Privacy Policy

Plain-English summary (non-binding): SnitchCam analyzes motion on your iPhone. It does not stream or upload your continuous camera feed. When motion occurs, the App sends the cropped image inside the box you selected, together with the condition you wrote, to our server and Google’s paid Gemini API to decide whether the condition is true. Scan thumbnails and short replay clips in History stay on your device. We use pseudonymous identifiers, product analytics, and purchase records to operate the App. We do not sell personal information, serve targeted ads, or use submitted images to train our own AI models.

Camera notice: A camera image may contain personal data about people in view. You are responsible for using SnitchCam only where you have authority to do so and for complying with notice, consent, recording, workplace, tenancy, child-protection, and surveillance laws that apply where the camera is placed.

1. Who we are

SnitchCam (the “App” or “Service”) is operated by Massive Interface LLC, a Delaware limited liability company (“Massive Interface,” “we,” “us,” or “our”). For purposes of the EU and UK General Data Protection Regulation and similar laws, Massive Interface LLC is the controller of personal data we process through the Service. Contact: info@massiveinterface.com.

2. Scope

This Policy applies to the SnitchCam iOS application, its supporting network services, and SnitchCam pages on massiveinterface.com. It does not govern Apple, Google, RevenueCat, Render, or other third parties acting under their own privacy notices when you interact with them directly.

3. Information that stays on your device

• Continuous camera frames and motion analysis. The live camera feed and continuous motion-detection calculations are processed on your device. We do not receive a continuous video stream.
• Region of interest and settings. The box position, sensitivity, scan interval, cooldown, session budget, alert preferences, and other settings are stored locally.
• History media. Scan thumbnails and short animated replay clips recorded around a trigger are stored locally in the App’s storage. They are not uploaded as history media. You may delete events and sessions in the App; uninstalling the App deletes ordinary App storage.
• Local notifications and alerts. Spoken alerts, sounds, vibration, and local notifications are generated on your device. SnitchCam does not upload audio from your microphone and does not need microphone access for these features.

4. Information we collect or receive

We do not ask you to create a named account and do not directly collect your payment-card number. Apple processes App Store payments. Your pseudonymous device identifier can persist after uninstall because iOS Keychain items may remain; contact us to request server-side deletion.

5. How camera and AI processing work

1. The App evaluates motion inside the box locally on the iPhone.
2. If motion passes your settings and a scan is available, the App creates one JPEG crop of the selected box.
3. After the in-App AI consent step, the crop and condition text are sent over encrypted HTTPS to our application server.
4. Our server sends the crop and condition to a Google Gemini vision model and receives a match/no-match result, confidence score, and short reason.
5. The server returns that result and your remaining scan balance to the App.

Our application server processes the submitted image in memory for the request and does not intentionally save the image or condition text in our application database. Our event record stores only limited metadata—timestamp, match, confidence, and condition length—not the image or the words of the condition. Infrastructure providers may temporarily process request data in logs, caches, security systems, or backups as described below.

We use a billing-enabled, paid Gemini API project. Under Google’s current paid-service terms, Google states that it does not use paid-service prompts, files, or responses to improve its products, but it may log prompts and responses for a limited period for prohibited-use monitoring and required legal disclosures. Google may also use transient in-memory caching. See the Gemini API Additional Terms and Gemini API data-retention documentation. We do not use Gemini grounding, File API storage, or a persistent multi-turn conversation for SnitchCam scans.

6. How we use information

• Provide AI scans, results, alerts, scan balances, and purchase restoration.
• Authenticate the App to our servers and prevent fraud, scraping, overload, or misuse.
• Issue automatic scan refunds when our server records a validation or upstream processing failure.
• Operate, maintain, troubleshoot, secure, and improve the Service.
• Measure feature adoption and reliability in aggregate.
• Respond to support, privacy, and legal requests.
• Comply with law, enforce our Terms, and protect users, third parties, and the Service.

7. Legal bases for EEA, UK, and similar jurisdictions

Depending on the activity, we process information to perform our contract with you (providing scans and purchased access), with your consent (camera access and third-party AI image processing), for our legitimate interests (security, fraud prevention, limited analytics, troubleshooting, and product improvement), and to comply with legal obligations. Where we rely on consent, you may withdraw it prospectively; withdrawal does not affect prior lawful processing.

8. Service providers and disclosures

• Google LLC — Gemini API. Receives the cropped image, condition text, and technical request data to produce the AI result.
• Google LLC — Google Analytics for Firebase. Receives pseudonymous app usage events and app/device metadata. See Firebase privacy and security information.
• Apple Inc. Distributes the App, processes purchases, provides camera and notification permissions, and may provide diagnostics under your Apple settings.
• RevenueCat, Inc. Processes pseudonymous App Store transaction, subscription, and entitlement information for purchase management. See RevenueCat’s Privacy Policy.
• Render and infrastructure vendors. Host application servers, databases, caches, network traffic, and operational logs needed to provide and secure the Service.
• Professional advisers and authorities. We may disclose information to lawyers, auditors, insurers, courts, regulators, law enforcement, or other parties when reasonably necessary to comply with law, establish or defend legal claims, protect safety or rights, or investigate abuse.
• Business transfers. Information may transfer as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law and continued protection.

We require service providers that process personal data for us to use it only for contracted purposes and to provide the same or an equivalent level of protection required by this Policy and applicable law. Some providers also process limited information under their own terms as independent controllers.

9. Retention and deletion

• Submitted crops and condition text. We do not intentionally persist them in our application database after the scan completes. Google and infrastructure providers may retain or cache them for limited periods under their terms, security practices, and legal obligations.
• Recent scan-event metadata. We retain up to the most recent 100 server-side event records per pseudonymous device identifier for up to 30 days. These records contain timestamp, match, confidence, and condition length—not images or condition text.
• Operational logs and aggregate statistics. Retained as reasonably necessary for security, abuse prevention, troubleshooting, financial control, and service improvement, then deleted or de-identified, subject to provider settings and legal holds.
• Device, credit, and purchase records. Retained while needed to provide or restore purchases, maintain balances, prevent fraud, resolve disputes, and meet tax, accounting, and legal duties.
• Analytics. Retained according to our Google Analytics property settings and Google’s applicable terms.
• Support messages. Retained as needed to respond and maintain customary business and legal records.
• Local history. Remains on your device until you delete events/sessions or remove the App. We cannot remotely access or delete local history.

10. Your choices and consent controls

• Deny or revoke Camera or Notification access in iOS Settings.
• Stop a session at any time; no new AI crop is sent while a session is stopped.
• Delete local history in the App.
• Uninstall the App to delete ordinary local App storage.
• Email us to withdraw AI-processing consent and request deletion of server-side data associated with your pseudonymous device identifier. You may be asked to provide that identifier or other information needed to verify and locate the request.

Revoking AI consent prevents future AI scans but does not undo processing already completed. Some purchase, fraud-prevention, legal, or de-identified records may be retained when permitted or required by law.

11. Your privacy rights

Depending on where you live, you may have rights to know or access personal data, correct it, delete it, obtain a portable copy, restrict or object to processing, withdraw consent, and appeal a denied request. You may also complain to your local data-protection authority. We will not discriminate against you for exercising applicable rights.

To submit a request, email info@massiveinterface.com with “SnitchCam Privacy Request” in the subject. We may take reasonable steps to verify the request. Authorized agents must provide proof of authority where required.

12. California and other U.S. state disclosures

We do not sell personal information for money and do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics for advertising. The categories described in Section 4 may include identifiers, internet/network activity, commercial information, and sensory information. We collect and disclose them for the business purposes described in Sections 6 and 8. We do not knowingly sell or share personal information of people under 16.

13. Children and images of other people

The Service is not directed to children under 13, and a child under 13 may not operate the App. SnitchCam may capture a child or another person in the selected camera area. You must not intentionally monitor a child unless you are the child’s parent or legal guardian, or you have all authorization and consent required by law. You must not place the camera where any person has a reasonable expectation of privacy. If you believe a child’s data was submitted unlawfully, contact us promptly.

14. No face recognition or advertising profile

SnitchCam is not designed to enroll faces, identify a person from a biometric template, or create biometric profiles. We do not use submitted images for targeted advertising, cross-app tracking, or our own model training. Do not use the Service as a biometric-identification or eligibility-decision system.

15. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and Service, including encrypted network transport, scoped service access, request validation, rate limits, and data minimization. No system is perfectly secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. Secure your device, physically mount it safely, and avoid placing highly sensitive or unnecessary information in the camera area or condition text.

16. International transfers

Massive Interface and its providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we and our providers rely on legally recognized transfer mechanisms and contractual safeguards.

17. Website analytics

SnitchCam pages on massiveinterface.com use Google Analytics to measure visits and link clicks. Google may receive IP address, browser/device information, approximate location, referrer, and pages visited. We use this information to understand site performance and do not use it for cross-site targeted advertising. Browser privacy settings, content blockers, or Global Privacy Control signals may limit collection where technically supported.

18. Changes to this Policy

We may update this Policy as the App, providers, or law changes. We will post the current version here and revise the “Last updated” date. We may provide additional notice in the App for material changes. If a change requires new consent, we will seek it before the affected processing.

19. Contact

Privacy questions, deletion requests, or complaints:
Massive Interface LLC
info@massiveinterface.com