Privacy policy

Last updated 26 October 2026

Kovion CCTV turns a spare phone into a live security camera that you watch from another phone. We built it so we never need to know who you are or see what your camera sees. This page explains exactly what is and isn't collected. Kovion CCTV is a product of Kovion Holdings, which is the data controller for the little personal data described here.

The short version

• No account, no email address, no phone number.
• Live video and sound go directly between your own devices, encrypted. They are never recorded or stored on our servers, and we can't watch them.
• No advertising, no tracking cookies and no third-party analytics.
• Your settings, saved cameras and alert history stay on your own device.

What never reaches us

• Your camera picture and microphone sound. They travel from the camera phone to the viewing phone using WebRTC, which encrypts them end to end (DTLS-SRTP). When the two phones can't connect directly, for example one on Wi-Fi and one on mobile data, the encrypted stream passes through our relay server. The relay can't decrypt it and doesn't save it.
• Recordings and snapshots you save. They are created on your phone and saved straight to your phone.
• Your contacts, photos, files and location.

What passes through our server

To pair phones and pass on messages between them, our server briefly handles:

• Camera codes and invite codes, and the name you give the camera. These are held in memory while the camera is running and for up to 30 minutes afterwards, so the camera can reconnect with the same code.
• Viewer names that people enter before watching, so the camera owner can see who is watching. They are held in memory only while that person is connected.
• Alert snapshots and custom sounds. A small motion or tamper snapshot is sent from the camera to its viewers, and sounds you upload are sent to the camera phone. Both pass through our server on their way and are never stored there. Custom sounds are kept on the camera phone only.
• Your IP address. We use it in memory to limit repeated wrong code attempts and floods of requests, and to route the connection. If a camera owner removes someone, that person's IP address and phone tag are blocked from that camera for one hour, in memory only.
• A random phone tag. Each phone makes a random number the first time it watches. Before the server passes it to a camera, it is scrambled together with that camera's code, so it can't be matched across cameras. The camera keeps it, on the camera phone only, to remember phones its owner has approved.
• Camera code ownership. To stop anyone taking over your camera's code, our server stores the code with a one-way fingerprint of the camera's private key. The fingerprint can't be turned back into the key, and entries are deleted after 60 days without use.

Face detection

If the camera owner turns on face detection, it runs entirely on the camera phone. The camera spots that a face is in the picture and sends viewers the position of a box to draw, plus an alert with a small snapshot. Kovion CCTV doesn't identify who anyone is. It doesn't create or store face templates or any other biometric data, and no faces are sent to us for analysis. The detection software is downloaded from our own server.

Server logs

Our server keeps a short rolling log of connection events, such as a camera coming online or a viewer joining or leaving. Each entry includes the camera code, the viewer's chosen name, an IP address and the device type (for example "iOS/Safari"). We use this only to keep the service working and to investigate faults or abuse. The log is automatically overwritten as new entries come in, and we don't keep older copies.

Stored on your device

Kovion CCTV uses your browser's local storage (not cookies) to remember your camera name and settings, your viewer name, recently watched cameras, alert history with thumbnails, and app files so it opens instantly. Camera phones also keep your uploaded sounds. You can remove all of this at any time by clearing this site's data in your browser settings. See our cookie policy for the full list.

Other services we use

• Cloudflare delivers the website and protects it from attacks. It processes your IP address and may set a strictly necessary security cookie (see the cookie policy).
• Public STUN servers from Cloudflare and Google help your phones find a direct route to each other. They see your IP address but never your video.

We don't sell or share personal data, and we don't use it for advertising.

Your rights

Under UK data protection law you can ask to access, correct or delete personal data we hold about you, or object to how we use it. Because we don't run accounts, most data never reaches us, and what does is deleted automatically as described above. To make a request, email privacy@kovion.site. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

People your camera can see

If your camera films anyone other than you, such as visitors, neighbours or a public street, you may have responsibilities under data protection law too. The ICO publishes guidance on using cameras at home. Please read our terms before pointing a camera at other people.

Children

Kovion CCTV is not aimed at children under 13.

Changes

If we change this policy, we'll update the date at the top of this page.

Questions about privacy: privacy@kovion.site. Anything else: support@kovion.site.