‹Privacy Policy

CasaCam Privacy Policy

Primrose Technologies Inc.

Last updated: August 19, 2026  ·  Effective: August 19, 2026

Primrose Technologies Inc. (“Primrose,” “we,” “us,” or “our”) provides the CasaCam mobile application, the CasaCam home-display hub, CasaCam-compatible cameras and connected devices, and related cloud services, including cloud video storage (collectively, the “Services”). This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices and rights you have.

This Policy applies to users of the Services in the United States. By using the Services, you acknowledge the practices described in this Policy.

A note about camera recordings. CasaCam cameras can capture video and audio of anyone within their range — including family members, guests, employees, customers, and neighbors. You, the account owner, decide where to place cameras and what to record. We process your recordings to provide the Services on your behalf. You are responsible for using cameras lawfully and for giving any notices or obtaining any consents required in your state, particularly for audio recording. See the CasaCam User Agreement for details.

1. Information We Collect

Information you provide to us

Information collected by your devices and cameras

Information collected from the App

Information from third parties

If you link a third-party service (for example, a voice assistant or smart-home platform), we receive the information that service is authorized to share with us, such as your linked account identifier and device commands.

2. How We Use Information

We use the information we collect to:

We do not use the content of your video or audio recordings for advertising, and we do not sell your recordings. We access the content of your recordings only: (a) at your direction or with your permission (for example, when you ask support to troubleshoot); (b) as needed to provide features you have enabled; (c) to protect the security and operation of the Services; or (d) as required by law (see Section 4).

3. Cloud Recordings: Storage and Retention

Cloud recordings are stored on our cloud infrastructure hosted in the United States and are encrypted in transit and at rest. Recordings are retained for the rolling storage period included in your subscription plan (currently 7, 14, or 30 days, depending on your plan) and are then automatically and permanently deleted. You can manually delete individual recordings at any time in the App. If your subscription lapses or you delete your account, your stored recordings are deleted after a grace period of 30 days.

4. How We Share Information

We share personal information only as described below. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

5. Third-Party SDKs

To provide certain features of the Services, our App integrates software development kits (“SDKs”) provided by third parties. These third parties may independently collect and process information as described in their own privacy policies, which we do not control and for which we are not responsible. Please review their privacy policies before using the relevant features. The SDKs integrated into the App and the information each of them may process are described below.

MiPush SDK

Purpose: to provide the Xiaomi message push service.
Method: jar.
Information collected: IMEI/OAID (applicable to Android Q and above), IMEI MD5/MEID MD5, Android ID, VAID, AAID, MID (applicable to MIUI systems), and device model.
Third-party organization: Xiaomi Mobile Software Co., Ltd.
Third-party privacy policy: https://dev.mi.com/console/doc/detail?pId=1822

Huawei Push

Purpose: to provide message push technical services for App users on Huawei phones.
Method: Dependency.
Information collected: AAID, application Token and topic subscription relationships; message delivery records, Token application records, and display/click/close tracking reporting records; cached message content; and, if message verification is enabled, the HMS Core openId (irreversibly encrypted and stored only on the device side).
Third-party organization: Huawei Device Co., Ltd.
Third-party privacy policy: https://consumer.huawei.com/cn/privacy/privacy-policy/

Bugly

Purpose: to provide app crash analysis and update capability.
Method: Dependency.
Information collected: log information (including third-party developer custom logs, Logcat logs and app crash stack information), device ID (including androidid and idfv), network information, system name, system version and country code.
Third-party organization: Shenzhen Tencent Computer System Co., Ltd.
Third-party privacy policy: https://privacy.qq.com/document/preview/fc748b3d96224fdb825ea79e132c1a56

zxing

Purpose: to generate QR codes and scan codes.
Method: Dependency.
Scope: obtains the camera permission to scan codes.

OPush

Purpose: to push in-app device alarm information to terminals of users using OPPO phones.
Method: Dependency.
Information collected: device-related information (such as IMEI number, Serial Number, IMSI, User ID, Android ID, Google Advertising ID, phone region settings, device model, phone battery level, phone operating system version and language); push service application information (such as app package name and version, running status); push SDK version number; network-related information (such as IP or domain connection results, current network type); message sending results; notification bar status (such as notification bar permission and user click behavior); and lock screen status (such as whether the screen is locked and whether lock screen notifications are allowed).
Third-party organization: Guangdong HuanTai Technology Co., Ltd.
Third-party privacy policy: https://open.oppomobile.com/wiki/doc#id=10288

vivoPush

Purpose: to provide message push technical services for App users on vivo phones.
Method: Dependency.
Information collected: device and application information (including operating system version number, application information, device identifiers such as IMEI number, SIM and IMSI, mobile country code and mobile network number, MAC address, mobile operator, language in use, system settings, and other system, device and application data); log information (including login logs, network requests, access time, access times, access IP, application operation information and error and crash information); location information (when you request location-based services); and personal information you submit when using the services.
Third-party organization: Guangdong Tianchen Network Technology Co., Ltd.
Third-party privacy policy: https://www.vivo.com.cn/about-vivo/privacy-policy

WeChat Pay

Purpose: payment channel for the purchase of value-added services within the App.
Method: jar.
Scope: used for the user to pay for and purchase value-added services.
Third-party organization: Tenpay Payment Technology Co., Ltd.
Third-party privacy policy: https://pay.weixin.qq.com/index.php/public/apply_sign/protocol_v2

Tencent YLH SDK

Purpose: ad delivery, ad attribution, ad anti-fraud and ad effectiveness optimization.
Method: Dependency.
Information collected: rough location information; device information (such as device manufacturer, device model, operating system version, IP address); device identifiers (such as IMEI, AndroidID, OAID, IDFA); application information (package name and version of the host application); application installation information; and advertising data (such as exposure and click data).
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Shenzhen Tencent Computer System Co., Ltd.
Third-party privacy policy: https://e.qq.com/dev/help_detail.html?cid=2005&pid=5983

Beizi SDK

Purpose: ad delivery strategy, statistical analysis and anti-fraud, and personalized recommendations.
Method: SDK on-device collection + de-identified sharing.
Information collected: required — device brand, model, system version, screen information, language, time zone, network, IP, operator, application package name and version; on Android — OAID and AndroidID; on iOS — IDFA and IDFV; optional — location, sensor, ad interaction data, crash and performance data.
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Shanghai BeiZi Network Technology Co., Ltd.
Third-party privacy policy: https://sdk-doc.adn-plus.com.cn/docs/Privacy_Protection

Meishu SDK

Purpose: precise ad delivery, effectiveness optimization and regional differentiation.
Method: SDK on-device collection + authorized sharing.
Information collected: required — device brand, model, system version, screen information, language, network, IP, operator, application package name and version; on Android — OAID, AndroidID and IMSI; on iOS — IDFA and IDFV; optional — location, sensor, ad interaction data, crash and performance data.
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Beijing Meishu Information Technology Co., Ltd.
Third-party privacy policy: https://wwww.atdplus.cn/html/sdk-privacy-agreement/美数SDK用户隐私政策.html

Octopus SDK

Purpose: ad delivery, attribution and anti-fraud, and optimization of the ad process.
Method: SDK on-device collection + de-identified sharing.
Information collected: required — device brand, model, system version, screen information, language, time zone, network, IP, operator, application package name, version and process; on Android — OAID, AndroidID and GAID; on iOS — IDFA and IDFV; optional — location, sensor, ad interaction data, crash and performance data.
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Beijing Shengying Technology Co., Ltd.
Third-party privacy policy: https://doc.adintl.cn/docs/SDK隐私政策/UsePrivacy/

Taku (TopOn) SDK

Purpose: to adjust ad delivery strategies based on user device information, to analyze ad behavior (such as ad loading, display, clicks), and to prevent ad fraud.
Method: aar.
Scope: in the ad aggregation tool business, Taku mainly connects third-party ad platforms/ad sources according to the developer’s configuration, and completes ad request forwarding, ad source scheduling and data statistics. In this scenario, Taku does not directly decide the specific ad creative content, nor does it act as an advertiser-side system to actively select specific ad content for end users. Shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Guangzhou Taku Information Technology Co., Ltd.
Third-party privacy policy: https://help.takuad.com/docs/1Mn1B7

Qumeng SDK

Purpose: ad delivery.
Method: SDK on-device collection.
Scope: used when developers conduct ad delivery and need to adjust ad monetization strategies and conduct data analysis. Shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Hubei Jietu Information Technology Co., Ltd.
Third-party privacy policy: https://docs.jietuhb.com/android_sdk/qu-privacy-agreement.html

Lingye SDK

Purpose: ad delivery.
Method: SDK on-device collection.
Scope: ad delivery and ad anti-fraud. Shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Shanghai Lingye Information Technology Co., Ltd.
Third-party privacy policy: https://manage.shanghailingye.cn/privacy

Fanlian SDK

Purpose: ad delivery.
Method: SDK on-device collection.
Scope: to carry out ad delivery, ad monitoring attribution and anti-fraud. Shake-shake, twist-twist and other ad-triggered interactive use.
Third-party organization: Beijing Fanlian Technology Co., Ltd.
Third-party privacy policy: https://union.funlinkads.cn/docs/#/blog?blogid=535

Youku SDK

Purpose: ad delivery and effectiveness monitoring, and video service stability.
Method: SDK on-device collection + partner data protection.
Information collected: required — device identifier, network and basic device information; optional — location, application list, sensor and ad interaction data.
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Beijing Tifan Technology Co., Ltd.
Third-party privacy policy: https://terms.alicdn.com/legal-agreement/terms/privacy_policy_full/20251124233431381/20251124233431381.html

MinMinGuard

Purpose: basic function — ad removal.
Method: jar.
Information collected: running process information. In order to monitor errors and exceptions of the App and to optimize and upgrade the platform, we collect abnormal information on application software operation.
Third-party privacy policy: https://github.com/chiehmin/MinMinGuard

MobileCrossPlatformTools

Purpose: used to test sample applications of mobile cross-platform development tools.
Method: jar.
Information collected: running process information. In order to monitor errors and exceptions of the App and to optimize and upgrade the platform, we collect abnormal information on application software operation.
Third-party privacy policy: https://github.com/acperez/MobileCrossPlatformTools

Baidu Content Review SDK

Purpose: customized review rule configuration for images and text.
Method: Dependency.
Information collected: device information (operating system version, unique device identifier, IMEI), log information, network information and Cookie (browsing records and usage records).
Third-party organization: Baidu.
Third-party privacy policy: https://ai.baidu.com/ai-doc/ANTIPORN/hk3h6xdbp

Baidu Union SDK

Purpose: to provide ad delivery, ad monitoring, ad attribution and anti-fraud functions to ensure a stable and safe service.
Method: Dependency.
Information collected: device brand, model, software system version, resolution, network signal strength, total disk space, system memory space, screen width and height, screen pixel density, system version number, device manufacturer, device model, mobile operator, SIM card information, phone restart information, phone system update time, phone system creation time, IDFA (collected only on iOS), OAID and other basic information.
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Beijing Baidu Netcom Science Technology Co., Ltd.
Third-party privacy policy: https://union.baidu.com/bqt/#/legal/policies

Pangle Ad SDK

Purpose: ad delivery.
Method: Dependency.
Information collected: basic information such as device brand, model, software system version, screen density, screen resolution, device language, device time zone, SIM card information (mcc and mnc), CPU information and available storage space size; AndroidID, OAID and device identifiers (such as IMEI, IMSI, ICCID, GAID (GMS services only), MEID and hardware serial number; specific fields may vary depending on the software and hardware version); operator information, Wi-Fi status, network signal strength, IP address, application package name, running process information, version number, application foreground/background status, software list information, sensor information (linear acceleration, magnetic field, rotation vector, acceleration and gyroscope), and interaction data for ad display, clicks and conversions, including crash data and performance data.
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Beijing Ocean Engine Network Technology Co., Ltd.
Third-party privacy policy: https://www.csjplatform.com/privacy

Kuaishou Union SDK

Purpose: ad delivery.
Method: Dependency.
Information collected: basic information such as device brand, model, software system version, storage information, operator information, device time zone, device language and network information; device identifiers — IMEI, MEID, OAID, IMSI, ICCID and device IP; location information — IP address, MAC address, GPS location information, base station information, WIFI information and WLAN access points (such as SSID and BSSID); application information — application installation list; and other information — sensor information and SIM card activation information.
Scope: shake-shake, twist-twist and other ad delivery and ad anti-fraud.
Third-party organization: Beijing Kuaishou Advertising Co., Ltd.
Third-party privacy policy: https://u.kuaishou.com/home/detail/1220

Qihoo 360 App Reinforcement

Purpose: to reinforce the APK and ensure information security.
Method: Dependency.
Third-party organization: Beijing Qihoo Technology Co., Ltd.
Third-party privacy policy: https://360tianyu.cn/#/global/help/322

Umeng U-App Analytics SDK

Purpose: data point tracking statistics.
Method: Dependency.
Information collected: device identifier information used to generate desensitized end-user device identifiers — required: AndroidId, OAID, IDFA, OpenUDID, GUID; optional: IMEI, IMSI, ICCID.
Third-party organization: Umeng Tongxin (Beijing) Technology Co., Ltd.; Beijing Ruixun Lingtong Technology Co., Ltd.
Third-party privacy policy: https://www.umeng.com/page/policy

MOBTECH SMSSDK

Purpose: SMS verification code request and verification.
Method: Dependency.
Information collected: system runtime information (device platform, system version, device model, device manufacturer, device brand, screen resolution); network status information (IP address, operator information, WiFi information, base station information, SSID, BSSID); device identification information (iOS advertising identifier (IDFA), International Mobile Equipment Identity (IMEI), anonymous device identifier (OAID), International Mobile Subscriber Identity (IMSI), Advertising ID, VAID, AAID, SIM card identification code (ICCID), SIM card serial number, Android ID and Serial Number (certain identifiers are only collected in versions before March 2022)); geographic location information (rough and/or precise); application list information; and mobile phone number.
Third-party organization: Shanghai Youkun Information Technology Co., Ltd.
Third-party privacy policy: https://www.mob.com/wiki/detailed?wiki=596&id=23

MOBTECH ShareSDK

Purpose: third-party login and social sharing.
Method: Dependency.
Information collected: system runtime information, social platform OPENID, application list information, rough geographic location information, precise geographic location information, device identification information and network status information.
Third-party organization: Shanghai Youkun Information Technology Co., Ltd.
Third-party privacy policy: https://www.mob.com/wiki/detailed?wiki=638&id=14

Tencent Turing Shield SDK

Purpose: information security.
Method: Dependency.
Information collected: network status, system settings, system attributes, device model, hardware serial number, OAID and IP address.
Third-party organization: Shenzhen Tencent Computer System Co., Ltd.
Third-party privacy policy: https://rule.tencent.com/rule/dc3c09cc-7c17-49e0-aedb-06020209ed89_CSIG-100750-018-02

Alipay Client SDK

Purpose: payment function and login function.
Method: Dependency.
Information collected: Android ID, OAID, AAID, SSID, BSSID; system settings, system attributes, device model, device brand and operating system; IP address, network type, operator information, Wi-Fi status, Wi-Fi parameters and Wi-Fi list.
Purpose of use: (a) to ensure the safe and stable operation of user accounts, funds and the payment service; (b) to fulfill statutory obligations such as anti-money laundering, anti-terrorist financing and anti-telecom network fraud; and (c) to realize the selection and optimization of network links to improve the user experience.
Third-party organization: Alipay (China) Network Technology Co., Ltd.
Third-party privacy policy: https://opendocs.alipay.com/common/02kiq3

Amap Open Platform Location SDK

The device information collected by this SDK may vary depending on the device, the operating system (Android/iOS), the system version, and the permissions configured in the App. The information below is provided for reference.

SDK name: Amap Open Platform Location SDK
Provider: Beijing Amap Tukuang Technology Co., Ltd.
Purpose: to provide location-based services to users.
Information collected: latitude and longitude; device information (such as IP address, GNSS information, network type, WiFi status, WiFi parameters, WiFi list, SSID, BSSID, base-station information, and WiFi signal strength; sensor information (vector, acceleration, pressure, orientation, geomagnetic); and device signal-strength information); device identifiers (IDFA, OAID); current app information (app name and version); device parameters and system information (device brand and model, operating system, carrier, and screen resolution); and search terms.
Permissions used: Android — location and background location (where enabled), and network access; iOS — location services and the advertising identifier; HarmonyOS — location and network access.
Collection method: on-device collection by the SDK.
Third-party privacy policy: https://lbs.amap.com/pages/privacy/

6. Business Mode

If you use the Services in Business Mode to monitor a commercial location, you (the business account owner) determine what is recorded, who has access, and how recordings are used. In that context, you are responsible for complying with laws that apply to your business — including providing any required notices to employees, customers, and visitors — and Primrose processes recordings and related data as a service provider on your behalf. Where required, we can enter into a service-provider or data-processing agreement with business customers; contact service@casacamusa.com.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption of video in transit and at rest, credential hashing, access controls and logging for any internal access to customer data, and support for two-factor authentication, which we strongly encourage you to enable. No security measure is perfect; we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and regulators as required by law. You play a role too: use a strong, unique password, enable two-factor authentication, and keep your devices’ firmware up to date (we deliver security updates automatically).

8. How Long We Keep Information

We keep personal information for as long as needed to provide the Services and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing agreements. In general: cloud recordings are kept for your plan’s rolling storage window (Section 3); event history is kept for 12 months; account information is kept while your account is active and deleted or de-identified within 90 days after account deletion, except where longer retention is required by law (for example, billing records); and device logs and diagnostics are kept for 13 months.

9. Your Choices and Controls

10. Your U.S. State Privacy Rights

Depending on your state of residence (including California, Colorado, Connecticut, Texas, Utah, Virginia, and others), you may have the right to: know/access the personal information we hold about you and obtain a portable copy; correct inaccurate personal information; delete personal information; opt out of the sale of personal information, sharing/processing for targeted advertising, and certain profiling (as noted above, we do not sell personal information or share it for cross-context behavioral advertising); and not receive discriminatory treatment for exercising your rights.

For California residents: In the last 12 months we have collected the following categories of personal information described in the CCPA/CPRA: identifiers (such as name, email, IP address); commercial information (such as purchase and subscription records); internet or other electronic network activity (such as app usage); geolocation data (approximate; precise only if you enable location features); audio and visual information (camera recordings); and inferences drawn for service features (such as event labels). We collect them from the sources, for the purposes, and share them with the recipients described in Sections 1, 2, and 4. We do not use or disclose sensitive personal information for purposes requiring a “right to limit” under the CPRA, and we do not knowingly sell or share the personal information of consumers under 16.

Exercising your rights: submit a request through the App (Settings > Privacy), by email to service@casacamusa.com. We will verify your request using your account email and, where needed, additional information. You may use an authorized agent where permitted by law. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights. If we decline a request, you may appeal by replying to our decision or emailing service@casacamusa.com.

A note about other people in recordings: privacy rights requests concerning footage captured by a CasaCam user’s camera (for example, a visitor recorded at someone’s door) are generally directed to the account owner who controls that camera, since we process those recordings on the owner’s behalf.

11. Children’s Privacy

The Services are not directed to children, and we do not knowingly collect personal information from children under 13. Cameras may incidentally record children present in a monitored area; that footage is controlled by the account owner. If you believe a child under 13 has created an account, contact us at service@casacamusa.com and we will delete it.

12. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common standard, the Services do not currently respond to these signals. Where required by law, we honor opt-out preference signals (such as the Global Privacy Control) for the covered activities.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the App or by email before the changes take effect and update the “Last Updated” date above. Your continued use of the Services after the effective date constitutes acknowledgment of the updated Policy.

14. Contact Us

If you have questions about this Policy or our privacy practices:

Primrose Technologies Inc.

Attn: Privacy

PO Box 408, Amawalk, NY 10501, USA

Email: service@casacamusa.com