1. Introduction and Legal Basis
This policy explains how we collect, use, store, share, protect, and delete information arising from your use of CamSpan (the “App”). CamSpan is a tool that turns an iPhone into a system camera for macOS / Windows desktops, and consists of a sender App (iPhone) and desktop Apps (macOS / Windows).
This policy is based primarily on:
- Mainland China laws and regulatory requirements: the Personal Information Protection Law of the PRC, the Cybersecurity Law of the PRC, the Data Security Law of the PRC, the Law on the Protection of Consumer Rights and Interests of the PRC, the Provisions on the Administration of Mobile Internet Application Information Services, and related App personal-information processing rules;
- Apple platform requirements: the App Store Review Guidelines (including privacy-policy and permission-purpose-string requirements);
- General principles: legality, legitimacy, necessity, good faith, purpose limitation, minimization, openness and transparency, accuracy, and security safeguards.
Where this policy conflicts with laws, regulations, or platform policies, the mandatory provisions prevail.
2. Key Points (Please Read First)
- No account: the App has no registration or login; core features require no phone number, email, or other identity information;
- Device-to-device video: your camera feed is transmitted directly between your own devices (local Wi-Fi or USB) and never passes through our servers; we do not store or review your video;
- Encrypted by default: all connections are encrypted (WebRTC uses DTLS-SRTP; USB and control channels use TLS); no plaintext transmission path exists;
- No ads, no tracking: the App contains no advertising SDK and no third-party analytics or crash-reporting SDK, does not read the advertising identifier (IDFA), and does not track you across apps;
- On-demand authorization: camera and local-network permissions are requested only when you use the corresponding feature;
- Revocable trust: you can remove paired, trusted desktop devices and their trust credentials at any time in the App.
3. Terminology and Scope
- Sender App: the CamSpan App running on iPhone;
- Desktop App: the CamSpan App running on macOS or Windows (including system components such as the macOS camera extension);
- Local data: data stored only in your device's storage and managed by the App.
This policy applies to the sender App and the desktop Apps. Third-party platforms (Apple, Microsoft) and the meeting/streaming software you use are governed by their own policies.
4. Operator Information
- Operator name: CamSpan Team
- Contact email: support@cuebuddy.cn
5. Personal Information We Collect and Process
The App follows a data-minimization principle. The table below lists all data-processing activities:
| Category | Details | Source | Storage | Leaves the device? |
|---|---|---|---|---|
| Camera video stream | Live video (H.264 / HEVC encoded) | Captured by the sender after you grant camera permission | Not persisted; encoded in real time and transmitted only to the desktop you select | Transmitted directly between your own devices only; never through our servers |
| Pairing & trust data | Device identity certificate, peer public-key fingerprint (pin), trusted desktop list | Generated after successful pairing | On device, local only | Not uploaded; used only between paired devices for encrypted handshakes |
| Settings & preferences | Resolution, frame rate, codec, manual camera parameters | Configured by you in the App | On device, local only | No |
| Device status telemetry | Temperature, battery, connection quality, latency | Collected automatically by the App | Shown locally on device; displayed live on the peer during a connection | Transmitted only between your own devices for status display |
| Purchase information (optional) | Subscription status, restore-purchase validation results | Apple App Store / StoreKit | Handled by Apple; the App keeps only a minimal entitlement flag | Processed via Apple's StoreKit system |
| Diagnostics (optional) | Connection diagnostics you view or export | Recorded automatically by the App | On device, local only | Only if you actively export or share them |
5.1 Information We Do NOT Collect (Negative List)
- Identity information such as phone number, email, or name (unless you contact us by email yourself);
- Precise or coarse location data;
- Contacts, photo library, call history, messages, or clipboard contents;
- Advertising identifier (IDFA) or cross-app tracking data;
- Facial biometrics (the camera feed is used only for live viewfinding and transmission; the App performs no facial-feature analysis);
- Any data processed by third-party analytics, statistics, advertising, or cloud AI services (the App integrates no such SDKs).
5.2 Special Notice on Audio
The current version (V1) of the App does not capture or transmit iPhone microphone audio; the microphone permission is not requested. If a future version adds audio features, we will update this policy and describe the data processing before implementation.
6. Network Behavior (Important)
- Device-to-device: the camera feed is transmitted directly between your sender and desktop over your own local network (WebRTC with DTLS-SRTP encryption) or USB (TLS mandatory);
- No cloud relay: the App provides no cloud video relay, cloud recording, or cloud storage; your video never passes through any server of ours;
- Encrypted control channel: the LAN control channel uses TLS 1.3 with mutual device identity certificates and public-key pinning; devices failing validation are rejected — no plaintext connection path exists under any circumstance;
- Pairing security: QR pairing tokens are short-lived (5 minutes), one-time, and contain no long-term private keys; on first trust, the App shows a confirmation dialog with the sender's name for you to approve;
- Backend scope: any backend of the App (if introduced in the future) is limited to license validation and version updates and must not receive media content; the current version completes device-to-device connections without relying on our backend.
7. Permission Requests
The permissions below are requested via the system prompt only when you use the corresponding feature, and can be changed or revoked at any time in system settings:
| Permission | Purpose | Impact if denied |
|---|---|---|
| Camera (sender) | Live viewfinding and use as the video source | Core features unavailable |
| Local network | Discovering and connecting to your desktop devices on the LAN | Wi-Fi connections unavailable; USB can still be tried |
| Virtual camera system component (desktop) | Letting Zoom, OBS, and other software recognize CamSpan as a system camera | Other software cannot select CamSpan as a camera |
About the camera feed: the feed is used only for live viewfinding and transmission and is not persisted on the sender or the desktop; it disappears when you end the connection or uninstall the App.
8. Pairing and Trusted Device Management
- Pairing is available via desktop-side authorization confirmation and QR scanning (short-lived tokens);
- After successful pairing, each device stores the trust credentials required for encrypted handshakes (device identity and public-key pin) to enable fast reconnection after brief disconnections;
- You can view and remove trusted desktop devices in the App at any time; removal deletes the local credentials and public-key pin, and the peer must pair again;
- Untrusted desktop devices cannot obtain the video preview.
9. Data Storage and Retention
| Data | Retention | How to delete |
|---|---|---|
| Pairing & trust credentials, trusted device list | Until you remove them or uninstall the App | Remove the trusted device in the App, or uninstall the App |
| Settings & preferences | Until you change them in the App or uninstall the App | Deleted with uninstall |
| Subscription entitlement flag | During the subscription period and as needed for accounting | Deleted with local data; Apple-side receipt records are handled under Apple's policies |
| Camera video stream | Not persisted | Disappears when the connection ends |
| Records of your emails to us | Until the issue is resolved plus a necessary follow-up support period | Request deletion at any time |
10. Your Rights
Under applicable law, you may:
- Access and correct: view and modify connection and camera settings directly in the App;
- Delete: remove trusted devices and local data, or uninstall the App to delete all local data;
- Withdraw consent: revoke camera and local-network permissions at any time in system settings; the corresponding features are disabled;
- Request information: contact us via the email in Section 4 for further explanation of data-processing rules.
Because the App has no accounts, these rights are exercised primarily through in-App features and system settings.
11. Minors
- The App is designed for creators, streamers, and video professionals and does not target minors;
- If you are a minor, please use the App under a guardian's supervision, with the guardian helping you read this policy;
- If you believe a child has provided personal information to us without guardian consent, contact us immediately and we will take necessary measures such as deletion as required by law.
12. Cross-Border Transfers
Media content such as your camera feed is transmitted directly between your own devices and never passes through our servers; there is no cross-border data transfer implemented by us. Third-party platform scenarios (App Store purchases) are handled by Apple under its global service architecture and governed by Apple's privacy policy and commitments. If license validation or version-update services are introduced in the future, we will update this policy before implementation and describe the server locations and compliance arrangements.
13. Data Security
Technical and organizational measures we take include:
- Media streams encrypted with DTLS-SRTP; USB transport with mandatory TLS;
- LAN control channel secured with TLS 1.3, mutual device identity certificates, and public-key pinning; silent downgrade to plaintext is prohibited;
- QR pairing tokens are short-lived and one-time, containing no long-term private keys;
- Untrusted devices cannot obtain the video preview;
- No third-party analytics, advertising, or cloud AI SDKs are introduced, reducing supply-chain risk.
Please also note: the security of your LAN depends on the network environment you use; avoid confirming pairing requests on untrusted public networks.
14. Policy Updates
When we update this policy, we will publish the new version in the App or on the release page and update the version number and effective date. For material changes affecting your rights and obligations, we will provide prominent notice; before adding permissions, data categories, or third-party SDKs, we will update this policy first.
15. Contact Us
- Email: support@cuebuddy.cn (please include “Privacy” in the subject)
- We will respond to your privacy-related requests and complaints within a reasonable period.