BabyRelay Privacy Policy

Last Updated: October 31, 2026

BabyRelay ("we", "our", or "the app") is a peer-to-peer baby monitor application operated by Voiyag LLC, the data controller responsible for the personal information described below. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

Account Data

• Email address — used for account creation, authentication, and password recovery.
• Name (optional) — if provided during registration or via social sign-in (Google, Apple).

Device & Session Data

• Device push tokens — stored to deliver alert notifications to your device.
• Device role (Baby Unit or Parent Unit) — stored to manage monitoring sessions.
• Install ID — a random ID created the first time you use the app on a device. It identifies that installation (not you or the hardware) so a baby unit can recognize its own monitor and monitoring sessions. It is not derived from any hardware or advertising identifier, and it is gone when you uninstall the app.
• Pairing codes and family invites — 6-digit codes that pair your own devices (valid for 5 minutes) and 10-character codes that invite a family member (valid for 1 hour). They are kept only on our servers, work once, and are deleted automatically when they expire.
• Device name — when you pair a parent device or redeem a family invite, your phone's name as set in its settings (for example "Alex's Pixel"; recent iPhones just say "iPhone") is saved so the monitor's owner can tell devices apart. Rename the phone before pairing if you'd rather it not show.
• Security counters — how many times your account has tried to redeem a code in the last 15 minutes. Our API firewall also checks the IP address requests come from. Both are used only to stop code guessing.

Family Sharing Data

• Share requests — when you redeem a family invite, your account email and your phone's device name (as set in its settings) are saved with the request and shown to the monitor's owner, who approves or declines it. You get no access until the owner approves.
• Viewer list — once a request is approved, your account ID is added to that monitor's viewer list so you can see its live feed, sessions, and alerts. The owner can remove you at any time, and you can remove the monitor from your own list.

Monitoring Data

• Alert records — sound and motion detection events including type, severity, and timestamp. Alerts are automatically deleted after 7 days.
• Audio/video clips — alert clips are recorded and stored only on the baby unit device. They are never uploaded to our servers.
• Sleep analytics — aggregated sleep pattern data derived from monitoring sessions, stored locally on your device.

Signaling Data

• WebRTC signaling messages — offers, answers, and ICE candidates exchanged to establish peer-to-peer connections. These are automatically deleted after 1 hour.

Relay Usage Data

• Monthly relay totals — how many bytes and seconds of your monitoring were carried by our relay each month, and how many of your connections needed it. Used to enforce a fair-use allowance and to plan relay capacity. Never includes video, audio, or where you were.

Advertising Data (Free plan only)

• Ad requests — on the Free plan, the parent monitor screen shows one banner ad served by Google AdMob. The baby unit never shows ads. Whether a parent device sees the ad follows the plan of the monitor's owner: if you or the owner subscribe to Base, there is no ad.
• What AdMob receives — device and app information, your IP address, ad interactions, and diagnostic and performance information about the app and the ads SDK. On iOS it receives your advertising identifier only if you allow tracking when asked; on Android it uses your device's advertising ID unless you delete it. Without an advertising identifier, ads are non-personalized.
• Consent — where the law requires it (such as the EEA, the UK, and Switzerland) we ask for your consent through Google's consent form before any ad is requested, and AdMob stores your choice on your device.
• Limits — ads are restricted to general-audience (G-rated) content. Ad requests never include video, audio, alerts, or anything about your baby. If you subscribe to Base, you are never asked for tracking permission.

Subscription Data

• Subscription tier and status — synced from RevenueCat (our payment processor) to manage feature access. We do not store payment card details.

2. Data We Do NOT Collect

• Live video and audio are never stored on our servers. Streams travel directly between your devices whenever possible (P2P). On restricted networks, an encrypted TURN relay is used as a fallback on every plan — streams may pass through the relay in transit but are never stored or logged. We keep a monthly total of how much relay each account uses (bytes and time, never content) to enforce a fair-use allowance.
• Passwords — managed by AWS Cognito; we never have access to your plaintext password.
• Location data — we do not request or store your geographic location.
• Contacts, photos, or files — we do not access any data outside the app.

3. How We Use Your Data

4. Third-Party Services

We use the following third-party services that may process your data:

Our Website

babyrelay.io is hosted on Cloudflare, which processes your IP address to serve pages. The contact and account-deletion forms use Cloudflare Turnstile to check that you're not a bot; it processes your IP address and browser signals. Pages load fonts from Google Fonts and icons from jsDelivr, which receive your IP address and browser information. What you type into a form (name, email, message) is sent to our AWS backend only to reply to you or to process a deletion request. The website uses no analytics or advertising cookies.

5. Encryption & Security

• Peer-to-peer streams are encrypted using WebRTC's built-in DTLS-SRTP encryption.
• Signaling messages are transmitted over encrypted HTTPS/WSS connections (TLS).
• Data at rest in AWS is encrypted using AWS-managed encryption keys.
• Authentication uses AWS Cognito with enforced strong password policies.
• Pairing codes and invites work once, expire quickly, and are rate-limited per account and per IP address.

6. Data Retention

7. Your Rights

Access & Export

You can export your data at any time from Settings > Account & Data > Export My Data. The export is a JSON file containing your profile, baby units, alert records, family-sharing records (access you granted and access granted to you), parent connections, and sleep analytics.

Account Deletion

You can delete your account and all associated data from Settings > Account & Data > Delete Account, or via the web deletion page. This permanently removes:

• Your user profile and authentication credentials
• All baby unit registrations and pairing data
• All family-sharing records, including pending requests, both for your monitors and for monitors shared with you
• All alert records
• All parent connection records
• Your monthly relay usage totals

Any pairing code or invite that is still open expires on its own within an hour. Deletion is immediate and irreversible.

Ad Privacy Choices

On the Free plan you can change how ads use your data at any time:

• Settings > Privacy Choices in the app (shown where the law requires it, such as the EEA, the UK, and some US states) lets you change or withdraw your ad consent, or opt out of the sale or sharing of your personal information for targeted advertising.
• On iOS, turn off tracking for BabyRelay in Settings > Privacy & Security > Tracking.
• On Android, delete or reset your advertising ID in your device's Google settings.

Ads you see after opting out are not personalized. Subscribing to Base removes ads entirely for you and everyone you share your monitor with.

US State Privacy Rights

If you live in a US state with a consumer privacy law (such as California, Colorado, Connecticut, Virginia, or Texas), you have the right to know what personal information we hold about you, to get a copy of it, to correct it, and to delete it. We do not sell your personal information for money. Letting Google AdMob use your advertising identifier and IP address to personalize the Free plan's ad may count as "selling" or "sharing" personal information for targeted advertising under some of these laws; you can opt out with the choices above. We will not treat you differently for exercising these rights. To make a request, email support@babyrelay.io from your account email so we can verify it's you.

Data Portability

Your data can be exported as JSON for use in other applications. The alert history screen can also export alerts as CSV.

8. Children's Privacy

BabyRelay is designed to monitor infants and young children but does not collect any data directly from children. The app is operated entirely by parents or guardians, and ads appear only on the parent device's monitor screen, never on the baby unit. We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your data is processed on AWS infrastructure. Depending on your region, data may be transferred to and stored in the United States or other AWS regions. AWS provides appropriate safeguards for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app and updating the "Last Updated" date above.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
Company: Voiyag LLC
Email: support@babyrelay.io
Web: babyrelay.io/contact