Privacy Policy

Last updated: June 23, 2026

Vision Guardian ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Disclaimer: Vision Guardian is an independent application and is not affiliated with, endorsed by, or sponsored by Ring LLC or Amazon.com, Inc.

1. Information We Collect

When you use Vision Guardian, we collect:

• Account information: Your email address used to create a Vision Guardian account.
• Ring account tokens: OAuth access tokens that allow Vision Guardian to access your Ring cameras on your behalf. These tokens are encrypted at rest using AES-256-GCM and never shared with third parties.
• Camera device data: Camera names, types (doorbell, garage, indoor, outdoor), and location labels synced from your Ring account. This data is stored to power the app dashboard and detection routing.
• Camera snapshots: Still images captured from your Ring cameras at the moment motion is detected. Snapshots are stored securely in a private cloud storage bucket and are retained for up to 90 days, after which they are automatically deleted.
• Detection events: The results of AI analysis (e.g., number of people detected, garage door state), stored so you can review your event history.
• Push notification token: A device token used to send push notifications to your iPhone.
• AI Camera Chat messages: Text messages you send to the in-app chat assistant. Messages are processed server-side by Google Gemini to generate a response and are not stored after the response is delivered. The chat assistant only has access to your recorded detection events; it cannot see live camera feeds.

2. How We Use Your Information

• To analyze your Ring camera snapshots using AI and deliver smart notifications.
• To display your event history and camera snapshots inside the app.
• To send push notifications when detections meet your configured thresholds.
• We do not sell, rent, or share your personal data with advertisers or third parties.
• We do not use your data to train AI models. Camera snapshots are sent to Google Gemini solely for real-time analysis and are not retained or used for model training by us or by Google.

3. Third-Party Service Providers

We use the following third-party services to operate Vision Guardian:

• Google Gemini API — AI vision analysis of camera snapshots. Governed by Google's Privacy Policy. Snapshots are transmitted securely over HTTPS and are not retained by Google after processing.
• Supabase — Database and user authentication. Stores your account, device, and event data. Governed by Supabase's Privacy Policy.
• Railway — Cloud hosting for the Vision Guardian backend API. Processes requests between the app and third-party services. Governed by Railway's Privacy Policy.
• Ring API — Camera access and motion event data provided through Ring's official OAuth integration.

4. Data Retention

Detection events and camera snapshots are stored for up to 90 days, after which they are automatically deleted. Camera device data and account information are retained until you delete your account. You can delete your account and all associated data at any time from the Settings screen in the app.

5. Data Security

All data is transmitted over HTTPS. Ring OAuth tokens are encrypted using AES-256-GCM before being stored. Camera snapshots are stored in a private, access-controlled storage bucket and are never publicly accessible. Webhook payloads from Ring are verified using HMAC-SHA256 signatures.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. To request data deletion, disconnect your Ring account in the app Settings or contact us at the email below. We will process deletion requests within 7 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. No opt-out is required, but you may contact us to confirm this at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, contact us at legal@kukenan.io. We will respond within 45 days as required by law.

8. Children's Privacy

Vision Guardian is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child under 13 has provided us personal information, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via push notification or email.

10. Contact

If you have questions about this privacy policy or wish to exercise your privacy rights, contact us at: legal@kukenan.io