Privacy Policy

Who we are. SAMI SWAIN WEB SPINNER UK LTD is the data controller for An Eye On It. The app lets you use one phone as a camera and another phone as a viewer for private monitoring of homes, pets, birdhouses, nursery check-ins and similar personal uses. You can contact our privacy team at privacy@aneyeonit.com. We have not appointed a data protection officer.

An Eye On It is not a life-safety, emergency, medical, professional security or certified baby-monitor service.

Information we collect

• Account data: name, email address, password hash, account identifier and authentication tokens. For each signed-in app session we store its device label, creation time and last-used time so you can recognise and revoke it; we never show the token itself.
• Device and viewer-access data: persistent app-device identifier, camera name and type, platform, online status, connection timestamps, the selected access duration (session, one hour, one day or ongoing), when a viewer was paired, when they last accessed the camera and when access expires.
• Camera health data: battery percentage, charging state, broad network type, operating-system thermal state, last health-update time and app version while camera mode is active. This is used to explain why a camera may be unavailable; it does not include precise location.
• Optional camera-event data: if the camera owner enables activity sharing, the event type (motion, sound-level threshold or low light), camera identifier and time. Event records never contain an image, video, raw audio, precise location or sensor reading.
• Remote notifications: remote push alerts are not available in the current release and push delivery remains disabled. The service will not send remote camera-event alerts unless a future supported build clearly offers that opt-in feature.
• Connection data: temporary WebRTC session descriptions and ICE candidates needed to connect camera and viewer devices. These records can contain network addresses.
• Android QR-scanner diagnostics: if you choose the in-app QR scanner on Android, Google Play services processes the camera image and pairing result on the device. Google says it does not store the image or scan result, but its scanner SDK may send limited device, app, identifier, performance, configuration, feature-use and error diagnostics to Google. An Eye On It does not receive those SDK diagnostics.
• Security and support data: IP address, browser or app details, security/audit records and messages you send to us.
• Website data: essential session and security cookies. Your Day/Night preference is saved locally in your browser.

We receive this information directly from you, from the app on devices where you sign in, and automatically when those devices connect to our service.

Pairing confirmation and device security

Before a viewer redeems a valid pairing code, the app can request a limited preview containing the camera’s name, type, platform, requested access duration and code expiry so the viewer can confirm it is the intended camera. The preview does not include the owner’s name or email address. QR scanning is optional and manual code entry remains available. On iPhone the scan is handled by the device camera framework. On Android the optional scanner is provided by Google Play services; its image processing stays on the device, while Google may receive limited SDK diagnostics as described above and in Google’s ML Kit privacy information. If you enable Face ID, Touch ID, fingerprint or another biometric app lock, that preference and the biometric check stay on your phone; An Eye On It does not receive or store biometric data.

Camera and snapshots

The app asks for camera access when you choose to use a phone as a camera. Live video is encrypted in transit using WebRTC and is sent to the viewer directly where possible or relayed as encrypted traffic through our TURN service. We do not record or store the live video. Snapshots are saved locally to your phone when you tap Snapshot and are not uploaded to An Eye On It cloud storage.

Microphone and on-device sound checks

If you enable sound detection, the app uses microphone access to measure sound levels on the camera device. This processing happens on the device. Raw audio is never recorded, stored, transmitted or uploaded, and An Eye On It does not collect audio data. If you separately opt in to sharing activity-event times, the app may send only a “sound detected” event type and timestamp so an authorised viewer can see the event; it does not send the audio or measured level.

Why we use information and our lawful bases

• Contract: we use account, device, camera-health, optional camera-event/notification and connection data to create your account, pair devices, show camera availability and recent activity you chose to share, provide live sessions, save your settings and give support you request.
• Legitimate interests: we use limited connection, security and audit data to protect accounts, prevent abuse, diagnose faults and keep the service reliable. Our interests are operating a safe and dependable service; we limit this processing and do not use it for advertising or tracking.
• Legal obligation: we may retain or disclose limited information where UK law requires us to do so.

We do not use personal data for advertising, sell it, or make solely automated decisions that produce legal or similarly significant effects. On-device motion, low-light and sound indicators do not make decisions about you.

Sharing information

We share only what is necessary with infrastructure providers that host the API, TURN relay, backups and email, and with Apple or Google for app distribution, the optional Android QR scanner and any future store billing status. These providers process information for us under contractual and security controls. A camera stream and optional event history are available only to the account owner and viewers the owner pairs while their access remains valid. We may disclose information where required by law or to protect users and the service.

International transfers

Our providers may process information in the UK, the European Economic Area and other countries. For transfers outside the UK, we use a UK adequacy regulation where available or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum. Contact privacy@aneyeonit.com to ask about the safeguard used for a particular provider.

Retention

• Account, device and access-token records are kept while your account is active and deleted from the live service when you delete your account, except where a legal obligation requires a limited record.
• Pairing codes expire after five minutes and can be used only once. Expired and used codes are automatically deleted by a job that runs every five minutes.
• Viewer-access records are kept only while access is active. Session access ends with its first live stream; one-hour and one-day access expire automatically; ongoing access remains until the camera owner removes it. Expired grants are removed by scheduled cleanup.
• WebRTC signalling records use a short renewable lease while the camera and viewer are actively communicating. When activity stops, the lease is no longer renewed; the session and its ICE candidates are deleted after expiry by the five-minute cleanup job.
• Camera-health fields remain with the device record while the account is active so the viewer can show the most recently reported state. They are deleted with the device or account.
• Optional camera-event metadata is automatically deleted after seven days by default. The service can use a shorter configured period.
• Remote push delivery is disabled in the current release. If a future release offers opt-in remote alerts, its policy and in-app explanation will describe token retention before the feature is enabled.
• Password-reset links expire after 60 minutes and expired reset records are cleared automatically.
• Support and security records are kept only for as long as needed to resolve the request, investigate abuse, protect the service or meet a legal obligation.
• Deleted information can remain temporarily in restricted disaster-recovery backups until those backups age out under our rolling backup schedule. Backups are not used for ordinary processing.

Account deletion

You can delete your account in the app from Settings, or follow the instructions on our account deletion page. Local snapshots already saved to your phone remain on that phone unless you delete them yourself.

Is the information required?

Your name, email address and password are needed to create and secure an account. Device and temporary connection data are needed when you pair or view a camera. If you do not provide those details, we cannot provide the relevant account or live-view feature. Sound detection, activity-event sharing, remote notifications and photo snapshots are optional.

Your data-protection rights

Depending on the circumstances and lawful basis, you may ask us for access to your personal data, correction, deletion, restriction, or a portable copy. You may also withdraw consent where processing relies on consent. These rights are not absolute, but we will explain if an exemption applies. Email privacy@aneyeonit.com; we may need to verify your identity before acting.

Your right to object: you may object at any time to processing based on our legitimate interests. Tell us what you object to and why; we will stop unless we have compelling lawful grounds to continue.

Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Children and safety

Accounts are intended for adults aged 18 or over. An Eye On It may be used by adults to check in on a room, but it is not a life-safety, emergency, medical, professional security or certified baby-monitor service.

Security

We use reasonable technical and organisational measures to protect information, including HTTPS for the API, encrypted WebRTC connections, short-lived TURN credentials and pairing codes, owner-selected access expiry, current-viewer transparency, signed-in app-session revocation, access controls and backups. No online service can guarantee perfect security.

Changes to this policy

We may update this policy when the service or law changes. We will publish the new effective date here and provide a prominent notice where a change materially affects how we use personal data.

Contact

SAMI SWAIN WEB SPINNER UK LTD
Privacy email: privacy@aneyeonit.com