SpectaCam

Privacy Policy

Effective 5 June 2026

Overview

SpectaCam turns a phone or tablet into a live camera you can watch from your own devices. This policy explains what data the app and service handle, why, and the control you have over it. It applies to the SpectaCam mobile app and the website at spectacam.app.

Information we collect

Account. When you sign up with email and password we store your email address and a salted, hashed password (never the password itself). When you choose “Continue with Google,” Google provides us your email address and a stable account identifier, which we use to create or recognise your account. We never receive your Google password.

Cameras you create. The names you give your cameras and the pairing / guest-share codes used to connect a viewer to a camera.

Connection data. To set up a live stream we process network information (such as IP addresses and connection candidates) exchanged over our signaling server, and a session cookie that keeps you signed in.

Camera and microphone

Live video and audio are sent directly between your devices using WebRTC, end-to-end encrypted in transit. When a direct peer-to-peer connection is not possible, the encrypted media is relayed through our TURN server purely to pass it along. We do not record, view, or store your video or audio. Nothing is captured until you start a camera, and capture stops when you stop it.

If you enable “Keep streaming in background,” the camera can keep capturing while the app is in the background or the screen is off; Android shows a persistent notification the whole time so it is always clear when a camera is live.

How we use information

We use the data above only to operate the service: to authenticate you, pair viewers with cameras, establish and relay live streams, and keep the app secure. We do not use it for advertising, and we do not sell personal information.

Sharing

We share data only with infrastructure that runs the service: our own servers, and Google when you choose Google sign-in (subject to Google’s privacy policy). The TURN relay only transports your encrypted media; it does not retain it.

Retention and deletion

We keep your account and camera data until you delete it. You can delete your account and all associated data at any time:

Deletion is immediate and irreversible: it removes your account, your cameras, and their share links. Live media is never stored, so there is nothing further to erase.

Security

Passwords are stored only as salted hashes, session cookies are HTTP-only and scoped to the host, and media is encrypted in transit. No system is perfectly secure, but we work to protect your data using standard practices.

Children

SpectaCam is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal information.

Changes

We may update this policy; material changes will be reflected by the effective date above. Continued use after an update means you accept the revised policy.

Contact

Questions or data requests: support@spectacam.app.