Effective date: October 25, 2026 (version 2.0)
Santiago Innovations LLC ("we", "us") makes FamilyView, the family video calling, photo sharing and baby monitor app for Samsung Smart TVs and Android phones. This policy explains, in plain words, what FamilyView collects, why, who can see it, how long we keep it, and what you can do about it.
The short version: we do not sell your information, we do not show ads, and we never record your calls or baby monitor video. What you share (photos, video messages, recordings) is seen only by the family you share it with.
What we collect
Your account
- Account details: first and last name, email address, and your password (stored only as a one-way hash we cannot read). A phone number only if you add one.
- Profile picture, if you add one, and nicknames used inside your family.
- Your families: which families you belong to, your role, and invitations you send (the invited person's email).
What you share with your family
- Photos (with any caption you write), video messages, and Luna Tunes songs and DJ voice recordings you add for your family's baby monitor.
- Where a post was shared from, only if you allow location: we keep the town name (for example "Clarkston, WA") and a location rounded to about 1 km. We never keep your exact location, and we never track location in the background.
- These files are encrypted on our servers (AES-256) and are shown only to members of the family you shared them with.
Calls and the baby monitor
- Calls and baby monitor video and sound are never recorded or stored. They travel encrypted between your devices, directly when possible, otherwise through our own relay server, which passes the encrypted stream along without being able to see or hear it.
- Call records: who called whom, when, how long, how the call ended, and connection quality numbers (such as delay and frame rate), so calls show in your history and we can fix call problems.
- Baby monitor sessions: when a monitor starts and stops and which family devices watched it. Sound alerts are worked out on the monitor phone itself.
- Privacy mode: when a parent pauses the monitor, the monitor phone itself turns its camera and microphone off for viewers until it ends.
- Dedicated monitor devices: a spare phone set up as a baby monitor is connected with a code from a parent's phone. Nobody signs in on it, and its key works only for streaming the monitor. It cannot open your account, messages or photos. It reports its battery level so we can warn you when it runs low or is unplugged.
- Crib detection (telling you when the baby leaves the crib) is not active today. If we offer it, it will be off unless you turn it on, and the picture will be analyzed on the monitor phone itself, never uploaded for it.
Your devices
- The ID the app creates for each phone or TV, the Samsung TV's device ID, the device's name, type and model, operating system and app version, whether it is online, and its battery level for monitor devices.
- A push notification token (from Google Firebase Cloud Messaging) so your phone can ring for calls and get messages.
- Android does not give apps your phone's hardware (MAC) address, and we do not collect it.
Activity, security and diagnostics
- Account activity: sign-ups, sign-ins and sign-outs, devices added or removed, family changes, and calls, each with the date, time and the IP address it came from. This protects your account and lets us investigate misuse.
- Problem reports: when the app has an error or crashes, it sends what went wrong and the app's recent log lines (passwords, sign-in keys and message content are never included). When a screen takes too long, it reports which screen and what the connection was doing (Wi-Fi or mobile data, signal strength, how quickly our server answered).
- Support requests you send in the app, and our replies.
How we use it
- To run FamilyView: sign you in, connect calls and the baby monitor, deliver photos, messages and notifications, and pair your TVs and monitors.
- To keep it working: find and fix errors, dropped calls and slow connections.
- To keep it safe: protect accounts, prevent abuse, and meet our legal obligations.
- To answer you when you contact support.
We do not use your photos, messages, calls or monitor video for advertising, and we do not sell or rent your information to anyone.
Who can see it
- Your family: members of a family you belong to see your name, profile picture, whether you are online, and what you share with that family. Only family members can call you, watch a family baby monitor, or see its photos.
- Our service providers, only to run FamilyView: DigitalOcean (our servers, in the United States), Cloudflare (network protection and delivery), Google Firebase Cloud Messaging (push notifications), Google's public STUN servers (help two devices find each other; they see network addresses only), Resend (sending account emails), and Samsung (the TV platform, under Samsung's own privacy policy).
- Our website (familyviewtv.com, not the apps) uses Google Analytics to count visits. It is skipped when your browser sends Do Not Track or Global Privacy Control.
- The law: we may disclose information when required by law, subpoena or court order, or to protect the safety of a person or the security of FamilyView.
- A business transfer: if FamilyView is sold or merged, this information may move to the new owner under this policy.
How long we keep it
- Your account, photos, messages and recordings: until you delete them or delete your account. A family's content is deleted when the family is deleted.
- Call records, account activity and support requests: kept as FamilyView's record of what happened on the service.
- Problem reports (errors, crashes, slow screens, call quality readings): 14 days. Raw records of individual server requests: 90 days.
Deleting your account
Open FamilyView on your phone, go to Settings > Delete account and confirm with your password. You can also follow the steps at familyviewtv.com/delete-account, or email [email protected] from the address on your account.
- Deleted right away: your name, email, phone number, password, profile picture, the photos, video messages and recordings you shared, your sign-ins and push tokens, and invitations you sent. You leave every family, and your devices are disconnected from you.
- Kept without your personal details: call records, activity records and support requests stay as FamilyView's record of what happened, attached to an anonymous "Deleted user" instead of you.
- Kept for legal reasons: the email and phone number the account was registered with, the name on it, the dates it was created and last used, the devices it used, and the IP addresses of its sign-ups and sign-ins. We keep these only so we can meet legal obligations and answer lawful requests such as a subpoena; they are kept apart from the service and only the owner of FamilyView can see them.
Children
FamilyView accounts are for adults. We do not knowingly let children under 13 create accounts or collect personal information directly from them, in line with the U.S. Children's Online Privacy Protection Act (COPPA). Children and babies do appear in calls, photos, video messages and the baby monitor that their parents or family share; the parents and family members who share them decide what is shared, and can delete it at any time. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.
Your choices and rights
- See and correct: your name and picture in Settings; email us for a copy of the information we hold about you.
- Delete: anything you shared, at any time, or your whole account (see above).
- Permissions: camera, microphone, location and notifications can be turned off in your device settings; some features will not work without them.
- California and other U.S. states: you may ask what we collect, ask us to delete or correct it, and you will not be treated differently for asking. We do not sell personal information or share it for cross-context advertising.
We answer requests within 30 days.
Security
- Everything between your devices and our servers is encrypted in transit (TLS). Calls and baby monitor streams are encrypted between the devices.
- Shared photos, messages and recordings are encrypted on our servers. Passwords are stored only as one-way hashes.
- On your phone, your sign-in is kept in storage protected by Android's hardware key store.
Changes to this policy
When we change this policy we update the date at the top, and for important changes we tell you in the app before they take effect.
Contact us