Effective November 6, 2026.
Who is responsible
The controller is Jan Drábek, Prague, Czech Republic, e-mail [email protected] or [email protected].
The Mamoon app
- Video and sound go only between your own devices, over your own network. We have no server that receives them. On your home Wi-Fi the devices talk to each other directly; away from home they talk only through your own Tailscale network, which encrypts the connection. Everything between the phone by the crib and the parent phones travels encrypted, at home too, and the parent phone checks it is the same crib phone it paired with.
- The app has no accounts and contains no advertising or tracking tools. It uses no advertising ID and does not track you across other apps or websites. Cry recognition runs on your phone, in memory; no sound or picture is recorded or stored by us. The only exception is a voice message you choose to send us (below).
- Usage statistics. When statistics are enabled, reports can also say that a household phone was paired, an hour of monitoring was reached, an offer was viewed, or a purchase or trial was started or a purchase completed. To learn where setup goes wrong, whether monitoring keeps working and what people use, the app sends short reports to mamoon.app. Only the versions from the app stores do this. On iPhone it is off until you allow it; on Android it is on when you install the app. You can switch it off at any time in Settings → Privacy, where “What Mamoon sends” shows the exact reports waiting to be sent. Switched off, it sends no reports at all. Since version 3.73, every report carries two numbers, also shown there: an install number, 16 random characters the app makes itself (not taken from your phone, your store account or an advertising ID), replaced every 90 days, deleted when you turn the switch off, and new if you reinstall; and a household number, which every phone of one household works out the same way from the random ids Mamoon gives its phones by the crib, also new every 90 days (a parent phone that only watches a camera has none). They let us count installs and households and see whether monitoring keeps working, nothing else. Besides these numbers, a report contains only: its kind; the platform, the app version, the major version of the operating system and the app language; whether this phone is a parent phone or the phone by the crib; which setup step you reached, and whether you reopened the setup from Settings; with the first of these reports only, which link on mamoon.app led to the install, if the app store passes that on (the page’s short tag; nothing else from it is kept); whether watching has worked for the first time (once per phone); whether you chose a phone, a camera, a go2rtc server or the demo, and the camera brand from a list (never its address or name); which kind of connection fault happened (for example camera unreachable, wrong password), whether in the setup test or while watching, and whether at home or away; when the phone by the crib does not answer, which of five reasons the app found (this phone has no Wi-Fi, the phones are on different networks, Mamoon is not sending there, no answer at all, the encrypted connection could not start); on day 1, 2, 3, 7, 14, 30 and 90 after installation, a few yes/no or bucketed figures: whether setup is finished, nights watched in the last 7 days (0, 1–2, 3–5, 6–7), picture or sound view, alert level, whether you used remote viewing and picture in picture, whether the camera power switch is set up, which plan you have (none, trial, monthly, lifetime, or one that ended) and whether you unlocked the share discount; on the phone by the crib, how many parent phones watched at once (0, 1, 2 or more); and, from a parent phone, one report for each night you watched for at least an hour between 18:00 and 10:00: how long (1–3, 3–6, 6–9 or more than 9 hours), how many alerts (0, 1–2, 3–5, 6 or more), how many times the connection was lost (0, 1, 2–3, 4 or more), and what you watched (a phone, a camera with its brand from a list, or go2rtc). We never send IP addresses, camera addresses, passwords, Wi-Fi names, pairing codes, names of phones or rooms, pictures, sounds or alert times. A report carries no time; the server writes only the day. It stores no IP address and no country or other location. Reports are kept for two years, then deleted. Because of the random numbers, the reports count as pseudonymous personal data under the GDPR, even though nothing in them says who you are. To have the reports sent under your numbers deleted, e-mail the two numbers from “What Mamoon sends” to [email protected]. Legal basis: our legitimate interest in improving the app and keeping monitoring reliable (GDPR Article 6(1)(f)); the switch is your objection, and it stops the reports at once.
- Everything the app needs stays on your phone: your camera's address and password (on iPhone, in the Keychain), the pairing code and name of the phone by the crib, and your settings. We never see them. To delete them, uninstall Mamoon or clear its data in your phone's settings. Apart from the statistics above and any feedback you choose to send, nothing of yours is held on our side.
- Permissions: the camera, to scan the pairing code and, in the "By the crib" role, to send the picture; the microphone, to send the sound in that role and, only while you hold the record button, for a voice message to the maker; notifications, for the alerts. The app uses no location, contacts or files.
- Children: Mamoon is made for parents and is not directed at children. The statistics contain nothing about your child.
- You pay the one-time purchase or the subscription through the app store you installed Mamoon from (on iPhone and iPad, the App Store). The store processes the payment under its own privacy policy; we receive from it only the order details every developer sees (order number, country, amount, whether a subscription is active), never your name or card. You cancel the subscription in the store, not with us.
Feedback you send us
Now and then a parent phone asks whether Mamoon works for you, with a thumbs up and a thumbs down, and Settings → Write to the maker opens a form. Only what you choose to send reaches us: your vote, the text you write and, if you would like a reply, your e-mail address. Tapping a thumb sends that vote, even if you then close the form. Each message also carries the platform, the app and system version, the app language, whether the phone is a parent phone or by the crib, and what it watches (a phone, a camera, go2rtc or the demo). A message is not linked to the install or household number, and the server stores no IP address, only the day.
Instead of the thumbs, a parent phone may once show a short video from Mamoon’s maker. The video is not inside the app: it plays only when you open it, and then the app loads it from mamoon.app (in the app’s language), the way a web page loads a file. Cloudflare, which serves our website (see “Who helps us”), handles that request like any other; the app sends nothing else with it, and we keep no record of who watched it and store no IP address. Under the video you can write or record a message.
- Voice messages: if you choose to record one, the app uses the microphone only while you hold the button, for 60 seconds at most. Before sending, you can listen to it and delete it; nothing leaves the phone until you send the message. The recording (AAC audio) is sent with your message and stored with it. A voice is personal data: it can tell who you are, especially if you also leave your e-mail, in which case the message and its recording are linked to that e-mail. Like the rest of the message, it is not linked to the install or household number.
- Legal basis: your consent, given by sending the message (GDPR Article 6(1)(a)). We use your e-mail only to answer you. This includes a voice message: by recording and sending it, you agree that we store it and listen to it.
- How long: two years, then deleted, together with any recording.
- Deleting: write to [email protected] and tell us which message (the e-mail you left, or roughly when and what you wrote or said); we delete it, with its recording.
The mamoon.app website
The website sets no cookies and sends no identifier that could follow you. The tools keep what you type in your own browser (localStorage), so you don't have to type it again next time; it never leaves your device unless you share a link to your result. If you hide a Mamoon tip in a tool, that choice is kept the same way, and the tip comes back after 30 days. Fonts and scripts are served from mamoon.app itself; no third-party services are loaded.
We count visits ourselves. We record which pages and parts of the site you saw, how far you read, what you tapped, how long the page was open, where you came from (only the site name and campaign tags in the link), your country, device type, system and browser. We don't store your IP address. A visitor is recognized only within one day through a fingerprint that changes daily, with the old one deleted, so you can't be followed from day to day. Records are deleted after two years. If your browser sends a Global Privacy Control signal, we record nothing. The store buttons on our pages lead through mamoon.app/go/, which counts the tap before passing you to the store: the page and the place of the button, the store, the browser family, our page or the site you came from, and the day. No IP address and no identifier; with Global Privacy Control, the tap is not counted either. The store receives the page’s tag too, so we can see which pages lead to installs.
The launch e-mail
When you sign up, we store your e-mail, which phone you have, what will be by the crib (if you answer), the page you signed up on, campaign tags from the link and a referral code. We use it only to send you one e-mail when Mamoon launches and an invitation to test it. We won't send you anything else, and we never sell or share your data.
- Legal basis: your consent (GDPR Article 6(1)(a)). You can withdraw it any time.
- How long: until you unsubscribe, at most 2 years.
- Unsubscribing: with the link in every e-mail, the form below, or by writing to [email protected]. Your address is deleted completely.
Who helps us
The website, its databases, the statistics and feedback from the app (voice messages included), the maker’s video and the [email protected] address run on Cloudflare, Inc. The databases are stored in Western Europe. Cloudflare is a US company and data may pass through its servers outside the EU under the EU–US Data Privacy Framework and standard contractual clauses. When we send the launch e-mail, we'll name the service we send it with here.
Your rights
You have the right to access, correct and erase your data, to restrict processing, to object to processing based on our legitimate interest, to data portability, and to withdraw consent. Write to [email protected]. You can complain to the Czech Office for Personal Data Protection (uoou.gov.cz) or your local authority.