IzzoCam Privacy Policy

Effective Date: February 17, 2026

Introduction

IzzoCam ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the IzzoCam mobile application and related services.

Privacy-First Design

IzzoCam is built with privacy as a core principle:

Private by Default: All cams are private and only accessible via invite links
Invite-Only Access: Only users with invite links can view your cam
Owner Control: Cam owners control who has access and can revoke it at any time
Encrypted Credentials: Third-party camera credentials (e.g., Wyze) are encrypted at rest using AES-256-GCM with Google Cloud KMS
No Public Directory: Cams are not publicly discoverable unless the owner explicitly lists them

Information We Collect

Personal Information

Email address: Used for account creation and authentication
Name and profile photo: If you sign in with Google or Apple
Device tokens: For push notifications about stream activity, commentary, and daily digests

Camera & Streaming Information

Camera configurations: Cam names, descriptions, streaming sources, and settings
Third-party camera credentials: If you connect a Wyze camera, your Wyze account credentials are encrypted and stored solely to manage your camera stream. They are never accessible in plaintext outside of active streaming sessions.
Video frames: Periodic snapshots are captured from live streams for AI commentary generation and stored temporarily (14-day retention)
Stream metadata: Connection timestamps, viewer counts, and session durations

Usage & Analytics Information

We use PostHog, a product analytics platform, to understand how the app is used and improve the experience. We collect:

App launch and session duration
Stream connection timing and success/failure
Commentary request frequency and response times
Feature usage patterns (cam switching, likes, notifications)
Authentication retry events (for reliability improvement)

Analytics events are associated with your user ID to provide session-level insights. We do not use analytics data for advertising, profiling, or sale to third parties.

Technical Information

Device type and operating system version
App version and build number
Connection logs and timestamps
Crash reports and performance data

How We Use Your Information

Purpose	Data Used
Provide live video streaming	Account info, camera config, video frames
Generate AI commentary about your pet	Video frame snapshots (no personal data sent to AI)
Send push notifications	Device tokens, notification preferences
Manage Wyze camera integration	Encrypted Wyze credentials (decrypted only during active use)
Improve app performance	Analytics events, timing data, error rates
Ensure security and prevent abuse	Authentication logs, rate limiting data

AI-Generated Content

IzzoCam uses multiple AI providers to generate commentary about your pet's activities:

Google Gemini: Used for scene analysis and frame description
OpenAI (GPT-4o): Used for commentary generation and on-demand requests
Anthropic (Claude): Available as a fallback provider

What we send to AI providers: Only video frame images and contextual prompts (e.g., time of day, pet name). No personal information, email addresses, or account data is shared with AI providers.

What AI providers return: Text-only commentary describing pet activities. All AI-generated content is clearly identified as AI-generated.

Data Storage and Security

Your data is stored securely using industry-standard services:

Firebase Authentication: Managed by Google Cloud Platform with OAuth 2.0
Cloud Firestore: For user preferences, cam configurations, and commentary
Google Cloud Storage: For video frame snapshots (14-day automatic deletion)
Google Cloud KMS: Envelope encryption for sensitive credentials (Wyze)
Google Cloud Secret Manager: For all service API keys and secrets
LiveKit: For real-time video streaming (WebRTC, encrypted in transit)

        Encryption: All data in transit uses TLS 1.2+. Sensitive credentials (Wyze) are encrypted at rest using AES-256-GCM with keys managed by Google Cloud KMS. API keys and secrets are stored in Google Cloud Secret Manager, never in source code.
    

Third-Party Services

IzzoCam uses the following third-party services that may process information:

Service	Purpose	Data Shared
Firebase (Google)	Authentication, database, push notifications	Account info, device tokens
LiveKit	Real-time video streaming	Video/audio streams (encrypted)
OpenAI	AI commentary generation	Video frame images only
Google AI (Gemini)	Scene analysis	Video frame images only
Anthropic	Fallback AI commentary	Video frame images only
PostHog	Product analytics	Usage events, timing data, user ID
Google Sign-In / Apple Sign-In	Authentication	Email, name (per your auth provider settings)

These services have their own privacy policies governing their data practices.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only:

With service providers necessary to operate the app (listed above)
When required by law or legal process
To protect our rights, property, or safety
With your explicit consent

Data Retention

Data Type	Retention Period
Account information	Until you delete your account
Commentary entries	Until you delete your account or cam
Video frame snapshots	14 days (automatic deletion)
Wyze credentials	Until you disconnect or delete your account
Analytics events	Per PostHog retention policy (default: 1 year)
Push notification tokens	Until you unregister or delete your account

Your Rights and Choices

You have the right to:

Access: Request a copy of your personal data
Correction: Update incorrect or incomplete information
Deletion: Delete your account directly in the app (Profile → Delete Account), or email us. All associated data is removed within 30 days.
Opt-out of notifications: Disable push notifications in iOS Settings or within the app's notification preferences
Disconnect third-party cameras: Remove Wyze credentials at any time in the app — all encrypted credentials are permanently deleted
Data portability: Request your data in a structured format

To exercise these rights, contact us at sandrisesf.io@gmail.com

Children's Privacy

IzzoCam is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through:

In-app notifications
Email to your registered address
Updating the "Effective Date" at the top of this policy

Your continued use of IzzoCam after changes constitutes acceptance of the updated policy.

International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. These transfers are protected by standard contractual clauses and the security measures described above. By using IzzoCam, you consent to such transfers.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and to opt-out of the sale of personal information. We do not sell personal information.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Email: sandrisesf.io@gmail.com
App: IzzoCam
Developer: Nick Sanders