Privacy Policy

CapturePeople ("we," "our," or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

By using the app, you agree to the collection and use of information in accordance with this policy.

We collect several types of information to provide and improve our service:

• Account Information: Email address, username, and authentication credentials
• Streamed Video Content: Video and audio content captured and uploaded through the App. Such content is stored encrypted in your private cloud storage. CapturePeople personnel do not routinely access, monitor, or review your streamed content except when reasonably necessary to operate, maintain, secure, investigate abuse of the Service, or comply with legal obligations.
• Device Information: Device model, operating system, and unique device identifiers (automatically collected by GCP Firebase Authentication and Cloud Messaging for service functionality)
• Usage Data: App interactions, session times, and feature usage
• Camera and Microphone: Access required for streaming video functionality

We use the collected information for the following purposes:

• To provide and maintain the streaming and storage service
• To process and store your streamed file content in Google Cloud Platform(GCP) Firebase Cloud Storage
• To authenticate your account and prevent unauthorized access
• To improve and optimize the App's performance
• To communicate with you about service updates or issues
• To troubleshoot technical problems

Network Transmission: Captured content and data are transmitted to our servers over your device's internet connection. If you enable Cellular Streaming in Account Settings, drone and glasses content may transmit over your mobile data connection rather than a Wi-Fi connection. This uses the same encryption and does not change what information we collect — the only change is the network connection used. Mobile carrier data rates may apply.

No Sale or Sharing of Personal Data

We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising. Transfers of personal information to a successor entity in connection with a merger, acquisition, or sale of assets, as described under "Business Transfers" below, are not sales of personal information and are subject to the protections described in that section.

We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising.

Third-Party Service Providers

We use Firebase (Google Cloud Platform) to provide our cloud infrastructure and backend services. Google acts as our service provider and processes data on our behalf under applicable data processing agreements. We do not authorize Google to use your personal information for its own advertising or marketing purposes.

Learn more: Firebase Privacy & Security

Business Transfers

If CapturePeople is involved in a merger, acquisition, reorganization, sale of assets, corporate restructuring, financing, or bankruptcy, your personal information may be transferred to the successor or acquiring entity as part of that transaction. This includes transfers between entities under common ownership or control, such as the transfer of the CapturePeople application and its associated accounts and data from one entity to another affiliated entity.

In any such transfer, the receiving entity will be required to continue to handle your personal information in accordance with this Privacy Policy as it existed at the time your information was collected, unless and until you are provided notice of any material change and, where required by applicable law, an opportunity to exercise your rights.

We will provide notice of any such transfer through the App, by email to your registered address, or by updating this Privacy Policy, as required by applicable law. A transfer of this kind is not a sale of your personal information, and we do not receive advertising or marketing consideration in connection with it.

Legal Compliance

We may disclose user information when required by law, such as in response to valid court orders, subpoenas, or warrants. We review all requests to ensure they are legally valid and provide only the specific data legally required. When permitted by law, we will notify affected users.

Encryption

Your data is protected with industry-standard encryption:

• Encryption at Rest: All data stored in Google Cloud Platform(GCP) Firebase Cloud Storage and GCP Firestore is encrypted at rest using industry-standard encryption
• Encryption in Transit: All data transmitted between your device and the GCP servers are encrypted using HTTPS/TLS
• Streamed Video Files: Your streamed video files are encrypted while stored in GCP servers
• Database Records: User information and metadata are encrypted in GCP Firebase Firestore; authentication credentials are separately encrypted by Firebase Authentication

Storage Infrastructure

Your data is stored securely using Firebase services (part of Google Cloud Platform):

• Video Files: Your streamed video and audio files are stored in Firebase Cloud Storage.
• Metadata: Information about your streamed files (such as filenames, upload dates, file sizes, expiration dates, storage usage, and account-related information) is stored in Firebase Firestore.
• Authentication: Firebase Authentication with encrypted credential storage
• Data Centers: Stored in secure Google Cloud Platform data centers with physical security

Authentication Security

• Password Storage: Authentication credentials are securely managed and protected by Firebase Authentication using industry-standard security practice
• Master Code: Your Master Code is stored as a bcrypt hash (a slow, salted, one-way hash that cannot be reversed)
• Session Management: Secure session tokens with automatic expiration
• Device Authentication: Firebase Authentication manages secure login across devices

Access Controls

• Firebase Security Rules: Database access restricted to authenticated users only
• Storage Rules: Streamed files only accessible by the account owner
• API Security: Cloud Functions require authentication tokens
• Rate Limiting: Protection against brute force attacks

Security Best Practices

We follow Google Cloud Platform's security standards:

• Regular security updates and patches
• Security protections and infrastructure provided by Google Cloud Platform and Firebase.
• DDoS protection via Google Cloud infrastructure
• Compliance with industry security standards (SOC 2, ISO 27001 via GCP)

What You Should Do

• Protect Your Master Code: Store it securely - this is your ultimate recovery method
• Use Strong Password: Choose a unique, strong password for your account
• Keep Software Updated: Update the app when new versions are released
• Secure Your Device: Use device lock screen and keep your phone secure

Security Incident Response

In the event of a security breach:

• We will provide notice of material security incidents in accordance with applicable law
• Detailed information about the breach will be provided
• Steps to protect your account will be outlined
• Contact: security@capturepeople.com

While we implement reasonable security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

View Your Data

• Cloud Streams: View information about your streamed file content (filename, streamed date, size, expiration date) in the app menu under "Cloud Streams"
• Account Settings: View your email and account information in Account Settings
• Storage Usage: Check remaining cloud storage amount in "My Cloud" dialog

Download Your Streamed Files

• Automatic Download: When streamed file processing completes, receive notification with download link (first download)
• Manual Download: Use Download button in Cloud Streams (second download)
• Extra Downloads: Purchase additional downloads (optional) if you've used both free downloads
• Important: Download important streamed/stored file content before expiration

Streamed File Storage & Expiration

• Automatic Expiration: Stored streamed video files automatically expire 90 days after creation
• Extend Storage Time: Purchase 90-day storage time extensions to keep streamed files stored longer
• Verified Deletion: Files can be deleted on request using Master Code verification, completed within 30 days, with email confirmation and a cancellation option (security feature to protect against unauthorized deletion)
• Expired Streamed Files: Deleted automatically 90 days after creation (or after extended expiration date)

Account Management

• Update Information: Change account details in Account Settings
• Change Email: Contact privacy@capturepeople.com (requires verification)
• Delete Account: Account Settings → Delete Account
• Account Deletion Process:
  • Requires Master Code verification
  • Account locked immediately
  • 30-day recovery time-frame (can cancel deletion with Master Code)
  • Permanent deletion after 30 days
  • All streamed files remain in Cloud storage until their individual 90-day expiration dates

Request Your Data (GDPR/CCPA)

You have the right to request a copy of all your personal data. Multiple methods are available depending on your situation:

Method 1: In-App Export (Fastest - Now Available)

1. Log into the app with your credentials
2. Go to Account Settings → Export My Data
3. Enter your Master Code to verify your identity
4. Your data is immediately displayed and can be copied to clipboard
5. Timeline: Immediate (1-3 seconds)

Method 2: Lost Email Access (You Still Have Your Master Code)

If you've lost access to your registered email but still have your Master Code, you can still export your data directly in the app:

1. Install the app on any device and open the login screen
2. Enter your registered email address and your Master Code in place of your password (the recovery login)
3. Once logged in, go to Account Settings → Export My Data
4. Your data is displayed and can be copied to clipboard
5. Timeline: Immediate

This avoids ever transmitting your Master Code by email. If you cannot complete the recovery login for any reason, use Method 3 below.

Method 3: Lost Access Recovery (Lost Master Code + App Access)

If you cannot log into the app and have lost your Master Code:

1. Email privacy@capturepeople.com
2. Subject: "Data Export Request - Lost Access"
3. Send your request from, or be ready to confirm via, your app account registered email address
4. Include at least TWO of the following so we can verify ownership:
   • Approximate signup date
   • Approximate amount of storage purchased
   • A recent file name
   • Approximate amount or date of your most recent purchase
5. We verify your identity using email control plus the details above. We may request additional reasonable proof and evaluate requests in good faith.
6. Once verified, we provide a copy of your available content metadata and process any deletion/erasure request. For security, this does not restore login access to the existing account.
7. Timeline: Within 30 days (GDPR) or 45 days (CCPA), subject to a short security hold.

Why we verify identity: Identity verification helps protect your privacy by reducing the risk of disclosing your personal information to someone falsely claiming to be you.

Important: We never accept Master Codes by email. Your Master Code is your private credential and should not be shared in any unsecured communication channel.

What You'll Receive:

• Account information (email, user ID, creation date)
• Video metadata (filenames, upload dates, sizes, expiration dates)
• Purchase history (storage purchases, dates, amounts)
• Storage usage information

Important: Data exports contain metadata only (information about your videos). The actual video files (.mp4) are not included in standard data exports. To download your video files, use the Download button in Cloud Streams before videos expire.

Security Measures:

Why Master Code is required (Methods 1 and 2): Master Code verification ensures that even if someone gains unauthorized access to your email or password, they cannot export your personal data without your Master Code. Verification always happens in-app where the code is checked against an encrypted hash — your Master Code is never transmitted by email.

Master Code information: Master Codes are encrypted and cannot be recovered. If you've lost your Master Code, use Method 3 with identity verification. As stated during signup, your Master Code is displayed only once and tech support cannot retrieve it for you.

App Permissions

• Camera: Required for streaming - revoke in Android Settings → Apps → CapturePeople → Permissions
• Microphone: Required for audio recording
• Storage: Required for downloads
• Notifications: Optional - for download alerts and expiration warnings

We retain your information as follows:

• Streamed File Content: Video files automatically expire and are deleted 90 days after creation unless additional storage time is purchased
• Account Information: Retained while your account remains active
• Account Deletion: Upon account deletion, a 30-day retention period begins. All data permanently deleted after 30-day retention period
• Verified File Deletion Requests: Requested file deletions are completed within 30 days and may be canceled during that period
• Usage Logs: Retained for troubleshooting and security purposes, generally 30–90 days

How deletion works:

To protect your content from unauthorized, fraudulent, or coerced deletion, files cannot be removed instantly with a single tap. Instead, deletion is handled through a verified, reversible process:

• Master Code required: Deleting a file or all your content requires entering your Master Code, confirming you are the genuine account owner
• 30-day completion: Verified deletion requests are completed within 30 days; the file remains recoverable until then
• Email confirmation: We email your account address confirming the request and the date it becomes permanent
• Cancellation: You can cancel the request before that date using your Master Code — protecting against accidental or coerced deletions

This ensures that an unauthorized person cannot instantly destroy your content, while still honoring your right to have your data deleted.

Automatic expiration: Files you do not delete will expire automatically 90 days after creation (or after any extended period you purchase).

Account deletion: Deleting your entire account requires Master Code verification and includes a 30-day recovery time-frame before permanent deletion.

The app uses the following third-party services:

• Firebase (Google): For authentication, storage, and database services
• Google Cloud Platform: For streamed file processing through Google Cloud Functions

These services have their own privacy policies governing their use of your information. We encourage you to review:

• Firebase Privacy Policy: https://firebase.google.com/support/privacy
• Google Privacy Policy: https://policies.google.com/privacy

The app is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.

Your information may be transferred to and stored on servers located outside your country. GCP Firebase and Google Cloud services operate globally with data centers in multiple regions.

By using the app, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date
• Significant changes will be communicated through the App
• Continued use after changes constitutes acceptance

Last Updated: August 20 2026

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@capturepeople.com

We will respond to your inquiry within a reasonable timeframe.