Your privacy
Privacy Policy
This policy explains how DH Ideas Ltd, operating SimchaCam, uses personal information when people create accounts, host private family-event livestreams, make purchases, and watch, replay or download events.
1. Who we are
SimchaCam is operated by DH IDEAS LTD and provides private livestreaming for family events.
For questions about this policy or how we use personal information, contact privacy@simcha.cam.
Where SimchaCam decides how and why account and service information is used, it acts as the data controller.
2. Information we use
We may use account details such as name, email address, account and authentication-provider identifiers, and verification state; event details such as event name, date, time, link, password-protection setting, owner or nominated streamer and status; purchase and entitlement information; livestream and recording content; feedback; and technical information such as IP address, device, browser or app information, connection and approximate viewer-session data, security logs and service errors. Camera and microphone access is used only for user-requested broadcasting functionality.
3. How we use information
We use personal information to create and manage accounts; verify email addresses; create and protect events; issue host and viewer access; deliver livestreams; provide recording, replay and download features; process and record purchases or entitlements; respond to support requests; prevent misuse; investigate faults and security incidents; maintain and improve reliability; and comply with legal obligations.
4. Our lawful bases
Depending on the purpose, we normally rely on performance of our contract with an account holder, our legitimate interests in providing a secure and reliable service, compliance with legal obligations, or consent where we specifically ask for it. Our legitimate interests include protecting accounts and private events, preventing fraud or misuse, troubleshooting, and improving service reliability. We assess whether those interests are overridden by the rights of affected people.
5. Hosts, attendees and consent
Hosts decide what event is livestreamed, who receives the private link or password, and whether an available recording feature is used. Hosts must tell attendees that livestreaming or recording will take place and obtain any permission or consent required by law, venue rules or the circumstances. This is particularly important where children, vulnerable people, private religious or family moments, or sensitive information may appear. Viewers must not redistribute access details or recordings without permission.
6. Livestreams and recordings
Current native broadcasts and replay processing use Mux. Some legacy or supported web recording flows use LiveKit and Cloudflare R2. Camera and microphone media is transmitted over encrypted provider connections and is recorded only when the event's recording feature is enabled. Premium replay access is generally offered for 30 days, but provider processing and legacy storage behavior can differ. Hosts and authorised viewers may access replay or download features according to the event entitlement. Account deletion removes SimchaCam-controlled recording media, subject to provider processing and temporary backup retention.
7. Passwords and private links
Account authentication is provided through Supabase. Event passwords are stored as salted hashes rather than readable passwords. Private links, passwords and signed recording links reduce casual access but cannot prevent an authorised recipient from sharing them, screen-recording content, or making a downloaded copy. Hosts should share access details carefully.
8. Service providers
We use Supabase for authentication and application data; Mux for current livestreaming, replay and related media processing; LiveKit and Cloudflare R2 for applicable legacy or supported streaming and recording flows; Stripe for website payments; Google Play and Apple for platform purchases; Vercel for website hosting and aggregated, cookie-free website analytics; Google Analytics for consented website analytics; and Resend for transactional email. Google and Apple may also provide account authentication where selected. Each provider receives only the categories needed for its purpose and may process information under its own contractual and security arrangements.
9. Website analytics and your choice
Vercel Web Analytics gives us aggregated information about visits without using analytics cookies. We load Google Analytics only after you choose Accept analytics. When accepted, it helps us understand public website traffic, acquisition sources and website usage. SimchaCam stores a limited first and latest meaningful acquisition record, containing a timestamp, public landing-page path, referring hostname and supported UTM campaign values. After authentication, this may be associated with your SimchaCam account so we can understand whether consented acquisition sources lead to sign-ups, event creation, verified Premium purchases, and broadcasts that become viewer-playable or are completed. We use a separate opaque analytics identifier and do not send your name, email address, SimchaCam authentication identifier, event name, private event address, password or streaming credentials to Google Analytics. We do not use Google Analytics advertising features or store advertising click identifiers. You can reject analytics or change your choice at any time using Analytics preferences in the website footer. Rejecting or withdrawing consent stops future Google Analytics collection and clears the locally stored attribution record; where you are signed in, we also remove the account association and cancel unsent account-linked analytics events.
10. International transfers
Some service providers used by SimchaCam may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we rely on appropriate transfer mechanisms used by those providers, such as recognised contractual protections or other lawful safeguards.
11. How long we keep information
We keep active account and event information while needed to provide the service. Premium replay is generally made available for 30 days, while provider processing and legacy recordings may follow different technical schedules. Following an account-deletion request, controlled media and account content are removed through a retryable provider-cleanup process. Limited transaction, accounting, fraud, refund, dispute, security and deletion-audit information may be retained where legally required or reasonably necessary, after removing direct account and event links where practical. Technical logs are retained for a bounded operational period determined by the relevant provider and security need. Temporary backups may expire later than active-system data.
12. Account deletion
You can request deletion from the Android app, the authenticated account settings page, or the public account-deletion page. If you cannot sign in, email privacy@simcha.cam; we will verify identity without disclosing whether an arbitrary address has an account. Owned events, access information and SimchaCam-controlled recordings are deleted. Purchases are not automatically refunded. Deletion is normally processed promptly and may take up to 30 days where provider cleanup, security checks, legal obligations, backups or technical recovery require more time. Limited financial, security and deletion-audit records may remain as described above.
13. Your rights
Under UK data-protection law, you may have rights to request access, correction, deletion, restriction or transfer of your personal information, and to object to certain uses. Where processing is based on consent, you may withdraw it. These rights are not absolute and may depend on the circumstances. Contact privacy@simcha.cam to make a request. We may need to verify your identity.
14. Complaints
Please contact us first at privacy@simcha.cam so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or to another relevant data-protection authority where applicable.
15. Security
We use technical and organisational measures including authenticated host access, server-side authorisation, restricted viewer permissions, hashed event passwords, short-lived signed recording links, isolated provider credentials, encrypted transport and private-event controls. No online service can guarantee complete security, and users must protect their accounts, event links and passwords.
16. Changes and contact
We may update this policy as SimchaCam develops or legal requirements change. The latest version will appear on this page with its update date.
Privacy enquiries: privacy@simcha.cam
Support: support@simcha.cam
Last updated: 9 September 2026