Privacy Policy
Last updated: 2026-08-02 · Operating entity: Texas Software Factory, LLC ("we", "us", "IsMomOnTheFloor").
The short version
- IsMomOnTheFloor looks at still images from the Ring cameras you connect and lets a person you choose know when someone may be on the floor.
- No audio or video is collected.
- Images are analyzed in real time and deleted from our systems within minutes. We keep no library of your images.
- To judge an image, we send it to third-party artificial-intelligence providers. This means images of people inside the home leave your device and go to those providers, which may keep the images for 30 days but sometimes longer due to their own safety policies or as required by law.
- We only monitor a person with their informed consent.
- You can delete your account and data at any time from our systems, but we cannot force our downstream AI providers to delete data earlier than their normal deletion processes dictate (usually 30 days but sometimes longer due to their own safety policies or as required by law).
This summary is for convenience; the full policy below controls.
1. Who this policy covers
This policy applies to the IsMomOnTheFloor service and website. IsMomOnTheFloor.com is operated by Texas Software Factory, LLC, in Austin, Texas ("we", "us"). Two people are usually involved: the account holder (the family member or caregiver who signs up and receives alerts) and the monitored person (the person the cameras watch). The monitored person is the subject of the most sensitive data we handle, and the privacy rights described below belong to them as well as to the account holder.
2. Information we collect
- Account information: the email address you sign in with, and basic sign-in records. Sign-in is passwordless (a one-time link), so we do not store a password.
- Ring connection data: your Ring account identifier, the access/refresh tokens Ring issues so we can retrieve images on your behalf, and the list of cameras you grant access to (including the names you have given those cameras in the Ring app, which we use to identify each camera in the emails we send you).
- Camera images: individual still images we retrieve from your cameras to analyze. We handle these transiently — see Section 4.
- The safety inference: the software's judgment about whether a person may be on the floor. We treat this as health-related information — see Section 3.
- Event and activity records: short, coded records of what a check found (for example, "clear" or "possible person on the floor"), when the check occurred, and which of our AI checks ran it — used to show you recent activity, to send alerts, and to let us tell which of our AI services is getting things right or wrong. These are codes and timestamps only — not descriptions of a person.
- Alert settings: the email address (and, optionally in the future, a phone number) where you want alerts sent.
- Consent records: a record that the monitored person consented (at least first name of who consented, on what basis, and when) — see Section 8.
- Technical data: standard server logs (IP address, timestamps, error data) needed to run and secure the service, plus an operational record of each check we run (which camera, when, which AI check ran it, and its coded outcome).
3. About the safety inference (health-related information)
IsMomOnTheFloor is a general wellness and peace-of-mind product; it is not a medical device and does not diagnose, treat, or manage any medical condition, and it does not keep any medical record, history, or health timeline. At the same time, the AI's inference from an image that "a person may be on the floor," is information that may relate to someone's health, and under California law we treat it as sensitive personal information. We use this inference to provide the monitoring you asked for and to check that our own AI checks are working correctly — nothing else — and you may ask us to limit its use (Section 9).
4. How we handle camera images
Images are analyzed in real time and deleted from our systems within minutes. We keep no library of your images. An image exists on our systems only long enough to send it to the AI image analysis providers and, if an alert is warranted, to attach the image to the alert message that we send to you. When a check sees someone on the floor, we also take one follow-up image about 15 seconds later and analyze it the same way to double-check before alerting (if that re-check cannot be completed, we send the alert anyway, to be safe). The follow-up image is handled identically — analyzed, then deleted. It is never emailed, and we never keep it; our AI providers' temporary retention (Section 5) applies to it like any other image.
Three honest exceptions to "we don't keep images":
- Emails we send you. An alert email includes the image that triggered it, and a test check you run from your account includes the image we just looked at — so you can see what the camera saw. That image is delivered to your inbox and is yours — it is outside our control once sent.
- Our AI providers. The image is sent to the AI providers that analyze it, and they will retain the image under their own temporary storage and safety policies (Section 5).
- Live processing. During the seconds that an image is being analyzed, it is present in memory on our systems by necessity.
We do not use facial recognition and do not identify people from images; the analysis is about body position only. We do not use your images to train AI models.
Separately, we keep a cryptographic fingerprint (a SHA-256 hash) of each image we email — never the image itself, and not linked to your account, name, or cameras. A fingerprint is a one-way code: it cannot be turned back into a picture, and on its own it cannot identify you. We keep these as an internal record of the images we have sent, so that if there is ever a question about whether an image came from us, we can confirm or deny it (Section 10 explains how).
5. Third-party AI providers (sub-processors)
To judge whether someone may be on the floor, we send images to well-known AI providers. Each provider processes images under a data-processing agreement that limits it to providing the service to us and forbids using your data for its own purposes. They do not use these images to train their models. Each provider deletes images automatically on their own routine schedule. The providers we currently use are:
- Google (Gemini): does not retain images routinely; may store an image only if its automated safety systems flag it for review, for up to about 90 days.
- xAI (Grok): deletes images automatically after about 30 days.
- OpenAI (GPT): deletes images automatically after about 30 days.
- Anthropic (Claude): deletes images automatically after about 30 days.
Those are each provider's routine deletion schedule. If a provider's automated safety systems flag an image, that provider may keep it longer — in some cases substantially longer — for abuse-prevention review under its own published policy, and we cannot delete it early; see each provider's policy for details. Providers may change; we will keep this list current.
For Texas residents: health-related data processed by the service is subject to electronic disclosure to these AI processing vendors, as described above.
6. How long we keep information (retention)
- Camera images: a few minutes on our systems, then deleted; see Section 4 and the AI provider info in Section 5.
- Image fingerprints: a one-way SHA-256 hash — never the image, and not linked to your account — kept indefinitely as an internal record of the images we have sent (Section 4).
- Event and activity records: 7 days, then deleted automatically.
- Operational server logs: up to 30 days, then deleted automatically.
- Alert records: retained for a limited period to operate the service and handle any dispute about an alert.
- Consent records: retained durably for as long as monitoring continues and afterward to show that consent was obtained.
- Account and Ring connection data: kept while your account is active; deleted when you delete your account (Section 10).
7. How we use and share information
We use the information above to operate the service — retrieve and analyze images, send you alerts, show recent activity, check that our AI checks are working correctly, secure the service, and provide support. We do not sell your personal information and do not "share" it for cross-context behavioral advertising. We disclose information only:
- to Ring, as needed to connect to and retrieve images from your cameras;
- to the AI providers in Section 5, as our service providers, to analyze images;
- to infrastructure providers that host our service;
- when required by law, to protect someone's safety, or as described in Section 11 (suspected abuse).
8. Consent to monitor another person
The monitored person's privacy comes first. You may use IsMomOnTheFloor to monitor someone only if:
- they have given their own informed consent — this is the normal and preferred basis, and it is the monitored person (not the account holder) whose consent counts; or
- if that person cannot consent for themselves, you hold and can document proper legal authority to make that decision for them. A financial power of attorney is not sufficient; the strongest basis is a conservatorship or guardianship of the person. Other health-care authority (such as a health-care directive naming you) may or may not be adequate — you are responsible for having a proper legal basis. Even then, the monitored person's objection to being monitored must be honored.
We never support covert monitoring: the monitored person must know the cameras are being watched by machines. We capture and keep a record of this consent through the account setup, and you can withdraw it at any time to pause monitoring. We do not independently verify surrogate authority and we do not warrant its legal sufficiency; you are responsible for having a proper basis.
9. Your privacy rights
Depending on where you live, you (and the monitored person) may have the right to:
- Know what personal information we hold and how we use it;
- Delete it;
- Correct it;
- Limit our use of sensitive personal information (the safety inference that someone may be on the floor) to what is needed to provide the monitoring you requested.
Because the safety inference is used to deliver the monitoring you signed up for and to check that our own AI checks are working correctly (Section 7), we do not use it for any purpose you would not expect. To exercise any right, contact privacy@ismomonthefloor.com; we will verify your request and respond as the law requires. These rights cannot be waived, and exercising them is free. If we ever decline a request, we will explain why and how to appeal.
10. Deleting your data
Sign in and use "Delete my data" on your account page. This permanently removes your account, your Ring connection data, your alert settings, activity records, and any other data we hold that is tied to your account, and it stops all monitoring. Note that any consent data will be retained by us, as we may need it in any future legal proceeding and as required by government entities. Also note that images already sent to our AI providers will be deleted on their normal schedule — routinely within about 30 days, though a provider may keep flagged content longer under their policy. If Ring asks us to delete data for your account, we will do so.
We also keep the image "fingerprints" described in Section 4. These are long numbers produced by a mathematical function that looks at an image. These numbers CANNOT be used to re-create the image. This type of number is called a "fingerprint" or "one-way hash" of the image. We only keep each fingerprint number and the date it was created. There is no connection to your account. It is useful in the future if someone needs to know that we did or did not ever send an image that we do not have. A government entity in possession of the image could generate their own fingerprint and then ask us to compare it to our fingerprint records. If we ever sent the same image, then we should have a matching fingerprint number. Deleting your account does not remove these fingerprint numbers.
11. Suspected abuse or neglect
Laws in some states require people who become aware of the abuse, neglect, or exploitation of an older or dependent adult to report it to the authorities. If we become aware of such a situation, we may be legally required to make a report, and we may do so as permitted or required by law.
12. Security
We use reasonable technical and organizational measures to protect your information: encrypted connections (HTTPS), restricted access to accounts and Ring tokens, no long-term storage of images, and separation of secrets. No method of transmission or storage is perfectly secure. If a breach affecting your information occurs, we will notify you and the appropriate authorities as required by law (generally within 60 days).
13. Children
The service is intended for monitoring consenting adults and is not directed to children.
14. Artificial intelligence and additional disclosures
This service uses artificial intelligence to analyze camera images to judge whether a person may be on the floor. A person (you or whoever you have us send alerts to) reviews any alert and decides what to do; our service does not take any action on its own beyond notifying your chosen contact via email alerts (and in the future, possibly also text-based alerts sent to a phone number of your choosing).
15. Changes to this policy
We may update this policy. If we make material changes, we will take reasonable steps to notify you, and we will update the "last updated" date above.
16. Contact us
Privacy questions or requests: privacy@ismomonthefloor.com
Texas Software Factory, LLC
14205 North MoPac Expressway, #570
PMB 817335
Austin, Texas 78728-6529
512-710-6443