Privacy

Privacy Policy

Last updated: 3 July 2026

CribCall turns a spare phone into a baby monitor. One phone streams sound from near the crib; another phone listens. This page explains, in plain language, what personal data we collect, why, who we share it with, and how you can access or delete it. It applies to the CribCall website (cribcall.com) and the CribCall apps.

We built CribCall to be private by design. The most sensitive thing it handles — the live sound from your baby's room — is never stored on our servers.

Who we are

CribCall is operated by Andreas Olsen Gulla ("CribCall", "we", "us"). We are the data controller for the personal data described here.

If you have any questions about your privacy or want to exercise your rights, contact us at:

The short version

  • We never record or store your baby's audio. It streams directly between your two devices and is gone the moment you stop listening.
  • We don't sell your data, and we don't share it with advertisers.
  • We don't use advertising trackers or ad SDKs.
  • We collect the minimum we need to log you in, deliver alerts, and keep the service running.
  • You can delete your account and data at any time.

What we collect and why

Account information

If you create a CribCall account, we collect:

  • Your email address — required to sign in and to manage your account. Sign-in is handled by our identity provider, Clerk.
  • Your name — only if you choose to provide it when signing up.

We use this to authenticate you, manage your subscription, and contact you about your account and (if you're a free user) the upgrade email described below.

You don't need an account to try CribCall. A free 1-hour session works anonymously, and in that case we don't collect any account information.

Push notification token

To alert you when your baby makes sound or the baby device disconnects, the listening app registers a push notification token (a device identifier issued by Google's Firebase Cloud Messaging on Android, or Apple's Push Notification service on iOS). We use this token only to deliver those alerts to your device. We don't use it to identify you across other apps or services.

Your baby's audio

Live audio from the baby device streams directly between your two devices over an encrypted, real-time WebRTC connection. It is relayed transiently through our media infrastructure only to make the connection work across networks. We do not record it, store it, log it, or listen to it. When you stop a session, the audio is gone.

The listening (parent) phone does not record audio at all — it only plays what it receives.

Payment information

CribCall Pro is sold on the web. Payments are processed by Stripe through our provider Clerk. We do not collect or store your card number or other payment card details — Stripe handles that directly. We only receive your subscription status (for example, whether you have an active Pro plan).

Technical and operational data

Like any website and app, our infrastructure provider (Cloudflare) processes standard technical information such as your IP address and basic request data to keep the service secure, reliable, and working. We use this for operation, troubleshooting, and abuse prevention. We do not use third-party advertising or product-analytics SDKs that track you.

Who we share data with

We use a small number of trusted service providers ("sub-processors") to run CribCall. They process data only on our behalf and for the purposes above:

  • Clerk — sign-in, account, and subscription management (your email and, if provided, your name).
  • Cloudflare — hosting, session infrastructure, real-time audio relay, and email delivery.
  • Stripe — payment processing for Pro subscriptions on the web.
  • Google (Firebase Cloud Messaging) — delivery of push notifications on Android.
  • Apple (Apple Push Notification service) — delivery of push notifications on iOS (once the iOS app is available).

We do not sell your personal data and we do not share it with advertisers. We may disclose data if required by law or to protect the safety and rights of our users.

Email you may receive

  • Account and service emails — for example, sign-in and account-related messages.
  • Upgrade email — if you're signed in on a free plan, we send one email when your free 1-hour session ends, letting you know you can upgrade to Pro for unlimited listening. This is a promotional message, so it includes an unsubscribe option and our sender identity. You can opt out at any time, and opting out won't affect your account or the service. We keep these emails infrequent (at most about one a week).

How long we keep your data

  • Baby audio: not stored — it exists only for the duration of a live stream.
  • Session data (pairing codes and temporary session state): held only for the short life of a session and deleted automatically shortly after it ends.
  • Account data (email, optional name, subscription status): kept for as long as you have an account. When you delete your account, we delete it (see below).
  • Technical/operational logs: retained for a limited period for security and reliability, then deleted or anonymised.

Accessing or deleting your account and data

You are in control of your data.

  • Delete your account: you can delete your CribCall account and its associated personal data at any time from your account settings. If you can't access your account, email us at [email protected] and we'll delete it for you.
  • Access or correct your data: contact us at [email protected] and we'll help.

When you delete your account, we remove your account information from CribCall and instruct our providers (such as Clerk) to delete it. Some limited records may be retained where the law requires it.

Security

We protect your data with industry-standard measures. All connections are encrypted in transit (HTTPS/TLS for the app and website, and encrypted WebRTC — DTLS-SRTP — for audio streams). Access to systems is restricted and controlled. No method of transmission or storage is ever 100% secure, but we work to protect your information appropriately.

Children

CribCall is a tool for parents and other adults to monitor their own child. It is not directed at children, and it is not intended for use by anyone under 16. We don't knowingly collect personal data from children. Audio of your baby is never stored or collected by us, as described above.

International data transfers

Our providers may process data on servers located in other countries, including the United States. Where data is transferred internationally, we rely on appropriate safeguards to protect it.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal data, to object to certain processing, and to data portability. To exercise any of these, contact us at [email protected]. You also have the right to complain to your local data protection authority.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top, and for significant changes we'll provide a more prominent notice.

Contact us

Questions about this policy or your data? Email [email protected].