Privacy policy

SpareEye is provided by 巷口數位科技股份有限公司 / GO LOCAL DIGITAL TECHNOLOGY CO., LTD. (we). It is for adults aged 18 or over, not a child-directed service. Local viewing requires no account.

If language versions differ, the Traditional Chinese version prevails. Mandatory legal rights remain unaffected.

SpareEye (SE) uses one device as a camera and another as a viewer. Join the same Wi-Fi network that allows devices to communicate, or share a hotspot from one device and join it from the other. No account is needed. Media goes directly between paired devices, without cloud storage or our own remote media server, avoiding a cloud round trip. Actual delay depends on your devices and network. Ads, payments, support and usage analytics when enabled use separate internet connections.

Camera access provides live video or pairing-QR scans; microphone access supports sound and talkback; local-network access discovers and connects devices. Revoke permissions in system settings; denial disables related features. Releasing a held Talk button stops transmission; tap-to-talk mode needs another tap to stop. However, the microphone stream may remain until you leave viewing.

Devices store pairing keys, app-generated IDs, names, pairing times, previous LAN addresses, language, appearance and camera preferences for reuse. We do not upload pairing records to our server. They remain until removed or app data is cleared. LAN discovery advertises names, IDs and addresses, not video; avoid private details such as personal names or room numbers in device names.

Layer 3, encryption and authentication: media is encrypted throughout transit between devices by WebRTC DTLS-SRTP, so intercepted media is not directly readable. Control commands use pairing-key signatures to check authenticity and changes, with one-time challenges or duplicate checks to reduce replay of old commands. Some control, negotiation and status traffic still uses local HTTP. Signatures do not conceal content; people on the network may see names and connection information. These measures cannot prevent every vulnerability or disconnection and do not mean all network data is encrypted.

There is no built-in recording, media upload or cloud replay. We cannot retrieve footage missed during a disconnection. The OS, screenshots or other software may still capture media; SpareEye cannot prevent that. Pair only with devices you trust.

The free viewer shows Google AdMob banner ads. For ad delivery, measurement, analytics and fraud prevention, Google’s SDK may process IP-derived approximate location, IP addresses, advertising or other device IDs, impressions, clicks, app interactions, crashes and performance diagnostics. Details vary by system, SDK and choices. The app does not pass viewing media to ad APIs. Google’s retention depends on data type and purpose, not the two-month GA setting below.

Google UMP manages ad privacy choices and may process approximate location, form interactions, consent state and performance. The app checks whether ads may be requested. When required by Google, adjust ad privacy options in Settings. iOS separately asks tracking permission through ATT; decline or change it in system settings. Declining tracking does not stop all ad-related processing.

In versions offering Help improve (usage statistics), we use Google Analytics (Firebase) to analyze app opens, camera/viewer roles, pairing outcomes, connection type and quality, purchases and categorized errors. Google estimates country/region from the connection IP address. Our dedicated SE property has disabled city-level and other granular location and device collection in all regions. We do not collect precise location or send media, names, pairing codes or keys to Analytics. Analytics still uses app-instance identifiers, versions, timestamps and automatic events; data can be linked to the same installation and is not completely anonymous. Google signals and ad personalization are disabled for SE Analytics, which is used only for analysis; the app does not provide advertising IDs to Analytics. Advertising SDK processing is described separately. This usage analytics is not enabled in 0.5.8.

In versions offering usage analytics, it defaults on and can be turned off at any time in Settings; we obtain consent first where required by law. Turning it off stops future analytics without affecting viewing or ad choices and does not automatically delete previously sent records. SE GA user and event retention is set to two months, with reset on new activity off. Retention changes may take up to 24 hours; Google deletes expired data monthly, and aggregate reports are outside this limit. Removing ads does not automatically turn analytics off. We will update this policy if retention settings change.

The only planned purchase is Remove ads, a one-time NT$90 payment in Taiwan. All sounds, noise and soothing music are free. Apple App Store or Google Play handles payment; the app uses purchase status and necessary transaction information to verify eligibility without asking for full card details itself. Availability, local prices and transaction fields depend on the released purchase flow and store disclosures.

When you email support@golocalnear.com, we process your email address, message and voluntary attachments to handle your request. We reply within seven days and delete correspondence and attachments 90 days after closure. Missing reply details or necessary context may prevent resolution. Do not send media, pairing codes or unnecessary data about others. Copy diagnostics only writes to the clipboard, not email; it may include model, version, names, LAN addresses and logs. Review and redact before sending. It is separate from GA’s categorized events.

Unpairing: remove the camera on the viewer, or remove the viewer under the camera’s Settings → Devices allowed to view this device. If the other device is offline, a one-sided removal does not confirm removal at both ends. If concerned, stop the camera and remove the pairing on both devices. Version 0.5.8 keeps a pending revocation notice until signed acknowledgement or re-pairing; it does not expire after 30 days. Other pairings and settings remain.

To clear data, unpair at both ends before deleting the app. On Android use Clear storage/data, not just cache. iOS Offload keeps data; use Delete App. Keychain items may remain; the app tries to clear them when it detects a fresh install. Manage backups, restores and copies on other devices separately. Deleting the app does not erase every copy or Google/store records.

Email us to request access, a copy, correction, cessation of collection/processing/use, or deletion of personal data we hold. We follow applicable law and request only necessary identity checks. We cannot remotely erase pairings on your phone; unpairing does not erase third-party data. If analytics records cannot be identified from your details, we will explain limits and available options. Contact us about privacy or children’s data too. Updates show an effective date, with additional notice or consent when needed.

Your paired devices receive media; we handle support data; Google handles ads and usage analytics when enabled; the relevant store handles purchases. Google and Apple may process data outside your country/region under their privacy disclosures; they do not receive your LAN media through these integrations. This documentation site has no ads, analytics trackers, forms, cookies or browser-storage writes. Language selection stays in the URL. Hosting and network services may still process normal connection logs.