Privacy Policy
This Privacy Policy explains how HYUPERON, LLC (“we”, “us” or “our”) collects, uses, shares and protects information when you use the Camera Guru mobile application (the “App”) and the website camguru.app (together with the App, the “Service”). By using the Service you acknowledge the practices described here.
The short version
- Camera Guru connects your phone to IP cameras you own. On your home network, video goes directly from the camera to your device.
- We do not record or store your camera video. If you use remote viewing, live video passes through our relay server in real time and is not saved.
- Camera passwords are kept in your device’s encrypted storage. If you turn on remote access, they are also stored encrypted in Google Cloud Secret Manager so our relay can reach the camera.
- Network and Bluetooth scans used to find cameras are processed on your device.
- We do not sell your personal information, and you can delete your account and data from the App at any time.
1. Who we are
The data controller responsible for your information is:
HYUPERON, LLC19A Koryun St., floor 8, room 3
Yerevan 0009, Republic of Armenia
Email: support@camguru.app
2. Information we collect
2.1 Account information
When you first open the App we create an anonymous account identifier so the Service can work without registration. If you choose to create an account, we collect your email address, an optional display name and your password. Passwords are processed by our authentication provider (Firebase Authentication) and are never visible to us in plain text.
2.2 Camera information you provide
When you add a camera, you may enter or the App may detect its name, room, brand and model, connection method, local network address and port, stream path, and the camera’s username and password.
- On your device: camera settings are stored locally, and camera usernames and passwords are kept in the operating system’s encrypted secure storage (iOS Keychain / Android Keystore).
- In our cloud database: a copy of your camera list without passwords (name, room, brand, connection method, status, remote-access status and timestamps) is linked to your account so the Service can manage remote access.
2.3 Remote access information
Where available, you can enable viewing your cameras when you are away from home. To set this up, the App asks your router (using UPnP) to forward a port to the camera, and we store:
- the public IP address of your home internet connection and the forwarded port;
- the camera’s stream path; and
- the camera’s username and password, encrypted in Google Cloud Secret Manager and used only so our relay server can connect to your camera when you ask to watch it.
You can remove remote access at any time by deleting the camera in the App or deleting your account.
2.4 Local network and Bluetooth information
With your permission, the App scans your Wi-Fi network and nearby Bluetooth devices to help you find compatible cameras. This may involve your Wi-Fi network name (SSID), your router’s address, and the IP addresses, hardware (MAC) addresses and names of devices on your network or nearby. This scan is processed on your device and the list of devices is not uploaded to us. The App stores your home Wi-Fi name and router address locally to tell whether you are at home (local viewing) or away (remote viewing).
On Android, the operating system requires the Location permission for Wi-Fi and Bluetooth scanning. We use this permission only for scanning; we do not collect or store your GPS location.
2.5 Images stored on your device
The App may save preview snapshots of your cameras on your device so your camera list loads quickly. These images stay on your device and are deleted when you delete the camera, delete your data or uninstall the App.
2.6 Usage and diagnostic information
We collect information about how the App is used and how it performs, such as screens viewed, features used, onboarding steps, setup success or failure, the number of devices found during a scan, crash reports and error logs, device model, operating system and version, App version, language, an app-instance or account identifier, and approximate region derived from your IP address. We use Firebase Analytics, Firebase Crashlytics and PostHog for this. These tools do not receive your camera video, your camera passwords or the list of devices on your network.
2.7 Purchases
If we offer paid features, purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your payment card details. We may receive information about your subscription status, such as the product purchased, trial status, renewal and expiration dates.
2.8 Communications
If you contact us, for example through “Report a Problem”, we receive your email address, the content of your message and any details you include, such as the App version and device information.
3. Your video and camera feeds
- At home: the App connects directly to your camera over your local network. Video does not pass through our servers.
- Away from home (remote viewing): when you open a camera remotely, our relay server, hosted on Google Cloud, connects to your camera and converts the live stream into a format your phone can play. The stream is processed in memory only for as long as you are watching, using short-lived buffers, and is not recorded, stored, viewed or analyzed by us.
- Viewing sessions use random, unguessable links that expire automatically.
4. How we use information
We use information to:
- provide the Service, including finding cameras, connecting to them and showing live video;
- set up, check and maintain remote access to your cameras;
- create and secure your account and keep it in sync;
- understand how the App is used, fix bugs, and improve performance and features;
- respond to your requests and provide support;
- manage subscriptions, where offered;
- detect, prevent and investigate fraud, abuse and security incidents; and
- comply with legal obligations and enforce our Terms of Service.
We do not use your camera video or camera credentials for advertising, profiling or training machine-learning models.
5. Legal bases (EEA, UK and similar laws)
Where data protection laws such as the GDPR apply, we process personal data on these legal bases:
- Performance of a contract: to provide the Service you ask for, such as connecting cameras, remote access and your account.
- Legitimate interests: to keep the Service secure, prevent abuse, understand usage and improve the App, where these interests are not overridden by your rights.
- Consent: for device permissions (local network, Bluetooth, location for scanning) and, where required by law, for analytics. You can withdraw consent at any time in your device settings.
- Legal obligation: where we must keep or disclose information to comply with the law.
6. How we share information
We do not sell your personal information and do not share it for cross-context behavioral advertising. We share information only as follows:
| Recipient | Purpose |
|---|---|
| Google LLC: Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Run, Secret Manager | Accounts, cloud data storage, remote-access backend, live-video relay and encrypted credential storage |
| Google LLC: Firebase Analytics, Firebase Crashlytics | Usage analytics, crash reporting and diagnostics |
| PostHog, Inc. (EU data region) | Product analytics and feature rollout |
| Apple Inc. and Google LLC (app stores) | App distribution and processing of in-app purchases, where offered |
These providers act on our behalf and may use the information only to provide their services to us. We may also disclose information (a) if required by law, regulation or valid legal process; (b) to protect the rights, property or safety of our users, the public or us; or (c) as part of a merger, acquisition, financing or sale of all or part of our business, in which case this Privacy Policy will continue to apply to your information.
7. Data retention
- Data on your device (camera settings, encrypted credentials, snapshots, preferences) is kept until you delete it in the App, delete your data or uninstall the App.
- Account and cloud data (account details, cloud camera list, remote-access configuration and stored camera credentials) is kept while your account exists and is deleted when you delete your account.
- Remote-viewing session records are short-lived and expire automatically.
- Analytics and crash data is kept for a limited period according to our providers’ retention settings, after which it is deleted or aggregated.
- Support emails are kept as long as needed to resolve your request and for our reasonable records.
We may keep certain information longer where required by law or to resolve disputes and enforce our agreements.
8. Deleting your account and data
You can delete your account and data at any time:
- In the App: open Settings → Delete Account & Data and confirm. This removes your cameras, encrypted credentials, snapshots and settings from your device and deletes your account. Your cloud camera list, remote-access configuration, stored camera credentials and active viewing sessions are then deleted from our servers automatically.
- By email: if you no longer have the App, email support@camguru.app from the address linked to your account with the subject “Account deletion request”. We may ask you to verify your identity and will complete the request within 30 days.
Uninstalling the App deletes data stored on your device but does not delete your account or the data stored on our servers. Please use Delete Account & Data before uninstalling, or email us and we will help to the extent we can identify your account. Remote access also relies on a port-forwarding rule in your router; the App attempts to remove it when you delete the camera, and you can also remove it in your router’s settings.
9. Security
We use administrative, technical and organizational measures designed to protect your information, including encryption in transit (HTTPS/TLS) for communication with our servers, encrypted on-device storage for camera credentials, encrypted secret storage on Google Cloud, access controls on our databases, and expiring, unguessable links for remote viewing. The App also warns you about weak camera passwords before enabling remote access. No method of transmission or storage is completely secure, and the security of your cameras also depends on their firmware, your router and the passwords you choose.
10. International transfers
We are based in Armenia, and our service providers process data in other countries, including the United States (Google Cloud) and the European Union (PostHog). Where we transfer personal data from the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses offered by our providers.
11. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy of it;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing, including processing based on legitimate interests;
- data portability;
- withdraw consent at any time, without affecting earlier processing; and
- lodge a complaint with your local data protection authority.
California residents: you have the right to know what personal information we collect, use and disclose, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.
Device permissions: you can turn off Local Network, Bluetooth and Location access at any time in your device settings. Camera discovery may then be limited, but you can still add cameras manually.
To exercise your rights, email support@camguru.app. We will respond within the time required by applicable law, generally within 30 days, and may need to verify your identity first.
12. Children
The Service is not directed to children under 13, or under 16 in the EEA and UK, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we will delete it.
13. Third-party devices and services
Your cameras, routers and any manufacturer apps or cloud services they use are operated by third parties under their own privacy policies. Camera Guru is not affiliated with camera manufacturers, and we are not responsible for how those manufacturers handle your data. We recommend reviewing their policies and keeping device firmware up to date.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. If the changes are material, we will give you notice in the App or by other appropriate means before they take effect.
15. Contact us
If you have any questions about this Privacy Policy or our data practices, please contact:
HYUPERON, LLC19A Koryun St., floor 8, room 3, Yerevan 0009, Republic of Armenia
Email: support@camguru.app
Website: camguru.app