Privacy Policy

MultiCam is a multi-device recording app for iPhone and Android. It lets you hit record on one phone and have every paired phone roll together, keeps playback in sync across them, and uploads each angle to the cloud into the project you picked. This policy explains, in plain language, what personal information we collect when you use MultiCam, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

MultiCam is operated by Seal Push (the “Studio”, “we”, “us”). For the purposes of the EU and UK General Data Protection Regulations, the Studio is the data controller of the personal information described in this policy.

You can reach our privacy team at hello@sealpush.com.

Information you provide

• Email address — used to send your beta invite, sign you in, send transactional messages (e.g. password reset), and keep you up to date about MultiCam.
• Display name — optional, shown in the app and to other paired users you record with.
• Project and folder names — text you type to organise your recordings.
• Support correspondence — if you email us, the contents of that email and your reply address.

Activity in the app

• Video and audio recordings — the footage you capture using MultiCam, uploaded to the cloud project you selected. This is “User Content” under Apple's App Privacy categories. We store it on your behalf so paired devices and the side-by-side review feature can access it.
• Per-clip metadata — which phone captured the clip, duration, timestamp, the project / folder it belongs to, and basic technical attributes (resolution, file size).
• Pairing data — which phones paired together for a session, which phone was the director, and the session start / end times.
• Side-by-side review preferences — your selection of which camera's audio to use during review.

Device and technical data

• Device identifier — a per-installation identifier we generate so we can pair your phones and attribute clips to your account. This is not Apple's IDFA and is not shared with advertisers.
• Push notification token — issued by Apple Push Notification service or Firebase Cloud Messaging so we can let your other paired phones know when a recording session starts or playback changes.
• Diagnostic events — anonymised analytics and crash reports (screen views, button taps, errors) used to understand how the app is performing and to fix bugs.
• Server logs — IP address, request path, status code, timestamp, user agent. Retained briefly for security and troubleshooting.

We do not access your camera roll, contacts, calendar, health data, or precise location, and we do not access the microphone or camera outside of an active recording session you start. Recordings stay in your project's cloud folder; we do not use your footage to train AI models, for advertising, or for any purpose other than running the app.

We process the information above for the following purposes. Where you are in the European Union, the United Kingdom, or another GDPR-aligned jurisdiction, the relevant lawful bases are listed in brackets.

• To provide the core features of the app: sync recording, sync playback, cloud uploads, and side-by-side review. (Performance of contract)
• To attribute clips to your account so they appear in the right project and folder. (Performance of contract)
• To send push notifications between your paired devices when a recording starts, and operational emails (e.g. password reset). (Performance of contract; consent for push)
• To diagnose crashes, fix bugs, and improve performance using aggregated, anonymised analytics. (Legitimate interests in keeping the app reliable)
• To prevent abuse, spam, and unauthorised access to our services. (Legitimate interests in security)
• To comply with legal obligations and respond to lawful requests. (Legal obligation)

MultiCam asks for the following iOS / Android permissions. You can grant or revoke each one at any time from your device's system settings. Denying a permission will disable the related feature but will not prevent you from using the rest of the app.

• Camera — required to record video. The camera is only active while a recording session is in progress.
• Microphone — required for each phone to record audio alongside the video. The microphone is only active while a recording session is in progress.
• Photo Library (save) — optional, used only if you choose to save a finished clip back to your phone's camera roll.
• Local Network — used to discover other phones on your local Wi-Fi network so MultiCam can pair them as cameras during a session. We do not enumerate other devices on your network and we do not share your network information.
• Notifications — used to alert paired phones when a recording is starting and to send transactional messages about your account.

MultiCam does not use Apple's Identifier for Advertisers (IDFA). MultiCam does not share your data with third-party advertisers, data brokers, or analytics services that track you across other companies' apps or websites. As a result, the App Tracking Transparency dialog will not appear when you use MultiCam — there is nothing for us to track.

If this changes in the future, we will request your permission through Apple's App Tracking Transparency framework before any tracking begins, and we will update this policy and the App Store privacy labels at the same time.

We share data only with the third-party processors we need to run the app. Each one is bound by its own privacy obligations and a data processing agreement. We do not authorise them to use your data for their own purposes.

• Authentication provider — handles sign-in. Processes your email address and a user identifier on our behalf.
• Cloud storage provider — stores the video and audio you upload from MultiCam, encrypted at rest.
• Apple Push Notification service and Firebase Cloud Messaging — deliver push notifications between your paired devices and from us to you. They receive your push token and the notification payload, but no other account data.
• Analytics & crash-reporting provider — processes pseudonymised diagnostic events.
• Database and hosting providers — store the metadata described above so the app can read and write it.
• Email provider — sends transactional emails (account, password reset, beta access) on our behalf.

A current list of named sub-processors is available on request. We may also disclose information when required by law, court order, or to protect the rights, safety, and property of the Studio and its users.

MultiCam is operated from, and stores most user data in, the European Union. Some of the sub-processors listed above (for example, push notification services operated by Apple and Google) process data outside the European Economic Area. Where we transfer personal data internationally, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision as the legal basis for the transfer. By using the app you understand that your information may be processed in countries outside your own.

• Account data (email, display name, project / folder names) — retained until you delete your account.
• Recordings and per-clip metadata — retained until you delete them inside MultiCam. If you delete your account, recordings and metadata are scheduled for deletion within 30 days.
• Pairing logs — retained for up to 90 days then deleted.
• Diagnostic events — retained for up to 12 months and then automatically deleted or aggregated.
• Server logs — retained for up to 30 days for security and debugging purposes.
• Encrypted database backups — retained for up to 30 days before being overwritten.
• Support correspondence — retained for up to 24 months after the last reply, to maintain context if you contact us again.

Depending on where you live, you have the following rights over the personal data we hold about you:

• The right to access the data we hold about you
• The right to correct inaccurate or incomplete information
• The right to delete your account and associated data
• The right to restrict or object to certain processing
• The right to receive a copy of your data in a portable format
• The right to withdraw consent at any time (where processing is based on consent)
• The right to lodge a complaint with your local data protection authority

Residents of California have additional rights under the California Consumer Privacy Act (CCPA / CPRA), including the right to know what personal information has been collected, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined under California law.

To exercise any of these rights, email us at hello@sealpush.com from the address on your account. We respond within 30 days. We may need to verify your identity before acting on the request.

You can delete your MultiCam account at any time from inside the app. Open Settings → Account → Delete account and confirm. This permanently erases your account, your activity, your recordings, and any metadata associated with you within 30 days. Encrypted backups containing the data may persist for up to another 30 days before being overwritten.

If you cannot access the app for any reason, email hello@sealpush.com from the email address registered to the account and we will process the deletion within 30 days.

We use industry-standard practices to protect your information, including:

• Authentication tokens are stored on your device using the iOS Keychain or Android Keystore, never in plain application storage.
• All traffic between the app and our servers is encrypted in transit using TLS.
• Recordings and database backups are encrypted at rest in our cloud storage.
• Administrative access to our backend is gated by multi-layer authentication.
• Production secrets are never embedded in the mobile app binary or the public web bundle.

No system is perfectly secure. If we ever discover a security incident that affects your data, we will notify affected users without undue delay and report the incident to the relevant supervisory authority where required.

MultiCam is not directed at children under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at hello@sealpush.com and we will delete it.

This website (sealpush.com) supports the app and uses a small number of additional services:

• Self-hosted analytics — pageviews and click events are recorded on a Studio-operated Umami instance via a same-origin proxy. No cookies, no cross-site tracking, no IP address stored long-term.
• hCaptcha — protects forms (beta signup, contact) from bot abuse. hCaptcha may set a session token in your browser to verify the challenge. See hCaptcha's privacy notice.
• Beta signup form — submissions (first name, last name, email, platform interest) are stored in our Postgres database so we can invite you to the beta. We may notify our internal Telegram channel that a new signup arrived.
• Contact form — your message is forwarded to our team inbox via a transactional email provider. Reply-To is set to your email so we can respond directly.
• Cloudflare — hosts and serves this website at the edge. Cloudflare may process request metadata for security and performance.

We may update this privacy policy from time to time. The effective date at the top of the page will reflect the most recent change. If we make material changes (e.g. introducing a new category of data, a new sub-processor handling user content, or new cross-border transfers), we will notify you in the app or by email before they take effect.

If you have any questions about this policy or how MultiCam handles your information, please contact us at hello@sealpush.com. We aim to respond within five business days.