Product policy
Baby Monitor — Privacy Policy
Effective: 11 October 2026
- App
- Baby Monitor for Android, Android tablets and Google TV —
co.lucidmaze.babymonitor - Legal entity
- LUCIDMAZE, UNIPESSOAL, LDA
- Contact
- support@lucidmaze.co
The short version
- Your video and sound go directly between your own devices. They are encrypted, they never pass through our servers, and we cannot see or hear them.
- No account. We don't ask for your name, email address or phone number.
- Nothing is recorded in the cloud. What the app saves (the baby log, video messages you record, your settings) stays on your family's devices.
- No ads, no analytics, no tracking. The app contains no advertising or analytics software, and we don't sell or share data for marketing.
- To watch from outside your home, the app uses a small connection service on our server. It only sees technical data (a random device number, a public key and your IP address), never pictures or sound.
1. Who we are
Baby Monitor is published by LUCIDMAZE, UNIPESSOAL, LDA ("Lucid Maze", "we"). We are the data controller for the limited data described in section 4. For everything that stays on your own devices, you are in control and we have no access.
Contact for anything about privacy: support@lucidmaze.co
2. How the app works
You install the app on two or more devices. One stays in the nursery and uses its camera and microphone. The others (parent phones, tablets, a TV) show the picture and play the sound. Devices are linked by scanning a code while they are on the same WiFi network. From then on they recognise each other with encryption keys that are created on the devices and never leave them.
3. Data that stays on your devices
We never receive any of the following. It is stored only in the app's private storage on your family's devices, or sent directly from one of your devices to another over an encrypted connection.
| Data | What it is used for | Where it is |
|---|---|---|
| Live video and sound from the nursery; your voice when you use "Hold to talk"; your face when you use "Show me" | The monitoring itself | Streamed directly between your devices, encrypted (WebRTC, DTLS-SRTP). Not recorded unless you switch recording on (next row). |
| Recordings of the nursery (video, and sound unless you switch sound off), with the date and time shown on the picture | Only if a parent switches recording on (Baby Monitor Plus): looking back at what happened, all the time, when there is movement or sound, or at the times you set | Only on the nursery device, in the app's own storage. Never uploaded to us or to anyone else. Sent, encrypted and directly, only to a paired parent device that asks to play one. The oldest recordings are deleted automatically to stay within the storage you allow; you can delete any or all of them from a parent device, and switching recording off stops it at once. |
| Sound level in the room | Sound alerts | Measured on the nursery device. No audio or video is uploaded for analysis. |
| Baby log (feeds, sleep, nappies), your baby's date of birth if you enter it, routines, night-light and alert settings | The log, nap suggestions and shared settings | On the nursery device, copied to the parent devices you paired. |
| Video messages you record for your child | Playing them on the nursery device | On the nursery device. |
| Babysitter notes, including any names and phone numbers you type in | Showing them to a babysitter you add | On the nursery device and the devices you paired. |
| Device names you choose ("Baby's room", "Dad"), pairing keys, list of paired devices | Recognising your devices and showing who is watching | On each paired device. |
| Temperature and humidity from a Bluetooth thermometer, if you use one | Showing the room climate | Read by the nursery device, shown on your paired devices. |
Android's cloud backup is switched off for this app, so this data is not copied to your Google account by the app. Uninstalling the app deletes it from that device.
4. Data that reaches us
Only when you use watching away from home does the app contact our connection service at multicam.lucidmaze.co. The service helps two of your devices find each other on the internet; the picture and sound then travel directly between them.
| Data | Why | How long |
|---|---|---|
| A random device number and the device's public encryption key | So that only the real device can use its number | Until you ask us to delete it |
| IP address, time of connection, whether the device is online | To deliver connection messages to the right device and to protect the service from abuse | Only while connected; technical server logs for up to 30 days |
| Connection messages passed between your devices (network addresses and technical session details, signed by your devices) | So your devices can connect directly | Not stored; forwarded and discarded |
We cannot link this data to your name or email address, because we never collect them. The service never receives video, sound, the baby log or any other content.
Legal basis (EU/UK GDPR): performing the service you asked for (Art. 6(1)(b)) and our legitimate interest in keeping the service secure (Art. 6(1)(f)).
5. Other companies involved
| Company | When | What they receive |
|---|---|---|
| Google Play (Google) | Installing the app; buying Baby Monitor Plus | Purchases are handled entirely by Google Play. We never see your payment details. The app only learns from Google Play on your device whether Plus is active. |
| Google and Cloudflare (public "STUN" servers) | Watching away from home | Your device asks one of these servers for its own public internet address. They see your IP address and nothing else. |
| Google Cast (Google) | Only if you cast to a Chromecast or TV | The picture is sent to the cast device on your own WiFi. Google's Cast software on your devices applies Google's privacy policy. |
| Our hosting provider | Watching away from home | Hosts the connection service described in section 4, on our behalf. |
We do not sell personal data, and we do not share it for advertising.
6. Permissions the app asks for
- Camera and microphone: on the nursery device, to show and hear the room; on a parent device, only while you use "Hold to talk", "Show me" or scan a code.
- Notifications: alerts, and the permanent notice that shows while the camera is on or you are listening.
- Nearby WiFi and network access: finding and connecting your devices.
- Bluetooth scanning: only to read a Bluetooth thermometer. It is not used to find your location.
- Running in the background and ignoring battery optimisation: so monitoring keeps working with the screen off, all night.
- Showing over the lock screen: for the alarm that warns you when the connection to the nursery is lost.
The app does not access your contacts, photos, files, location or messages.
7. Family members, babysitters and TVs
Anyone you add can see and hear your nursery. You add a device by scanning the code it shows, you can limit a babysitter's access to a number of hours, and you can remove any device at any time. Every nursery device tells the other paired devices when a new one is added. A removed device can no longer connect.
8. Children
Baby Monitor is a tool for parents and carers. It is not directed at children, and children are not its users. The pictures and sound of your child are handled only on your family's devices as described above; we never receive them.
9. Security
Connections between your devices are end-to-end encrypted, and every device proves its identity with a key stored in the device's secure hardware where available. Devices can only be paired by someone who is physically present on your WiFi and can see the code. No system is perfectly secure, so please keep your devices and your WiFi protected with good passwords and remove devices you no longer use.
10. Your choices and rights
- Delete data on your devices: remove a device in the app, clear the log, or uninstall the app.
- Stop using the connection service: watching on your home WiFi works without it.
- Delete data we hold: email us the device ID shown at the bottom of the app's Settings (it starts with "ID") and we will delete its entry from the connection service.
- Depending on where you live (for example in the EU, the UK or California) you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to complain to your data protection authority. To use these rights, contact us at the address above. We do not discriminate against anyone for using them.
11. International transfers
The public STUN servers mentioned in section 5 are operated by companies based in the United States and may process your IP address there or in other countries, under their own safeguards. We do not otherwise transfer your data.
12. Changes to this policy
If we change how the app handles data, we will update this page and change the date at the top. If a change is significant, the app will tell you before it applies.