TomoCam Privacy Policy
TomoCam turns devices you already own into cameras that only you can watch. This policy explains what we collect, what we deliberately do not collect, and what you can do about it.
1. Who operates TomoCam
TomoCam is operated by edge-manager.com ("we", "us"). For any question about this policy, or to exercise any of the rights described in section 8, contact edge.manager.com@gmail.com.
2. The short version
- Your video and audio are never stored on our servers.
- Live streams go directly between your own devices. When a direct connection is impossible, they pass through a relay that forwards encrypted packets it cannot read.
- Because nothing is stored, there is no archive of your home for us to browse, hand over, or lose in a breach.
- Location is off by default and stays off unless you turn it on for a specific device.
3. Information we collect
We collect the minimum needed to sign you in, pair your devices, and connect them to each other.
- Account information — your email address, and a display name if you set one. Authentication is handled by our identity provider.
- Device information — the name you give a device, an internal device identifier, platform and operating-system version, app version, and the time the device was last seen online.
- Device status — battery level, whether the device is charging, network connection type, and whether motion or presence was detected. This is what makes the device list show live state.
- Location — latitude and longitude, only for a device on which you have explicitly enabled location. This is off by default.
- Push notification token — an identifier issued by Apple so we can wake your device for an incoming connection. It cannot be used to identify you outside the app.
- Support and diagnostic records — error and connection logs, and crash and performance reports that iOS generates on your device (Apple MetricKit), including stack traces, exception and termination reasons, app and OS versions, device model, and launch and exit counts — never screen content, video, or audio. These go only to our own servers and are used to investigate faults.
4. Video, audio and images
This is the part that matters most, so we are specific about it.
Live video and audio travel directly between your devices using a peer-to-peer connection. When your network makes a direct connection impossible, the stream is routed through a relay server. That relay forwards encrypted packets: it passes traffic through without being able to decrypt or inspect the video or audio.
We do not record, copy, transcode, or retain your video or audio on our servers.
Recordings, where you enable them, are written to local storage on your own device. Still images used by the app are held briefly in device memory (no more than a few minutes) and are not written to our servers.
5. How we use information
- To authenticate you and keep your session secure.
- To pair your devices with your account and connect them to each other.
- To show you the live state of your own devices.
- To deliver notifications you have asked for.
- To diagnose faults, prevent abuse, and keep the service running.
We do not sell personal information, and we do not use your data to build advertising profiles.
6. Service providers
We rely on a small number of providers, each limited to a specific function:
- Apple — delivery of push notifications to Apple devices.
- Our identity provider — authentication and account credentials.
- Our relay provider — carrying encrypted media when a direct connection is unavailable. The relay cannot read the traffic it carries.
- Website analytics and error monitoring — used on the TomoCam website only. The mobile app contains no third-party analytics software.
7. Retention
Account and device records are kept while your account is active. Diagnostic records are kept only as long as they are useful for investigating faults. Because we never store your video or audio, there is no media retention period — there is no media to retain.
8. Your choices and rights
- Access and correction — you can view and edit your account details in the app.
- Deletion — you can delete your account from within the app. When you do, your personal details are irreversibly anonymized and your devices are unpaired. Records that must be kept for security or legal reasons are retained in a form that is no longer linked to you.
- Location — you can turn location off for any device at any time; it is off unless you turn it on.
- Sharing — where you have shared a device with someone else, you can revoke that access at any time.
- Notifications — you can turn off notifications in your device settings.
To make a request that the app does not cover, write to edge.manager.com@gmail.com. If you are in a jurisdiction that grants additional rights over your personal information, we will honour them.
9. Children
TomoCam is not directed at children and we do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will remove it.
10. Security
Connections between your devices and our servers are encrypted in transit. Devices authenticate with per-device credentials, and access to a device is bound to the account that owns it and to people that account has explicitly shared it with.
No system is perfect. If you believe you have found a security problem, please report it to us at the address above rather than disclosing it publicly, and we will work with you on it.
11. International transfers
Some of our service providers operate outside your country. Where information is transferred internationally, we rely on the safeguards offered by those providers and limit what is transferred to what the function requires.
12. Changes to this policy
If we make a material change we will update the date at the top of this page and, where the change affects how your information is used, notify you in the app before it takes effect.