Privacy Policy

Last updated: 2026-07-03

In short

LIL1 is a serverless, local-only baby monitor. It streams audio and video directly between two of your own Apple devices. There is no backend and no cloud, so there is no server that could collect, store, or transmit your personal data. Your baby's feed only ever lives on your own devices.

This policy covers two separate things: the LIL1 app, which processes no personal data at all, and this website, which processes only the technical minimum described below.

Controller

Responsible for data processing in connection with the LIL1 app and this website (Art. 4(7) GDPR):

The LIL1 app

Everything the app does stays on your own devices. In detail:

Data the app collects

None. The app has no analytics, no telemetry, no tracking, and no advertising identifiers. We do not require an account, an email address, or any sign-up. We never receive your audio or video. It is sent directly from one of your devices to the other and is never routed through us or any third party.

Microphone and camera

The app requests microphone and camera access solely to capture the baby unit's audio and (on demand) video and stream it directly to your paired parent device over Apple's local peer-to-peer transport. This media is never recorded by us, never uploaded, and never leaves your devices.

Local network and Bluetooth

To form a direct device-to-device link, the app uses Apple's Multipeer Connectivity over the local network and/or Bluetooth. This is used only to discover and connect your own devices. No data is sent to the internet.

Purchases

The one-time unlock is sold through Apple's App Store. The purchase is processed entirely by Apple as its own data controller under Apple's privacy policy. We do not receive your name, your payment details, or your Apple account data. The app only checks locally, via Apple's StoreKit framework, whether the unlock has been purchased.

This website

This website is a static information page served from a server we operate ourselves. It sets no cookies and embeds no advertising; apart from the self-hosted analytics described below, no third-party services are involved. To remember that you have already been redirected to your language once, it stores a small flag in your browser's sessionStorage; this is strictly functional, contains no identifier, and is deleted when you close the tab.

Server logs

When you visit the site, our web server processes technical data in its access logs: your IP address, date and time, the requested URL, and your browser's user agent string. We use these logs solely to deliver the site and to keep it stable and secure. The legal basis is our legitimate interest in operating this website securely (Art. 6(1)(f) GDPR). The logs are not merged with other data, are not used to identify you, and are kept only as long as needed for these purposes.

Analytics (Umami)

We use Umami, a privacy-friendly, cookie-free analytics tool, on a server we host ourselves, to see aggregate statistics such as page views, referrers, country, and browser type. No data is shared with any third party. Your IP address and user agent are processed only to compute an anonymized visitor hash and are not stored; no cookie or other identifier is placed on your device. The legal basis is our legitimate interest in understanding, in aggregate, how this website is used (Art. 6(1)(f) GDPR).

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection, and data portability, as well as the right to lodge a complaint with a supervisory authority. The app collects no personal data and the website processes only the technical minimum described above, so in most cases there is simply nothing for us to hold. For any privacy question, contact us using the details in the Imprint.

Changes

We may update this policy as the app evolves. The current version always applies, with the date shown above.