How to keep a baby monitor private

Local-first by design

• When both devices are on the same Wi-Fi, they connect directly to each other. Live video and sound are streamed from the baby unit to the parent device only while a parent asks, and are not stored.
• Sound and movement are analysed on the baby unit itself. Nothing is sent anywhere to be analysed.
• Without a plan, nothing is saved at all: no clips and no sleep history.

What stays on your devices

• Video and sound are never uploaded to MeiMei's servers.
• Recorded clips, a MeiMei Home feature, are kept only on the baby unit, in the app's private storage (in a browser, the browser's own storage), for up to 30 nights or 2 GB, and are never uploaded.
• Events, nights and sleep reports live on the phones. With MeiMei Home or MeiMei Away they are kept for up to 30 nights; otherwise they are shown during a session and then dropped.
• The pairing secret sits in the secure storage of the phone (Keychain on iPhone, Keystore on Android), or in the browser's own storage on that device.

What can leave the house

Only what is needed to reach you when you are not on the same Wi-Fi:

• Encrypted alerts to a locked phone or a browser, delivered through Apple, Google or the browser's own push service, which only carry unreadable ciphertext and a generic “MeiMei alert” title.
• With a free account: your e-mail address, and a registry of your devices with their ids, role, language and push address.
• With MeiMei Away, remote viewing through an encrypted relay that stores nothing.
• Short-lived connection records and short server logs, which contain request ids and timings but never message content, tokens or video.

How encryption works

• When you pair, the baby unit and the parent device agree on a secret key. It is stored on the two devices and not on MeiMei's servers.
• Messages between the devices, including alerts, are encrypted with that key, so the cloud only ever sees ciphertext.
• Away from home, video still goes from phone to phone, encrypted, through a relay that cannot read it.

The pairing link and the QR code carry that key. Handle them like a house key.

The no-account browser mode

• Browsers cannot find each other on a network, so the two devices meet through a small relay. It sees a room code, device ids, timing, the network address of each connection and encrypted messages. It does not see video or sound.
• The room is removed shortly after the last device leaves, and connection records expire automatically: after 10 minutes without a message for no-account connections and after 2 hours for signed-in ones.
• Nothing is saved in this mode, and nothing is sent to an account.

What MeiMei does not use

• No analytics, no ads and no crash-reporting services.
• No cookies. The browser's local storage holds settings and the pairing secret, is never sent to MeiMei and is not used to track you.
• No sale of data.
• The cloud service runs on Amazon Web Services in the United States (us-east-1).

What you can do yourself

• Keep the pairing link private. Anyone who has it can watch the camera while it is running.
• Use a Wi-Fi network with a strong password, and keep the phones' software up to date.
• On a shared computer, sign out when you are done, and close the baby unit's tab when you stop.
• Switch off browser alerts you no longer need, and remove devices you no longer use.
• If you can do without an account, do: the browser mode works with none.

Deleting your data

• In Settings, “Delete everything” wipes both phones and deletes your account, your registered devices, your connection records, your plan and order records and your household's video channel from MeiMei's servers.
• Turning browser alerts off, or signing out, deletes that browser's push address from the servers.
• To see or remove anything else, write to support@meimeimonitor.com. You also have the usual rights of access, correction, deletion and objection under data protection law.

MeiMei is a product of TECHNO FUSION SRL, which is responsible for your data. This guide summarises the privacy policy; if they differ, the policy applies. MeiMei is not a medical device and does not replace watching your child yourself.