. RevenueCat receives a pseudonymous user ID (your internal account ID), the product purchased, and transaction metadata returned by the app stores.
- Apple App Store and Google Play Store — process your subscription purchases. They receive payment information directly; we do not.
- Gmail (Google Workspace) — sends transactional emails such as password-reset messages. Contains only the data shown in the email (your name, email, and a one-time reset link).
We may also disclose information if required by law, to respond to a valid legal process, or to protect the rights, property, or safety of Snitch Cam, our users, or others.
If Snitch Cam is ever acquired or merged with another company, your data may be transferred as part of that transaction. You will be notified in advance through the email address on your account.
5. Camera Capture Behavior
The camera app only captures images when:
- An active shoot plan you configured is running, at the interval you set
- You tap "instant capture" from the dashboard app
The camera does not:
- Capture audio
- Use motion detection or trigger based on what's in view
- Stream live video
- Capture images outside of the schedules or triggers above
You have full control over when the camera is active through the shoot plans in the dashboard app.
6. Your Responsibility for People in the Frame
Because Snitch Cam turns your phone into a camera you can point anywhere, you are responsible for complying with your local laws about filming other people. This typically includes:
- Not recording in places where people have a reasonable expectation of privacy (bathrooms, bedrooms that are not yours, changing areas)
- Respecting one-party or two-party consent laws in your jurisdiction
- Not using the Service to monitor employees without required notifications
- Not using the Service to harass, stalk, or intimidate anyone
You agree that you will only capture and upload images that you have the legal right to capture and store. Snitch Cam is provided as a tool; responsibility for how it is used belongs to you.
7. Your Rights and Choices
7.1 Access and export
You can view all of your captured images and videos at any time through the dashboard app. If you need a complete export of your data, email us at info@snitch.cam and we will provide one within 30 days.
7.2 Correction
You can update your name, profile picture, and phone number in the dashboard app. Email address changes can be requested by contacting us.
7.3 Deletion
You can delete your account at any time from inside the dashboard app:
Open the dashboard app → Settings → Danger Zone → Delete Account. You will be asked to confirm, and once you do, your account and all associated images, videos, camera pairings, and shoot plans are permanently removed.
You can also delete individual images from the dashboard without deleting your whole account.
Deleting your Snitch Cam account does not cancel any active Pro subscription billed through the App Store or Google Play — you must cancel that separately in the respective store to stop being billed.
7.4 Rights under GDPR (EU/UK users)
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR and equivalent laws:
- Right of access: to know what personal data we hold about you
- Right to rectification: to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten"): to have your data deleted
- Right to restriction: to limit how we process your data
- Right to data portability: to receive your data in a machine-readable format
- Right to object: to object to processing based on our legitimate interests
- Right to lodge a complaint with your local data-protection supervisory authority
Our lawful basis for processing your data is the performance of the contract you enter into with us by creating an account (to deliver the Service), and our legitimate interest in operating and improving the Service. You can exercise any of the rights above by emailing info@snitch.cam.
7.5 Rights under the CCPA (California users)
If you are a California resident, you have the right to know what personal information we collect, the right to request deletion, and the right to non-discrimination for exercising these rights. We do not sell personal information and do not offer financial incentives for data. You can exercise your rights by emailing info@snitch.cam.
8. Subscriptions and Payments
Snitch Cam Pro is sold as an auto-renewing subscription through the Apple App Store and Google Play Store. All payment processing is handled by the stores — we never see your payment card details. We use RevenueCat as a middleware layer to validate store receipts, track subscription state, and notify our backend when your subscription starts, renews, or expires.
When you upgrade, our backend receives your RevenueCat-managed subscription status so we can unlock paid features. When your subscription ends, your account reverts to the Free tier and the retention rules in Section 3 apply.
To cancel, manage, or refund a subscription, use the App Store or Google Play Store's subscription settings on the device where you purchased it. We do not have the ability to issue refunds ourselves.
9. International Data Transfers
Our infrastructure providers are primarily located in the United States. If you access Snitch Cam from outside the US, your data will be transferred to, stored in, and processed in the US. By using the Service, you acknowledge and consent to this transfer. For users in the EU/UK, we rely on the appropriate legal transfer mechanisms (for example, the EU-US Data Privacy Framework or Standard Contractual Clauses, where applicable to our providers).
10. Security
We take reasonable measures to protect your information, including:
- TLS 1.2+ encryption for all traffic between your apps and our servers
- AES-256 encryption at rest for stored images and database records
- Salted bcrypt password hashing
- Short-lived access tokens and rotating refresh tokens
- Per-camera access tokens that are invalidated on unpair and account deletion
No method of transmission or storage is 100% secure. If we learn of a data breach that affects your personal information, we will notify you through the email address on your account and take steps to contain and remediate the issue as required by applicable law.
11. Children's Privacy
Snitch Cam is not intended for use by anyone under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has created an account or that we have collected information about a child, please contact us at info@snitch.cam and we will delete the information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the Service, in our data practices, or in the law. When we make material changes, we will update the Effective Date at the top of this page and, where appropriate, notify you via email or an in-app notice. Your continued use of the Service after an update constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy, want to exercise any of your rights, or have a concern about how we handle your data, please contact us at: