Pet Cam Pro privacy policy
Last updated 4 November 2026
- We can't see or hear your pets. Live video and sound go between your own devices, encrypted end to end. Snapshots, recordings, the names you give things and what each alert says are encrypted on your devices, with keys only your devices have, before anything reaches our server.
- No ads, analytics or tracking. We don't sell anything about you, or share it with anyone but the two services that run Pet Cam Pro (below).
- Our server keeps very little, and only what it needs: enough to connect your devices, send alerts, store encrypted recordings for 7 or 14 days, and know your plan.
Who we are
Pet Cam Pro is made by Sand Collective LLC. In this policy, "we" means Sand Collective. Questions about privacy go to support@petcampro.com.
What our server can't see
Your devices lock these with keys they make themselves. The keys travel only between your devices (through iCloud Keychain, your Apple Watch's link to its iPhone, or an invite that someone in your home approves). Our server never has them, so it can't open any of this:
- live video and sound;
- snapshots and recordings, and the pictures your Apple Watch shows;
- what your home and devices are called;
- what each event was ("Dog activity", "Barking") and how loud it was;
- which kinds of alert each device wants;
- what your devices tell each other: a camera's battery and settings, and commands like turning on the flashlight.
When two of your devices can't reach each other directly, live video goes through a relay run by Cloudflare. It passes on encrypted packets it can't decrypt.
What our server does keep, and for how long
| What | Why | How long |
|---|---|---|
| A random id for each device (made the first time the app opens), what kind of device it is, its model, the app's version, and when it last connected | To know which devices belong to which home, and to sign them in | Deleted 30 days after its sign-in ends, which happens 180 days after its last use, or when it's removed from its home |
| The device's push token | To send its alerts through Apple's push service | As long as the device's record |
| A random id for your home, which devices are in it, and its settings (how long to keep recordings; which cameras a device has muted, and whether it wants offline alerts) | To run your home | Until 90 days after your home is left with no devices and no recordings (see "What goes last", below) |
| For each event: when it happened, which camera saw it, how long its clip runs and how big the files are, plus the encrypted snapshot and clip | To list your activity and show your recordings | 7 days on Starter and 14 on Premium, or fewer if your home is set to keep recordings for less time. Within that, the oldest clips go first once a home reaches its plan's storage (10 GB or 25 GB). |
| Your camera's latest encrypted peek picture, for Apple Watch | So the Watch can show it | Replaced each second while a Watch is looking; deleted when the camera leaves your home |
| Your plan (see "Subscriptions") | To give your home what it pays for | Until 180 days after the subscription ends (see "What goes last") |
| How much your home stores, and how many minutes of live video it sent through the relay this month | To apply your plan's limits | This month and last |
| Hourly counts of what each home uploads | To stop anyone from filling our server | One day |
| Request logs at Cloudflare: which part of our server each request reached, when, and how it was answered. They can include the address (IP) a request came from. | To find and fix problems | 7 days |
Like any internet service, our server and the relay also see the IP address of each device that connects, and the timing and size of what it sends. That can show when your camera sees something or when someone is watching, though never what. We use IP addresses only to limit how many new devices one network can register each minute, and we don't store them ourselves.
Subscriptions and payments
Plans are bought through Apple, which handles the payment and knows who paid. We never see your Apple Account, your name, your email or your card.
After a purchase, the app hands our server Apple's signed record of it. We keep the plan (Starter or Premium), when it ends or renews, whether it's a free trial, whether it was a test purchase, and Apple's id for the subscription. We don't keep the price, the currency or your country. Each purchase carries a random token for your home, so Apple's renewal notices can say which home a subscription covers. That token is not your home's id and says nothing else about it.
Manage or cancel a subscription in Settings › your name › Subscriptions. Refunds are Apple's to give, at reportaproblem.apple.com.
Who else is involved
- Cloudflare runs our server, its database and storage, and the relay for live video. It handles this data for us, on our instructions.
- Apple delivers alerts. Its push service sees only "Pet Cam Pro: New activity"; the details are encrypted and opened on your phone. Apple also sells the subscriptions, and its iCloud Keychain, which Apple encrypts end to end, carries your home's keys between your own devices.
There are no analytics, advertising or crash-reporting services in the app. If you've chosen in your device's settings to share analytics with app developers, Apple may pass us crash reports, as it does for every app.
On your devices
Your home's keys stay on your devices. For a home you made yourself, they're also in your iCloud Keychain (when it's on), so your other devices can join. A camera keeps its recent clips until they're uploaded, and a viewer keeps the recordings it has opened. Anything you save to Photos is yours, outside the app.
Deleting your data
- One recording: in the recordings on the main page, swipe it and tap Delete, or tap Delete while it plays. It's deleted from our server at once.
- Older recordings: in Settings, choose how many days to keep recordings, from 1 day up to your plan's limit. Older ones are deleted within the hour.
- A device: from another device in your home, open Settings, swipe the device under Devices, and tap Remove. The home's keys change without it, so it can't open anything new, and its record on our server is deleted about 30 days later.
- Deleting the app removes its files from that device. iOS keeps the device's keychain, so the home's keys stay there, and reinstalling picks the home up again. Its record on our server is deleted 30 days after its sign-in lapses, which happens 180 days after it was last used. Its recordings go on your home's usual schedule.
What goes last
Two small records outlast the rest, for a while. One is your home's own: its random id, its encrypted name, its settings, the token above and when its keys changed. It's deleted 90 days after your home is left with no devices and no recordings. The other is the record of each subscription, deleted 180 days after the subscription ends, so that a late notice from Apple (a renewal that goes through after a failed payment, or a refund) still reaches the right home. A home waits for its subscriptions' records to go first.
Deleted records can remain in Cloudflare's backups of our database for up to 30 days.
Children
Pet Cam Pro isn't made for children, and we don't knowingly collect personal information from anyone under 13.
Your rights
Depending on where you live, you may have the right to ask what we hold about you, and to have it corrected or deleted. Write to the address above. We don't know your name or email, so we may need your help to find which home or device is yours.
Cloudflare's network runs in many countries, so this data may be processed outside the one you live in.
Changes
If this policy changes, we'll update this page and the date at the top before the change takes effect.