The short version
- Your video stays between your phones. Camvori has no recordings, no photos, no AI analysis and no cloud video storage.
- No account. You don’t give us a name, email address or password to use the app.
- Our servers can’t watch. They help your phones find each other and, when a network requires it, relay already-encrypted packets. They can’t decrypt them and they don’t keep them.
- Some technical data is processed. Like most apps, Camvori uses crash reporting and usage analytics, push messaging and a purchase provider. This page lists exactly what and why.
Who we are
“Camvori”, “we” and “us” mean the team that makes the Camvori mobile app and this website. For anything in this policy, reach us at [email protected].
Live video and audio
When the camera phone streams, video is captured by the phone’s camera and sent directly to the phones you’ve allowed, encrypted with the standard WebRTC protocols (DTLS‑SRTP). Camvori doesn’t record it, take screenshots of it, or save it on any server.
Audio is off by default. It’s sent live only if you turn the microphone on, on the camera phone, and it isn’t recorded either.
If two phones can’t reach each other directly, the packets can pass through a relay server (TURN). The relay carries encrypted media; it is not given the keys to decrypt it.
What information is processed
Pairing and device identity
Each phone creates a cryptographic key pair the first time Camvori runs. The private key stays in the phone’s secure storage (the iOS Keychain or Android’s secure store) and never leaves it. The public key identifies the phone, and your list of paired phones is stored on the device. Pairing happens by scanning a one-time QR code in person; the code expires after two minutes.
Connection service (signaling and relay)
To connect phones that aren’t on the same network, the app contacts our signaling server. It processes the phones’ public keys, signed connection messages, and your IP address (which any internet connection necessarily reveals). The app also reports the outcome of each connection attempt — the kind of path used (local, direct or relay) and candidate types, not addresses — so we can fix connection problems. Under normal operation the server doesn’t log message contents, QR codes, private keys, relay credentials or video.
Diagnostics and usage
The app includes Google Firebase Analytics and Crashlytics. These collect information such as app version, device model, operating system version, a Firebase installation identifier, general usage events and crash reports. We use this to find bugs and understand which features are used.
Notifications and in-app messages
The app includes Firebase Cloud Messaging and Firebase In‑App Messaging, which use a device token to deliver notifications and in-app messages.
Purchases
Camvori Plus is sold through the App Store or Google Play, and entitlements are managed with RevenueCat. We receive whether a subscription is active, tied to an anonymous app identifier. Apple and Google handle your payment details; we never see your card number.
When you contact us
If you email us, we keep your message and address so we can reply.
Permissions the app requests
| Permission | Why |
|---|---|
| Camera | To stream video from the camera phone and to scan pairing QR codes. No photos are taken or saved. |
| Microphone | Only if you switch sound on, to send the camera’s audio live. |
| Local network (iPhone) | To discover your paired phones on the same Wi‑Fi and connect without the internet. |
| Notifications (Android) | To show the visible notification — with a Stop button — while the camera streams. |
How we use information
- To connect your phones and keep the connection working.
- To detect, diagnose and fix crashes and bugs.
- To understand, in aggregate, how the app is used so we can improve it.
- To provide and verify Camvori Plus subscriptions.
- To protect the service against abuse and enforce our Terms.
- To respond to your questions and requests.
Who we share it with
We don’t sell your information and we don’t use it for advertising. We share it only with service providers that help run Camvori, under their own terms and privacy policies:
- Google Firebase — analytics, crash reporting and messaging.
- RevenueCat — subscription and entitlement management, together with Apple and Google for payments.
- Hosting providers — to run the signaling and relay servers.
We may also disclose information if the law requires it or to protect the rights, safety and security of users or the service.
How long we keep it
- Video and audio: not stored at all.
- Pairing keys and paired-phone list: on your devices until you remove a phone or uninstall the app. The operating system may keep Keychain items after uninstall; pair again to start fresh.
- Signaling registrations: a device that hasn’t connected for a long time is removed from the server and has to be paired again.
- Analytics and crash data: kept by Firebase according to its retention settings.
- Emails to us: as long as needed to handle your request.
Security
Phones authenticate each other with signed handshakes that are bound to the encryption fingerprint of the media connection, and every viewer must be approved on the camera phone. You can remove a viewer at any time, which closes their session.
Camvori is an early release and has not yet been independently audited. No system is perfectly secure; if you find a vulnerability, please tell us at [email protected].
Your choices and rights
- Control access: remove any phone from the camera’s access list, or delete a camera from the viewing phone.
- Control permissions: turn camera, microphone, local-network and notification access on or off in your phone’s settings.
- Manage subscriptions: cancel Plus in your App Store or Google Play account settings.
- Ask us: depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict some processing, and to complain to your data protection authority. Email us and we’ll help.
Because Camvori has no accounts, we usually can’t tie data to you personally without extra information from you — we may ask for it to confirm a request.
Children
Camvori is not directed at children under 13 (or the higher age set by your local law), and we don’t knowingly collect their personal information. If you believe a child has provided us data, contact us and we’ll delete it.
International transfers
Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for those transfers.
Changes to this policy
We’ll update this page when our practices change and update the “last updated” date above. If a change is significant, we’ll make it easy to notice.
Contact
Questions about privacy? Write to [email protected]. You can also read our Terms of Service.