Privacy Policy

Who is responsible

HeftyKoo develops and operates MotionMama. This policy covers MotionMama on iPhone, iPad, Mac, and Apple Watch, the support we provide, and these policy pages. Contact heftykoo@gmail.com for privacy questions or requests. Effective and last updated: October 28, 2026.

Video and movement stay nearby

Camera frames and movement detection are processed on the baby-station device. Live images and movement events are encrypted in transit between trusted nearby devices. They do not pass through iCloud or a MotionMama server. The app has no audio capture, recording, playback, advertising, analytics SDK, or MotionMama account.

The latest image and up to 100 activity entries are held in app memory and disappear when that app process exits. The app does not save a video library. Anyone with access to an unlocked receiving device may be able to view its current session.

Private iCloud device identities

To recognize devices using the same Apple Account, MotionMama stores device names, public identity keys, protocol versions, and enabled status in your private CloudKit database. Apple also maintains record metadata such as creation and modification dates. These records are not public and are not accessible to HeftyKoo through the developer dashboard.

A hash derived from an opaque CloudKit account identifier scopes local trust data and the remembered baby station. Your private signing key stays in the device-only Keychain. The first identity sync requires internet. A validated local identity cache can be used for up to seven days without a successful refresh; revocation cannot take effect immediately while offline. Video and activity events are never included in this iCloud identity directory.

Local storage and Apple Watch

Language, alert, camera, and connection preferences are stored locally. Trial start and checkpoint dates, identity keys, and the trust cache use local Keychain storage. Trial dates do not sync to our servers or iCloud. Keychain items can remain after uninstalling the app; reinstalling is not a guaranteed reset.

Apple Watch receives session credentials and fallback images through the paired iPhone using Apple WatchConnectivity, and may request encrypted images directly over the local network while active. Apple may retain paired-device application context. Ending the baby-camera session invalidates its session credentials. Local network traffic metadata may remain visible even though image and event contents are encrypted.

Permissions and purchases

Camera access provides live images and on-device movement detection. Local Network access connects nearby devices. Notifications provide movement and connection alerts. You can change these permissions in system Settings. The app does not request microphone, location, contacts, or photo-library access.

Purchases and restores use Apple StoreKit. The app reads Apple-verified product and entitlement information on the device to unlock access. We do not run a receipt server or receive your card details. Apple handles payment, transaction records, subscription management, and its own data practices.

Support correspondence and website delivery

If you email us, we receive your email address and whatever information you choose to include. We use this to respond, troubleshoot, and handle privacy requests. Please do not send baby images, camera streams, Apple passwords, payment details, or unnecessary information about children. We retain correspondence only as needed to handle the request and meet applicable obligations; you can request its deletion.

These public pages have no advertising or analytics scripts, contact forms, or application accounts and do not set tracking cookies. Hosting, DNS, network, and email providers may process technical request information, such as IP address, timestamp, requested URL, and browser information, to deliver and secure their services. These website requests never contain MotionMama camera images unless you independently send such material.

Your choices and deletion

You can stop a camera session, revoke system permissions, and stop using the app at any time. In-memory images and activity disappear when the process exits. Local preferences are removed with app data where the operating system supports it; Keychain records may persist.

Private CloudKit records remain in your Apple-managed account until removed through available Apple iCloud storage controls. Turning off iCloud or uninstalling does not necessarily delete them. We cannot inspect or delete your private CloudKit database on your behalf. Contact us for guidance or to request deletion of support correspondence. Depending on applicable law, you may also request access, correction, restriction, or raise a complaint with your local data protection authority.

Children, security, and updates

MotionMama is intended for adult caregivers. We do not offer child accounts, intentionally collect children’s personal information, sell personal information, or use personal information for targeted advertising. Processing a child’s live image locally remains under the caregiver’s control.

We use Apple platform security and encrypted nearby sessions, but no system is guaranteed secure. Keep devices and Apple Accounts protected and use current app versions. This app is supplementary and is not a medical device or a substitute for adult supervision. Changes to this policy will appear here with a new effective date; material changes will be identified in the updated policy.