NiNi · Privacy Policy

Who we are

NiNi is developed and published on Google Play by the NiNi developer (“we”, “us”). For any privacy question or request, write to hi@iamcodder.com.

Audio, video, the microphone and the camera

• Live video (NiNi Plus): When you open “Video” on a parent phone, the baby unit's camera turns on and streams video directly to that parent phone over your local network, encrypted the same way as audio (DTLS-SRTP). The camera is on only while a parent is watching and turns off when you leave the screen or after 5 minutes. Video is never recorded, never stored and never sent to us or to any server. If you tap the screenshot button in full screen, only that single frame is saved to that parent phone's gallery; it stays on your phone.
• Live audio: The phone in the baby's room (the “baby unit”) captures sound with the microphone and streams it directly to your paired parent phones over your local network. The connection is encrypted (TLS with certificate pinning for control messages, DTLS-SRTP for audio). Audio never leaves your local network and is never sent to us, to Google, or to any other server.
• Sound detection (deciding whether the room is louder than your threshold) runs entirely on the baby unit. Only the result (an alert, its duration and peak level) is sent to your parent phones.
• Talk to baby: When you press and hold “Talk to baby”, the parent phone's microphone is used only while you hold the button, and the sound goes only to your baby unit.
• Event clips (optional, NiNi Plus, off by default): If you turn on event clips on the baby unit, NiNi records a short clip (up to 30 seconds) around each sound event and keeps it only on the baby unit for at most 7 days or 50 MB, whichever comes first. A parent phone can play a clip by fetching it directly from the baby unit over your local network; the parent's temporary copy is deleted when you close it. Clips are never uploaded and are excluded from cloud backup. You can delete clips one by one or all at once.

Data kept only on your phones

The following stays on your devices, is excluded from Android cloud backup and device-to-device transfer, and is never sent to us:

• Pairing data: a device ID and a cryptographic key generated on each phone, and the paired phones' certificate fingerprints, IDs and last local network address.
• Readable device names (e.g. “Pixel 9”) that parent phones send to the baby unit over your local network so it can list connected phones. Over the same local connection the phones also exchange their NiNi version (all phones must run the same version) and whether each parent is currently listening or watching video.
• Your settings (threshold, alert options, schedules, bubble position and so on) and test results.
• Event history (sound events and connection or device issues): 24 hours, or 30 days with NiNi Plus.
• A custom alert sound you choose (copied into the app), and event clips (see above).
• The last release notes and version information downloaded from our server (see section 7).

You can delete all of this at any time with Settings → Privacy → Delete all local data, or by uninstalling the app.

Usage statistics and crash reports (Google Firebase)

We use Firebase Analytics and Firebase Crashlytics, provided by Google LLC, to understand which features are used and to fix crashes.

What is collected

• App events, such as: onboarding completed, pairing started or succeeded, monitoring started, listening or talking used, an alert received, a connection or device issue opened and how long it lasted, why alerts could not reach the phone (for example notification volume off), feature use (white noise, floating bubble, schedules, clips, tests), steps of the NiNi Plus purchase flow (screen opened, plan selected, purchase result) and whether feedback was sent.
• Coarse properties: device role (parent or baby unit), NiNi Plus status (none / own / family), app language.
• Crash reports: stack traces, app version, device model, Android version, free memory and similar technical state, and the last technical log lines before a crash.
• Identifiers and technical data handled by Firebase: a Firebase installation ID, an app-instance ID, IP address (used by Google to derive an approximate country or region and not stored by us), device model, OS version and time zone.

These never include audio, clips, the text of notifications, room or device names, or your contacts or location.

Your choice

Usage statistics and crash reports are on by default. You can turn each off at any time in Settings → Privacy; when crash reports are turned off, unsent reports are deleted. Data is kept according to Firebase's retention settings and then deleted automatically.

NiNi Plus purchases (Google Play and RevenueCat)

• NiNi Plus is sold as a subscription (or, if offered, a one-time purchase) through Google Play. Google processes the payment; we never receive your card or payment details.
• To verify purchases and handle renewals, refunds and restores, we use RevenueCat (RevenueCat, Inc.). The app generates a random, anonymous RevenueCat user ID; RevenueCat receives that ID together with your purchase record from Google Play (product, purchase and expiry dates, renewal and refund status, store transaction identifiers, country/currency and price) and basic device and app information. RevenueCat does not receive your name or email from us.
• Family sharing within NiNi: when a parent buys NiNi Plus, that phone tells your baby unit over your local network that Plus is active and until when; the baby unit passes this on to your other paired parent phones. This stays on your local network.

Feedback you send

If you use Settings → Feedback or “Send feedback” on a test card, the following is stored in Google Firebase Realtime Database (Europe region) so that we can read it:

• Your text, the rating and topic you chose, and where you sent it from (settings or a test).
• App version, app language, device role and NiNi Plus status.
• Only if you allow it (or for test feedback, as stated on the screen): phone manufacturer and model, Android version.
• For test feedback: the test name, its result and technical state codes (for example “connected”, “microphone working”).
• A random anonymous ID created by Firebase Authentication the first time you send feedback, and the time of sending. This is not an account and does not contain your name or email.

Feedback is sent only when you tap Send. It never includes audio, clips, screenshots, room or device names. Please do not include personal information in your text. We keep feedback for as long as it is useful to improve the app and delete it on request (see section 10).

Release notes, update notices and app protection

• The app downloads public release notes and the latest version number from our Firebase database to show “What's new” and “A new version is available”. No personal data is sent for this beyond what any internet request contains (such as IP address).
• The “Update” button uses Google Play's in-app update service.
• To make sure that only the genuine NiNi app can write feedback and read this information, the app uses Firebase App Check with Google Play Integrity, which checks that the app is unmodified and installed from Google Play.

Permissions

NiNi does not use your location, contacts, photos, calendar or call log.

Sharing

We do not sell your data and do not share it with third parties for their own purposes. Data reaches only the service providers named above (Google Firebase, Google Play, RevenueCat), which process it on our behalf under their own terms and security measures: Firebase privacy, Google Privacy Policy, RevenueCat privacy. These providers may process data in countries outside your own, including the United States. We may disclose information if required by law.

Your choices and rights

• Turn off usage statistics or crash reports in Settings → Privacy.
• Delete everything NiNi stores on a phone with Settings → Privacy → Delete all local data, or uninstall the app.
• Manage or cancel a subscription in Google Play (Play Store → Payments & subscriptions).
• To access or delete feedback you sent, or analytics data linked to your device, write to hi@iamcodder.com. For feedback, tell us roughly when you sent it and part of the text so we can find it, as we do not know who you are. We answer within 30 days.

Depending on where you live (for example under the EU GDPR or Turkey's KVKK) you may have rights to access, correct, delete or object to the processing of your data, and to complain to your data protection authority. We process usage statistics and crash reports on the basis of our legitimate interest in keeping the app reliable (you can object by turning them off), purchase data to provide the service you bought, and feedback on the basis of your request.

Children

NiNi is intended for parents and caregivers, not for children. We do not knowingly collect personal data from children. The baby's room audio stays on your local network and is never sent to us. If you believe a child has sent us personal data through feedback, contact us and we will delete it.

Security

Your phones pair only after you confirm a 6-digit number on both screens or scan a QR code, and afterwards trust only each other's pinned certificates. Data sent to Firebase and RevenueCat is encrypted in transit (HTTPS). Our feedback database cannot be read by the app or by others.

Not a medical device

NiNi is a baby monitor, not a medical device. It does not monitor sleep or breathing and does not replace adult supervision.

Changes

We will update this page when the app's data handling changes and change the effective date above. Significant changes will also be mentioned in the app's release notes.

Contact: hi@iamcodder.com