Your privacy
Privacy Policy
This policy explains how SimchaCam uses personal information when hosts create private family-event livestreams and when invited viewers watch, replay, or download them.
1. Who we are
SimchaCam is an online service for private livestreaming of family events.
For questions about this policy or how we use personal information, contact privacy@simcha.cam.
Where SimchaCam decides how and why account and service information is used, it acts as the data controller.
2. Information we use
We may use account details such as name, email address, account identifiers and email-verification status; event details such as event name, date, time, link, access settings and status; purchase and entitlement information for paid features; livestream and recording content; and technical information such as IP address, device, browser, connection data, security logs and service errors. We may also receive messages and information you provide when contacting us.
3. How we use information
We use personal information to create and manage accounts; verify email addresses; create and protect events; issue host and viewer access; deliver livestreams; provide recording, replay and download features; process and record purchases or entitlements; respond to support requests; prevent misuse; investigate faults and security incidents; maintain and improve reliability; and comply with legal obligations.
4. Our lawful bases
Depending on the purpose, we normally rely on performance of our contract with an account holder, our legitimate interests in providing a secure and reliable service, compliance with legal obligations, or consent where we specifically ask for it. Our legitimate interests include protecting accounts and private events, preventing fraud or misuse, troubleshooting, and improving service reliability. We assess whether those interests are overridden by the rights of affected people.
5. Hosts, attendees and consent
Hosts decide what event is livestreamed, who receives the private link or password, and whether an available recording feature is used. Hosts must tell attendees that livestreaming or recording will take place and obtain any permission or consent required by law, venue rules or the circumstances. This is particularly important where children, vulnerable people, private religious or family moments, or sensitive information may appear. Viewers must not redistribute access details or recordings without permission.
6. Livestreams and recordings
Live video and audio are transmitted to authorised viewers using LiveKit. If a host has recording enabled, the event may be recorded and stored in Cloudflare R2 so authorised viewers can replay or download it. Recordings are intended to remain available for up to 30 days after they become ready, and may be deleted earlier where required for security, legal or operational reasons. Deletion from active systems may not remove temporary backups immediately.
7. Passwords and private links
Account authentication is provided through Supabase. Event passwords are stored as salted hashes rather than readable passwords. Private links, passwords and signed recording links reduce casual access but cannot prevent an authorised recipient from sharing them, screen-recording content, or making a downloaded copy. Hosts should share access details carefully.
8. Service providers
We use service providers to operate SimchaCam. These include Supabase for account authentication and application data, LiveKit for real-time video streaming and recording services, and Cloudflare R2 for recording storage. Providers may process information on our behalf under their own security and contractual arrangements. We may add or replace providers as the service develops.
9. International transfers
Some service providers used by SimchaCam may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we rely on appropriate transfer mechanisms used by those providers, such as recognised contractual protections or other lawful safeguards.
10. How long we keep information
We keep account and event information for as long as needed to provide the service, meet legal or accounting duties, resolve disputes, and protect the service. Recording files are normally retained for up to 30 days after becoming ready. Security and technical logs are retained only for a reasonable operational period. Exact retention periods may vary where the law, a dispute, security needs or technical backups require longer retention.
11. Your rights
Under UK data-protection law, you may have rights to request access, correction, deletion, restriction or transfer of your personal information, and to object to certain uses. Where processing is based on consent, you may withdraw it. These rights are not absolute and may depend on the circumstances. Contact privacy@simcha.cam to make a request. We may need to verify your identity.
12. Complaints
Please contact us first at privacy@simcha.cam so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or to another relevant data-protection authority where applicable.
13. Security
We use technical and organisational measures intended to protect personal information, including authenticated host access, restricted viewer permissions, hashed event passwords and short-lived recording links. No online service can guarantee complete security, and users must protect their accounts, event links and passwords.
14. Changes and contact
We may update this policy as SimchaCam develops or legal requirements change. The latest version will appear on this page with its update date.
Privacy enquiries: privacy@simcha.cam
Support: support@simcha.cam
Last updated: 22 June 2026