Privacy Policy

Last updated: 22 July 2026

Summary

Murmeli requires no Murmeli user account, contains no advertising and uses no analytics or tracking services. Murmeli does not store audio or video recordings.

Controller

Jan Stoffel · Sihlquai 16 · 8134 Adliswil · Switzerland
Contact: info@murmeli-babyphone.ch

Camera, microphone and media

Permissions are used only for baby-monitor functions, QR scanning and talk-back. Audio and video are encrypted in transit with WebRTC (DTLS-SRTP). They travel directly between paired devices whenever possible. If the network blocks a direct path, the Swiss TURN server may relay the still-encrypted media stream. Murmeli does not record it.

Connection setup and servers

Setup is local on the same Wi-Fi. Over the internet, devices exchange end-to-end encrypted signalling through relay.murmeli-babyphone.ch on an Infomaniak server in Switzerland. The pseudonymous remote code is used as a technical topic name and is visible to the relay in the request path; the PIN and message content remain encrypted. Encrypted messages may be cached for no more than five minutes to support reconnection. Google STUN servers process IP and connection data. The Swiss relay and TURN service process technically required IP addresses, timestamps and traffic metadata; content remains encrypted.

Data stored locally

Pairing code, PIN and device ID are kept in protected device storage. Language, saved device names, locally cached product and transaction identifiers verified by Apple or Google Play, purchase, trial-start and check times, and up to 50 local events per baby device remain only in app storage. This information is not synced to Murmeli servers and contains no payment data. On Android, the start and end of the two-hour trial are stored only in that app installation; the trial is not tied to a Google Play account. Clearing app data or uninstalling may remove this local trial state. The Android full purchase is instead assigned to the Google Play account used and checked again through Google Play after reinstallation. On iOS, keychain values may survive reinstallation depending on the operating system; new pairing codes can be generated in the app.

Notifications and app stores

Murmeli uses local notifications for sound and transmission alerts and requests system permission for them. It sends no advertising pushes. On iOS, the 48-hour trial starts with a free Apple In-App Purchase and, like the full purchase, is assigned to the Apple Account used. On Android, the two-hour trial starts locally without a Google Play transaction; only the permanent full purchase is assigned to the Google Play account used. Murmeli processes only the store-verified product and transaction details needed to determine access and receives no payment data. Apple, TestFlight and Google Play process purchase, installation, testing and diagnostic data under their own privacy terms (Apple, Google); processing may occur outside Switzerland.

Website and contact

When this website is opened, the servers and hosting provider process technically required IP and connection data to deliver the page and defend against attacks; no analytics cookies are used. Email sent to the contact address is processed through Google/Gmail and may be handled outside Switzerland.

Purpose, retention and rights

Processing is limited to the baby-monitor connection requested by the user, its safety and troubleshooting. Relay messages expire within five minutes; periodic cleanup removes temporary rate-limit data within no more than 70 minutes. Local data remains until deleted or reset. You may request access, correction or deletion and revoke permissions in system settings at any time. Contact: info@murmeli-babyphone.ch.