Privacy Policy
This Privacy Policy explains how HackSec.ai (“NannyEye”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use the NannyEye website, web app, and our iOS and Android applications (together, the “Service”). By using the Service you agree to this Policy.
1. Who we are
The Service is operated by HackSec.ai, located at 330, Atlanta Shopping Mall, Bhimrad-Althan Rd, Apcha Nagar, Althan, Surat, Gujarat 395017, India. For any privacy question, or to exercise your rights, contact us at support@hacksec.ai.
We are the “data controller” for the personal information described in this Policy, except where we act as a “processor” on your behalf for content you generate (such as your camera feeds and recordings).
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, username, email address and/or mobile number, password (stored only as a salted hash by our authentication provider) | You, at sign-up |
| Authentication data | Google sign-in identifier (if you use it), email/phone verification status | You / Google |
| Subscription & billing | Plan (Free, Pro, Max), billing period, transaction IDs, billing country. We do not collect or store full card numbers — payments are handled by our payment provider. | You / payment provider |
| Device & connection | Device model, OS version, app version, IP address, approximate region, network status, paired-device identifiers and session codes | Automatically |
| Usage & diagnostics | Feature usage, connection events, crash and performance logs, anonymous statistics (if enabled) | Automatically |
| Camera content | Live video/audio streams; snapshots and recorded clips you create; motion/sound event metadata. See Section 4. | Your cameras/devices |
| Support data | Messages and information you provide when you contact support | You |
3. How we use information
- To create and manage your account and authenticate you across web, iOS and Android;
- To provide the core Service — pairing devices, connecting live streams, delivering alerts, and storing the recordings you choose to keep;
- To process your subscription, unlock paid features, and prevent fraud and abuse;
- To maintain security, diagnose problems, and improve reliability and performance;
- To respond to your support requests and send essential service notices;
- To comply with legal obligations and enforce our Terms of Use and Acceptable Use Policy.
We do not sell your personal information, and we do not use your camera footage to train AI models or for advertising.
4. Camera streams & recordings
NannyEye is designed to keep your video private:
- Live streaming is peer-to-peer. When a camera and a monitor are connected, video and audio flow directly between your devices and are encrypted in transit. When devices are on the same network, the stream stays on your local network.
- Signaling only. To establish a connection, a small amount of non-content signaling data (session codes and connection descriptors) passes through our backend. This signaling does not contain your video.
- Recordings you create. Snapshots and clips you capture are stored on the device that created them unless you use a cloud-storage feature. Where cloud storage is offered (e.g. on the Max plan), recordings are encrypted and stored only for your account.
- What we can see. We do not monitor or access the content of your live streams. Our staff cannot watch your cameras. Access to any cloud-stored recordings is restricted and logged.
You control your footage. You can delete recordings and snapshots, remove cameras, and delete your account at any time.
5. Children & family monitoring
NannyEye is intended for adults (18+) to monitor their own homes, property, children, or dependents. The Service is not directed to children, and we do not knowingly create accounts for anyone under 18.
We understand the Service may be used to watch a nursery or a child’s room. In that case the footage is content you control as the account owner; we process it on your behalf and do not use it for any purpose other than providing the Service to you. You are responsible for ensuring your use complies with applicable laws (see Section 14).
If you believe a child under 18 has provided us personal information, contact support@hacksec.ai and we will delete it.
6. Legal bases for processing (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on these legal bases:
- Contract — to provide the Service you sign up for and process your subscription;
- Legitimate interests — to secure the Service, prevent abuse, and improve our product (balanced against your rights);
- Consent — for optional analytics and non-essential cookies, which you can withdraw at any time;
- Legal obligation — to meet tax, accounting, and other legal requirements.
8. Service providers we use
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase (Authentication, Firestore, Realtime Database, Hosting/Analytics) | Accounts, profile storage, connection signaling, app infrastructure | Account & profile data, signaling, diagnostics |
| [PAYMENT PROVIDER — e.g. Paddle / Razorpay] | Subscription checkout, billing, tax, invoicing | Billing details, transaction data (cards handled by the provider, not us) |
| Google STUN & Metered TURN relay | Helps devices establish a peer-to-peer video connection | Network connection data; relays encrypted media only when a direct connection isn’t possible |
Each provider is bound to use the data only to deliver their service to us. We will keep this list current.
9. International data transfers
We operate from India and our providers may process data in other countries, including the United States and the European Union. Where we transfer personal data across borders, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s certified transfer mechanisms.
10. Data retention
- Account data — kept while your account is active, and deleted within a reasonable period after you delete your account (subject to legal/accounting retention).
- Recordings & snapshots — kept until you delete them or your plan’s retention window ends; local recordings live only on your device.
- Billing records — retained as required by tax and accounting law.
- Diagnostics & logs — retained for a limited period for security and troubleshooting.
11. Security
We use industry-standard safeguards including encryption in transit (TLS and end-to-end encrypted media streams via DTLS-SRTP), hashed passwords, access controls, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; we work continuously to protect your information and will notify you and the relevant authorities of a breach where the law requires.
12. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete your information (“right to be forgotten”);
- Restrict or object to certain processing;
- Receive your data in a portable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data-protection authority.
To exercise any right, email support@hacksec.ai. We will respond within the time required by applicable law. For California residents, we do not sell or “share” personal information as defined by the CCPA/CPRA, and we will not discriminate against you for exercising your rights.
13. Cookies & analytics
We use essential cookies and similar technologies to keep you signed in and to operate the Service, and optional analytics to understand usage. You can control optional analytics in Settings and manage cookies in your browser. See our Cookie Policy for details.
14. Your responsibilities
Because NannyEye lets you capture video and audio, you must use it lawfully:
- Only connect cameras you own or are authorised to access;
- Comply with all applicable surveillance, recording, and audio-consent laws in your location — some places require notifying or obtaining consent from people who are recorded, especially for audio;
- Do not use the Service to monitor anyone unlawfully or without a lawful basis.
See our Acceptable Use Policy for full details. You are responsible for the legality of your monitoring.
15. Changes to this Policy
We may update this Policy from time to time. We will post the new version here with a revised “Last updated” date and, for material changes, provide additional notice within the Service. Your continued use after an update means you accept the revised Policy.
16. Contact us
Questions about this Policy or your data:
- Email: support@hacksec.ai
- Operator: HackSec.ai
- Address: 330, Atlanta Shopping Mall, Bhimrad-Althan Rd, Apcha Nagar, Althan, Surat, Gujarat 395017, India
See also our Contact page.