This app collects no video and no audio. What follows explains what that means, what the adverts do, and what little we do collect.
Last updated: 12 November 2026 · Data controller: NB Bilişim · Contact: info@oldphonecam.app
On your own Wi-Fi, camera video and audio stay on your local network. There is no cloud storage, no recording server and no account. The stream is watched only by devices on the same local network that you gave the address and the key to. With remote viewing, video and audio travel encrypted between your paired phones and are decoded only there. Clips stay in the phone’s own storage.
The free version shows three kinds of advert. A banner sits at the bottom of the camera and recordings screens. An interstitial, a full screen advert, appears at most once a day after a stream starts. A rewarded advert plays only when you choose to watch one in exchange for more recording time today.
Adverts are served by Google AdMob. When one is shown, AdMob processes data such as a device identifier, approximate location at country level and interaction with the advert, under its own terms. That data does not reach us; all we learn is whether the advert was watched to the end. In the European Economic Area, the United Kingdom and Switzerland a consent form is shown before any advert and your choice is applied. AdMob’s policy: policies.google.com/technologies/ads.
Premium users see no adverts, and the advert software is never started on their device. Camera video and audio sit entirely outside this: no frame and no audio sample goes to an ad network.
If you buy Premium, the transaction is handled by the App Store or Google Play. We use a service called RevenueCat to know whether your subscription is active. What reaches RevenueCat is:
We use it to know whether your subscription is active and, with Premium+, to count your remote viewing hours as described below. We do not share it with ad networks and we do not sell it.
The app asks once whether it may send two usage counts. Nothing is sent unless you choose Allow, and you can change your answer in Settings at any time.
They are kept by RevenueCat under the same anonymous user id, and we use them to find out where people get stuck. They contain no video, no audio and no name. If you turn them off, they are deleted from RevenueCat.
Remote viewing is part of Premium+. Two phones pair once with a QR code and then connect over the internet. Streaming on your own Wi-Fi uses none of this.
The picture is decoded only on your own devices. The server in between carries encrypted packets and does not record them. Video and sound travel between the two phones with WebRTC encryption. If the phones can reach each other directly, they do. If not, the same encrypted packets pass through a relay run by Cloudflare. Neither Cloudflare nor we can read them, and no server keeps any footage.
Making the connection and counting your hours does need some data to leave the phone:
Our server keeps the user id and your plan’s hour limit while a camera or viewer is connected, and forgets them a minute after the last one leaves. The time used and the camera ids stay until 40 days after you last use remote viewing, filed under a one way code made from the user id, and then delete themselves. Because the app does not show that id, we cannot find your record on request. Our server does not store network details. Cloudflare may process them outside your country.
Anyone who has the pairing QR code can watch that camera while it is on, so treat the code like a key. If it gets out, use Reset pairing on the camera phone: the old code stops working.
The phone you watch from uses its camera to read the pairing code, and the image is processed on the phone. On iPhone the code is read by Apple’s system tools. On Android it is read by Google’s ML Kit, which sends Google diagnostic data about the scanner: device model and system version, app name and version, an identifier for this install, performance figures, image format and resolution, event types and error codes. Google says this data is encrypted in transit and is not passed to third parties: developers.google.com/ml-kit/android-data-disclosure.
The server asks for authentication by default: the address carries an access key and a request without it is refused. The QR code carries the key, and the key is stored on your phone only. Inside your local network the stream travels over unencrypted HTTP, so you have to trust the network itself. Remote viewing does not use this stream. It is encrypted as described above.
The app is not directed at children and does not knowingly collect data from them.
In the European Economic Area, the United Kingdom and Switzerland under GDPR, and in Türkiye under law 6698, you have the right to access, correct and erase your data. We hold no name or email address, and the app does not show the anonymous user id, so a request alone does not tell us which records are yours. The records that exist are the purchase information, the usage counts and the remote viewing time used. Usage counts are deleted when you turn them off, and remote viewing records delete themselves 40 days after you last use it. To ask about them, write to info@oldphonecam.app. Data controller: NB Bilişim.
If this text changes the date is updated, and a material change is announced in the app.