IntraCamPrivacy Policy
Effective date: October 3, 2026
This policy explains how the IntraCam iPhone and Android apps and the IntraCam web panel at intracam.asnly.net (together, the “Service”) handle your information. IntraCam was formerly called Local Record.
- Your video, audio, photos and recordings stay on the phone that records them. They are never uploaded to or stored on our servers.
- Our server only keeps what it needs to run your account: your email address, a protected password, your camera list and your subscription status.
- No ads, no analytics, no tracking. We do not sell or share your personal data.
- You can delete your account and all server data at any time, from the app or the web panel.
1. Information stored on our server
| Data | Why |
|---|---|
| Email address | Signing in and identifying your account. |
| Password | Signing in. We store only an Argon2id hash, never the password itself. |
| Cameras: name, internal ID, date added, last connection time and a hash of the camera's access token | Showing your cameras and letting only your paired phones connect. |
| Sign-in sessions (stored as hashes) and one-time pairing codes (stored as hashes, valid for 10 minutes) | Keeping you signed in and pairing new cameras. |
| Subscription status: plan, expiry date and source | Applying the limits and features of your plan. |
| Monthly viewing and relay minutes | Applying the remote-viewing allowance of the free plan. |
To deliver the Service, our server also processes IP addresses and connection metadata while you are connected (for example to route connections and to limit repeated failed sign-in attempts). Rate-limit counters are kept in memory only. Our server's technical logs may contain IP addresses for troubleshooting and are deleted on a rolling basis.
2. What never reaches our server
- Video, audio and recordings. Recordings are saved only on the recording phone. When you watch live or play back a recording, the media travels directly between the phone and your browser or viewer app over an end-to-end encrypted WebRTC connection (DTLS-SRTP).
- Relayed connections. If a direct connection is not possible, encrypted media may pass through our relay (TURN) server. The relay forwards encrypted packets and cannot view or store the content.
- Person detection. Person detection runs entirely on the phone using Apple's on-device Vision framework. Detection events are stored on the phone and are only sent to your own browser or viewer app when you open the archive.
- Photos. If you use the photo feature, photos are saved only to the phone's own Photos library.
3. Information stored on your device
The app keeps recordings, detection events and your settings on the device. The device access token and sign-in session are kept in the iOS Keychain (on Android, encrypted with a key in the Android Keystore). Recordings are deleted automatically when the storage limit you choose is reached, and all of them are removed when you delete the app.
4. Device permissions
- Camera: to record and stream security camera footage.
- Microphone: to add ambient audio to recordings (optional) and for push to talk.
- Local network: to connect to a server or browser on your local network.
- Photos (add only): to save security photos to your Photos library.
You can change these permissions at any time in your device settings.
5. Subscriptions and payments
IntraCam Pro is purchased through Apple's App Store. Apple processes the payment; we never receive your card or payment details. We use RevenueCat to manage subscriptions. RevenueCat receives your purchase information from Apple together with a random account identifier generated by our server, plus basic technical data such as app version, operating system and approximate country. Your email address is not shared with RevenueCat. Purchases are also subject to Apple's Privacy Policy.
6. Sharing
We do not sell personal data, show ads or use third-party analytics or tracking. Besides RevenueCat and Apple as described above, your data is processed only by the infrastructure provider that hosts our server, on our behalf. We may disclose information if required by law.
7. Retention and deletion
- Account data is kept while your account exists.
- Sign-in sessions expire after a period of inactivity; pairing codes are deleted after use or expiry.
- You can delete your account in the app (Settings → Delete Account) or in the web panel. This immediately and permanently deletes your account, cameras, sessions, subscription record and usage data from our server.
- Deleting your account does not cancel an App Store subscription. Cancel it in Settings → Apple ID → Subscriptions.
- Recordings on your phones are not affected by account deletion; remove them in the app or by deleting the app.
8. Your rights
Depending on where you live (for example under the GDPR or Türkiye's KVKK), you may have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. You can see and correct your camera list and delete your account yourself; for other requests contact us as described below. You also have the right to complain to your local data protection authority.
9. Security
All connections to our server use TLS. Passwords are hashed with Argon2id, and session cookies, device tokens and pairing codes are stored only as hashes. Live media is end-to-end encrypted between your devices.
10. Children
The Service is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data.
11. Changes
We may update this policy. We will change the effective date above and, for significant changes, let you know in the app.
12. Contact
For privacy questions or requests, email us at info@asnly.net.