Lullink privacy policy

Last updated: October 10, 2026 · Version française (the French version prevails)

Lullink is a video baby monitor app: a phone or tablet is used as the camera in the nursery, and other devices (phones, tablets, TVs) are used by the parents. It works without an account. Here is what stays on your devices, what is measured to improve the app, and your rights. The app opens this policy from Settings → Privacy policy.

Data controller

Your pictures and sounds stay at home

Video and sound go straight from the camera device to the parents' devices, encrypted, over your Wi-Fi or over the local network created by the app. They never go through the internet and are never sent to us: we have no access to them.

Only devices paired with the camera can see and hear it: a phone by scanning its QR code, a TV with a 6-digit code shown on both screens and confirmed on the camera. Each parent device checks that it is connecting to the camera it added. Access keys stay in the devices' secure keychain; from the camera, you can remove a parent at any time.

So that your devices can find it, the camera announces itself on your local network: the name you give the room is visible to devices connected to the same network. It gives no access to the picture or the sound.

On the parents' devices, Lullink does not use the microphone: it is only used by the camera device.

Recordings and night log

Recording is off by default. If you turn it on, on the camera device or from a parent phone, a short clip is filmed for each noise or motion detected. Clips stay on the camera device, for 7 days and 2 GB at most, and are not part of its backups (iCloud or Android). To watch a clip, the parent phone receives a copy over the encrypted connection, deleted after playback. If you choose “Save to phone”, the video is stored in your photos (the gallery on Android): it stays there until you delete it, and your photo backup (iCloud, Google Photos…) may include it if you turned it on.

To show you how the night went, the camera device keeps a log: times of alerts, clips, parent phone connections, the night light and lullabies. It contains no picture or sound, stays on the camera device for 7 days, outside its backups, and parent phones read it over the encrypted connection.

What stays on your devices

• On the camera device: its encryption key, the list of added parent devices (a generic device name such as “iPhone” or “Apple TV”, the date added and the fingerprint of their access), the last name given to the room, its settings, the log of the last 7 days and, if you turned it on, the clips.
• On the parent device (phone, tablet or TV): the added cameras (name, address on the local network, access keys).
• On each device: your choice about audience measurement, and its random identifier (see below).

None of this is sent to us. Uninstalling the app erases it from the device; on iPhone and iPad, the system may keep the keys stored in the keychain, which contain no picture or sound.

Audience measurement

To understand how the app is used and improve it, Lullink measures its audience: screens opened and main actions (camera started, alert received, clip recorded…), with the device model, the system version, the language and the screen size. Never the name of a room, a picture or a sound. The Apple TV app measures nothing.

The tool is Matomo, installed on our own server (stats.domilien.fr), located in France. This data is not shared, not sold, not used for advertising, and not combined with other data. Your IP address is anonymized. A random identifier, created by Lullink on your device, is used to count visitors: it is not the device's advertising identifier, and it cannot tell who you are. The data is kept for 25 months at most.

Outside France (based on the region set on the device), Lullink asks for your consent the first time you open it. Until you accept, nothing is measured and no identifier is created on the device. You can change your mind at any time with the “Audience measurement” setting.

In France, this measurement meets the conditions set by the CNIL (the French data protection authority) to be exempt from consent; it is based on our legitimate interest in improving the app. You can object at any time: turn off “Audience measurement” in the app's Settings, and nothing more is sent from this device.

Reading the QR code

The camera's QR code is read on the parent phone itself, by an open-source library built into the app (ZXing): the camera image is neither stored nor sent.

Permissions requested

• Camera and microphone: on the device used as the camera. On the parent phone, the camera is only used to scan the camera device's QR code.
• Local network: so that the camera and the parents can find and connect to each other.
• Notifications: to warn you of a noise, a motion or a lost connection, even with your phone locked.
• On Android, “Nearby devices” (or location before Android 13): only to create the network without Wi-Fi. Your location is never read.

What Lullink does not do

• No account, no ads, no sale of data.
• No third-party services: the app sends nothing to Google, Apple or anyone else; only audience measurement leaves the device, to our own server.
• No access to your location, your contacts or your photos.
• No picture or sound is sent, to us or to anyone else.

Children

Lullink is used to watch over a child, but it is meant for parents. The app sends us no picture, no sound and no information about the child.

Your rights

Under the GDPR, you can ask to access your data, correct or erase it, restrict its processing, and object to its processing, by writing to nicolas@domilien.fr.

Audience measurements are linked to a random identifier that we cannot connect to your name or email address: we therefore cannot find them from that information. To stop being measured, turn off “Audience measurement” in the app; uninstalling the app also erases this identifier.

You can also file a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.

Changes

If this policy changes, the new version is published on this page, with its update date.

Help and contactLegal notice