Your cameras are yours.
Here is everything else.

OMWSD LTD, a private limited company registered in England and Wales under company number 17452769, registered office 27 Millfield Road, Albrighton, Wolverhampton, WV7 3JN, England. We make Vantan and run Vantan Cloud, and we are the data controller for the personal data described here.

For any data protection question: hello@omwsd.co.uk.

• Without Vantan Cloud, nothing reaches us. Watching goes straight from your camera to your phone; recognition runs on your own iPhone or iPad. We collect nothing — no account, no analytics, no tracking.
• With Vantan Cloud, what your cameras see is encrypted on your devices before it leaves, with keys only your devices hold. Our server stores and passes on what it cannot open.
• The server can still see some things — when events happen, how big clips are, which devices are yours, your internet address. They are listed below in full.
• We don't sell anything, show adverts, or use your data for anything but running the service.

On the Free and Plus plans, Vantan works entirely on your devices and your home network. We receive nothing from it.

• Cameras and their logins are kept on your device. Camera passwords are kept in the iPhone's Keychain, never in the app's database, and every camera address the app shows or logs has its password removed.
• Recognition — telling a person from a shadow, a smoke alarm from the radio — runs on the device. Nothing is uploaded to work it out.
• Saving to Photos asks only to add to your library, never to read it.
• Purchases are made with Apple. Apple tells the app what you have bought; we never see your payment details.
• Crash reports. If you have chosen in iOS to share analytics with app developers, Apple may send us anonymous crash reports. That is Apple's setting, and you can turn it off in Settings → Privacy & Security → Analytics & Improvements.

Vantan Cloud is a paid plan that sends some data to our servers so your phone can hear from home when you are away. Before anything is sent, the app shows you what goes where and asks you to agree. You can turn it off at any time in the app's Settings; nothing new is sent from that moment.

What it sends

• Clips of events — a few seconds either side of each event — and a still. Encrypted on your devices first.
• Alerts, through Apple's push service. The words are encrypted; only your devices can read them.
• Live video, when you watch from outside the house. It passes through our relay, encrypted end to end, and nothing of it is kept.
• Around-the-clock recording, on a 24/7 plan, from the cameras you choose. Encrypted on your devices first.
• Your account: the identifier Sign in with Apple gives us (if you use Hide My Email, we never learn your address), the public keys of your devices, who is in your household, and your subscription as Apple's own servers report it.
• Push tokens — the addresses Apple gives your phones for notifications — so alerts can reach them.

What our server can see

Everything Vantan Cloud handles is listed here: what the server stores or handles, what it cannot see, and what it can still learn from what it holds. This is the same table as the technical design the software is built to, and the two are kept identical.

Your internet address is also used, briefly and in memory, to limit how often anyone can call the server — the protection against someone trying to flood it.

We use Vantan Cloud data only to provide Vantan Cloud: to store your home's encrypted clips, deliver its alerts, relay its live video, keep its devices in step and check your subscription with Apple. The lawful basis is that it is necessary to perform our contract with you (UK GDPR Article 6(1)(b)).

Rate-limiting by internet address, and keeping the service secure, rest on our legitimate interest in protecting the service and the people who use it (Article 6(1)(f)).

We do not profile you, make automated decisions about you, sell or share your data for marketing, or show adverts.

• Cloudflare runs our servers and stores Vantan Cloud's data — in its EU jurisdiction, so it is kept in EU data centres. It acts as our processor under contract.
• Apple provides Sign in with Apple, the push service that carries alerts (Apple sees the time of each alert and whether it is urgent, never its words), and the App Store that handles your subscription. Apple's own privacy policy covers what it does.

Both companies operate infrastructure outside the UK. Where personal data is transferred, it relies on the UK International Data Transfer Addendum or an adequacy decision. We disclose personal data to no one else, other than where the law requires it of us — and what we hold of your home is encrypted with keys we do not have.

• Event clips and records: 60 days, or until you delete them. Ones you star are kept until you unstar or delete them.
• Around-the-clock recording: 30 days.
• Shared clip links: until the date you chose when sharing — between 1 and 30 days — or until you take the link back.
• Invitations to join a home: 48 hours if unused.
• When Cloud ends: everything stored for your home, starred clips included, is deleted 60 days later.
• When you delete your account in the app: every home you own, its clips and recordings, your devices and your account are deleted at once, and Sign in with Apple's tokens are revoked, as Apple requires.
• Devices with no account — a watcher whose home was deleted, a guest long gone — are forgotten after 30 days unseen.

You can ask for a copy of the personal data we hold about you, have it corrected or deleted, restrict or object to our use of it, and receive it in a portable form. Email hello@omwsd.co.uk. We respond within one month, and there is no charge.

A copy of what we hold will not include your clips in a form anyone can watch: they are encrypted with keys only your devices have. Your devices can open them; we cannot.

If you are unhappy with how we have handled your data, you can complain to the Information Commission — still called the ICO — at ico.org.uk, though we would appreciate the chance to put it right first.

What your cameras record is yours, and so is the responsibility for it. If a camera films beyond your own property — a street, a neighbour's garden — the law on CCTV may apply to you; the ICO has guidance for people using domestic CCTV. We cannot see your footage, so we cannot act on it, but we will help you use Vantan's settings to respect other people's privacy.

vantan.app has no cookies, no analytics, no advertising and no trackers, which is why you were not asked to agree to any. Its fonts and pictures are served from vantan.app itself. It is hosted by Cloudflare, which necessarily handles your internet address to deliver the page and protect it from attacks. If you email us, we use your message only to reply.

Vantan Cloud accounts are for the adults who own or manage the cameras. We do not knowingly collect personal data from children.

If this policy changes in a way that matters, we will update the date at the top and, for Vantan Cloud, tell you in the app before it takes effect. We do not quietly rewrite history; earlier versions are available on request.