Privacy Policy

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) for the Dennest app and this website is:

In this policy, “we” and “us” mean Birol Aksu, the developer of Dennest.

2. Live video, sound and in-app messages

While the baby phone streams, it encrypts the video and sound with a key that only the phones in your nursery hold. The same applies to the small messages the phones exchange during a stream: the sound level, the baby phone's battery level and charging state, the night mode setting, and sound alerts.

The encrypted stream is relayed between your phones by LiveKit Cloud, a real-time video service of LiveKit, Inc. (USA). LiveKit cannot decrypt it, and neither can we. Nothing is recorded or stored, by us, by LiveKit or on your phones.

To connect your phones, LiveKit necessarily processes connection data: the IP addresses of the phones, a random device identifier, the device name you chose in Dennest, a room name made from a random nursery identifier, and when each phone connected.

Purpose and legal basis: providing the app you bought and asked to use (Art. 6(1)(b) GDPR).

3. What our server stores

Your phones find each other through the Dennest server, which runs on Cloudflare Workers with a Cloudflare D1 database (Cloudflare, Inc., USA). There are no user accounts. The server stores:

• Your nursery: a random identifier, the 8-character nursery code, the nursery name you chose, a one-way hash of a key derived from your passphrase (the passphrase itself never leaves your phone), the current key version, when the nursery was created and when its passphrase was last changed.
• Each phone in the nursery: a random device identifier, the device name you entered, the device model (for example “iPhone17,1”), two public keys created on the phone, cryptographic proofs that the phone was admitted with the passphrase or a QR code, how it joined, when it joined, when it was last online, and when it was removed, if it was.
• Key envelopes: for each phone, a copy of the nursery's encryption key that only that phone can open. We cannot read them.
• The camera role: which phone is currently the baby camera, and since when.
• QR pairing codes: only a hash of each one-time code, which phone created it, when it expires and when it was used.
• Sign-in challenges: random one-time values that let a phone prove it is a member, valid for 60 seconds.
• Security log of passphrase checks: for creating a nursery, joining, taking over the camera role and changing the passphrase: the kind of attempt, whether it succeeded, the time, the nursery if known, and a keyed hash of the IP address. We never store the IP address itself. We use this to stop password guessing and to show the baby phone how many failed join attempts there were.

Cloudflare needs your IP address to deliver each request to our server. The server does not store it; it only computes the keyed hash for the security log. If something goes wrong, the server writes a short technical error log, which can contain device or nursery identifiers but not IP addresses.

Purpose and legal basis: connecting your phones and distributing the encryption key, which is the service you asked for (Art. 6(1)(b) GDPR). The security log serves our legitimate interest in protecting nurseries from password guessing (Art. 6(1)(f) GDPR).

4. On your phones

• Dennest keeps its keys and nursery membership in the iPhone keychain and Secure Enclave. They are bound to the phone and never synced to other devices. Settings such as alert thresholds stay in the app.
• The baby phone uses the camera and microphone only while it streams. A parent phone uses the camera only to scan the pairing QR code.
• Alerts are created on your parent phone itself as local notifications. Dennest does not use Apple's push notification service, and we hold no push tokens.
• Dennest contains no analytics, crash reporting, advertising or tracking code. The only third-party code is the LiveKit software that carries the encrypted stream.

5. Buying Dennest

Dennest is sold through Apple's App Store. Apple handles the purchase as an independent controller; we do not receive your name, Apple Account or payment details. If you agreed to share analytics with app developers in your iPhone settings, Apple may give us crash reports and anonymous usage statistics. You can change this in Settings, Privacy & Security, Analytics & Improvements.

6. This website

This website is hosted by Vercel Inc. (USA). When you visit it, Vercel processes the access data needed to deliver the pages and protect them from attacks: your IP address, the date and time, the page requested, and the browser information your browser sends. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

The website sets no cookies, stores nothing in your browser, runs no scripts, and loads nothing from other companies: the fonts and images come from this domain. That is why there is no cookie banner.

If you email us, we use your message and address only to answer you (Art. 6(1)(b) or (f) GDPR).

7. Service providers and transfers outside the EU

We use these providers, who process data on our behalf and only to provide their service:

• Cloudflare, Inc., USA: the Dennest server and database.
• LiveKit, Inc., USA: relaying the encrypted stream.
• Vercel Inc., USA: hosting this website.

Transfers to the USA rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). We do not sell data, share it for advertising or combine it with other data.

8. How long we keep data

• Video, sound and in-app messages: never stored.
• Nursery and phone records: for as long as the nursery exists. When a phone leaves or is removed, its key envelope is deleted at once and its record is marked as removed but kept with the nursery. We delete a nursery and all of its records when you ask us to.
• Security log of passphrase checks: 30 days.
• Sign-in challenges and QR pairing codes: deleted by a daily clean-up once they expire.
• Server error logs: up to 7 days, at Cloudflare.
• Website access data: a short time, as Vercel needs it for operation and security.
• Emails: until your question is resolved, unless the law requires us to keep them longer.

9. Your rights

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15),
• have it corrected (Art. 16) or erased (Art. 17),
• restrict its processing (Art. 18),
• receive it in a portable format (Art. 20),
• object to processing based on our legitimate interests (Art. 21).

To use any of these rights, write to contact@bind.games. Include your nursery code, shown on the baby phone, so we can find your records. You can also act directly in the app: rename or remove phones in Known devices, and use Leave nursery on this device to sign a phone out and remove the keys from it.

You can also complain to a data protection authority, for example the one where you live or ours: the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

10. Children

Dennest is used by parents and is not directed at children. The video and sound of the nursery may show a child, but they are end-to-end encrypted and we cannot access them.

11. Changes

We update this policy when Dennest changes. The date at the top shows the latest version. Questions about it are welcome at contact@bind.games. See also the terms and the imprint.