CamRelay Privacy Policy

1. What this policy covers

This policy describes the free initial version of CamRelay for iPhone and iPad, a product in the Damn series. CamRelay lets one device act as a Camera and another as a Monitor using a local connection. This version has no CamRelay account, advertisements, in-app purchases, subscriptions or third-party analytics or advertising SDKs.

2. Camera, microphone and recordings

CamRelay requests camera access when you use this device as a Camera. It requests microphone access when you start recording video with sound. If you decline microphone access, you can choose to record without sound. The Monitor does not automatically receive original photos or recorded videos.

New photos and videos are first saved in the Camera device's app storage. CamRelay attempts to add completed recordings to that device's system Photos library. Once that save is confirmed and its receipt is stored, CamRelay removes the app's temporary original. If saving to Photos fails or permission is denied, the app keeps the original for retry in Recovery Media. Do not delete the app while it contains recordings you have not saved elsewhere.

CamRelay does not upload recordings to the operator or a CamRelay server. During a paired session it sends a live video preview directly to the connected Monitor. Anyone who can see that Monitor's screen can see the preview. Use pairing only with devices and people you trust, and obtain any permissions needed to record others.

3. Photos library access and sharing

Adding captures to Photos and browsing Photos are separate permission requests. Browsing access is requested when you open the gallery. The gallery displays photos and videos that you allow CamRelay to access, including existing items not created with CamRelay. You can use limited Photos access and change the selection in system settings.

When you view, play or export a Photos item whose original is in iCloud, Apple's Photos services may download it over the internet. CamRelay may create a local temporary copy for a share or export operation. CamRelay attempts to delete its temporary export files when the share sheet closes. If sharing ends abnormally or cleanup fails, a temporary file may remain until the system clears temporary storage or the app is deleted; the app does not currently offer a separate temporary-export deletion control.

Sharing happens when you choose a destination in the system share sheet. The selected app, service or person then receives the item, which may include metadata already present in the original, such as its capture date or location. Their handling of the item is governed by their own practices. CamRelay does not request location permission.

4. Nearby discovery and device connections

CamRelay uses Apple's local networking and Bonjour services to discover nearby devices and establish a connection over a shared local Wi-Fi network or supported Apple peer-to-peer Wi-Fi. Local network permission is needed for discovery and communication. This capture and control path does not require a CamRelay cloud service.

The device nickname you choose is advertised to nearby devices before pairing, together with service information needed for discovery. Do not put private information in the nickname. A nickname is not proof of identity. Initial pairing uses a four-digit code; subsequent remembered connections verify device identity. Authenticated sessions use encrypted control and preview channels.

Connected devices exchange information required to operate the session: roles, supported capture settings, recording and saving state, control commands and results, and Camera battery level. They also exchange public device identity information to authenticate and remember each other. Network addresses are necessarily used to make the direct connection. This information is processed by the participating devices, rather than sent to the operator. Available storage is checked locally on the Camera before saving; capacity values, detailed capture diagnostics and free-text capture notices are not sent to the Monitor. If a Camera operation fails, the Monitor shows a general failure message and asks you to check the Camera for details.

5. Local settings and remembered devices

CamRelay stores the nickname, pairing rate-limit state and app preferences locally. It stores its device identity and remembered-device records in Apple's Keychain. Remembered-device records include a public identity key, nickname and pairing or connection dates. These Keychain items are configured for this device and are not configured for iCloud Keychain synchronization.

You can remove a remembered device in Settings by choosing Forget. Do this on both devices if you want both to forget the relationship. Removing a remembered-device record does not reset the app's own device identity. Keychain items may survive app deletion; deleting the app alone should not be relied on to remove remembered relationships.

6. Local technical diagnostics

CamRelay keeps technical diagnostics locally to help investigate connection, capture and performance problems. They include timestamps, app and protocol versions, random session, command or media identifiers, authentication mode, connection results, capture settings, recording and save state, and performance measurements such as preview timing, device/system information, thermal state and battery level.

The diagnostics record technical metadata, rather than photo, video or audio contents, pairing codes or secret keys. Device labels and free-text capture notices are removed from persisted session snapshots. They are not automatically uploaded to the operator. There is a latest snapshot, up to 20 recent session records and up to 256 performance-session records; older history is pruned as new sessions are recorded. Pairing and disconnection summaries are also kept locally.

If you choose to send a report, screenshot or recording to support, review it first and remove information you do not want to share. Files you send may contain personal information even when the app's technical report does not contain media.

7. Apple services, other apps and backups

Apple provides system permissions, Photos, Keychain, operating-system diagnostics and App Store distribution. Photos synchronization, device backups, Apple's diagnostic sharing and internet use by other apps depend on your system settings and those services' policies. CamRelay does not operate those services or receive their contents automatically. Local app files may be included in a device backup according to your backup settings.

CamRelay uses Apple's open-source Swift Crypto, including its packaged cryptographic dependencies, for local authentication. These libraries are not advertising or analytics services. Their license notices are bundled with the app. The app does not automatically load its public product, policy or support webpages. Using CamRelay does not require a DamnBase account.

CamRelay’s public product, support and policy pages are hosted on Vercel. Delivering and securing these pages involves processing request information such as IP addresses, requested URLs, timestamps and browser information. Vercel may retain operational and security logs under its service and privacy practices (https://vercel.com/legal/privacy-notice). These pages do not include advertising or analytics scripts and do not request a DamnBase account session. This website processing is separate from the app’s direct local capture connection. If you follow links to other DamnBase products or Account Center, their own data handling applies.

8. Retention and your choices

You can stop a session, change permissions in system settings, change the advertised nickname and forget remembered devices. Manage or delete items saved in Photos using the system Photos app. Deleting an item from Photos does not automatically delete an unsaved recovery copy still held by CamRelay. CamRelay currently has no in-app control to delete recovery originals; save any needed files before removing app storage by deleting the app.

Deleting the app normally removes its local recordings, preferences, temporary files and diagnostics from that installation. It does not delete items already saved to Photos, copies shared elsewhere, existing backups or Keychain records. Deleting those copies requires the controls provided by the relevant system or service.

9. Contact and policy updates

For privacy questions or support, contact service@damnvisible.com. If you contact us, we receive the address, message and attachments that you choose to send through your email provider. We use that correspondence to handle your request. We do not automatically receive your recordings or app diagnostics. We use Alibaba Cloud (Aliyun) for our support mailbox. We delete the support emails and attachments we manage within 90 days after your issue is resolved; you may contact us to request earlier deletion. This period applies to our support correspondence, not to independently retained provider security logs or backups, which are governed by the provider’s practices.

If data handling changes, we will update this policy and its effective date. New functionality that changes data handling, including any future paid version, requires a corresponding policy review before release.