Thợ Cam (ThoCam)

Privacy Policy

Last updated: October 22, 2026

Thợ Cam is a field toolkit for camera and network installers, developed by Kaifuz Studio. An account is optional — you only need one to use PRO across devices — and there is no advertising. The app works on your device and on the local network you connect it to. This page lists every case where it reaches beyond that.

Information Thợ Cam accesses

Depending on the features you use, Thợ Cam may ask for:

• Local network — to find, check and configure IP cameras, recorders and network devices on the site you are working on.
• Camera — to scan Thợ Cam QR tags and to take floor-plan and site photos.
• Photos — to open a floor-plan image or a site photo you choose.
• Location (Android only) — Android requires it to scan nearby Wi-Fi networks and to read the name of the Wi-Fi network you are on. Thợ Cam does not use or store your location.

The spirit level reads the device's motion sensor on the device; nothing is recorded.

What stays on your device

Your jobs, customer details, device lists, floor plans, sketches, photos, materials and price list, signatures and exported reports are stored on your device. Kaifuz Studio's account service (below) never receives any of this data. It leaves your device only when you share or export it yourself — for example a PDF report, a .thocam job file, a QR tag or a text summary — and it then goes only where you send it.

Camera passwords

Device passwords are never written into jobs, reports, QR tags, .thocam files or shared summaries. If you choose to save logins you use often, they are kept in your operating system's secure storage (such as the iOS or macOS Keychain or the Android Keystore), are never shown again in the app, and are never exported. QR tags are encrypted with a passphrase you choose; a few plain lines you can see before printing (installer, phone, install date, warranty end) are readable by anyone who scans the tag.

Talking to devices

Scanning, live view, configuration, PTZ, ping, port checks and traceroute connect directly from your device to the addresses you scan or type in. These connections never pass through Kaifuz Studio.

Optional account, activation codes and web purchases

If you choose to sign in (with Google, or with Apple on Apple devices) or use an activation code, the Thợ Cam account service at thocam.kaifuz.com, run by Kaifuz Studio on Cloudflare, stores:

• your email address and the account identifier Google or Apple gives us (we never see your Google or Apple password);
• your activation codes, their plan, expiry and number of devices;
• for each device using PRO: a random device identifier created by the app, a device name such as "Windows · PC-01", the platform and the app version, with activation and last-seen times;
• orders you place on the website: plan, amount, order code and the bank-transfer reference used to confirm payment (we never receive your bank login or card details);
• a security log of sign-ins and changes, including IP addresses, kept to prevent abuse.

When you are signed in on a phone or Mac, purchases made through Apple or Google are linked in RevenueCat to an identifier derived from your Thợ Cam account (not your email), so PRO also works on your other devices. Bank-transfer payments may be confirmed automatically through SePay, a Vietnamese payment-notification service that reports incoming transfers to our bank account.

Analytics and crash reporting

There are none. Thợ Cam contains no analytics, attribution, advertising or crash-reporting software and does not create an identifier of its own.

When Thợ Cam uses the internet

• Speed test. Running the internet speed test downloads and uploads test data to Cloudflare's speed-test service (speed.cloudflare.com), which sees your IP address as with any internet request.
• WAN IP and DNS lookup. Only when you tap a button in the Internet tool, Thợ Cam asks checkip.amazonaws.com (Amazon Web Services; if that fails, api.ipify.org) for the public IP address of the network you are on, and sends the domain name you typed to Cloudflare's public DNS-over-HTTPS service (cloudflare-dns.com). These services see your public IP address as with any internet request. Nothing from your projects is sent, and nothing runs in the background. If you choose to save the result, the WAN IP is stored only in that project on your device (and appears in its report if you export one).
• Purchases. PRO purchases are handled by Apple or Google, with RevenueCat managing purchase status. RevenueCat assigns an anonymous identifier, or, if you sign in, the account-derived identifier described above. We never see your card details.
• Links you open. The Map button opens Google Maps (in its app or your browser) with the address you entered for the job; the Call button opens your phone app. Support links and the rating prompt open the relevant app or store. What those services receive is governed by their own policies.

Reports you choose to send

Settings and several screens have a Report button for wrong or missing camera specifications, app problems and feedback. You see the whole report first and can edit it. If you choose Send to Thợ Cam, the app sends exactly that text to Kaifuz Studio's service at thocam.kaifuz.com. By default it contains the app version, platform, operating-system version, language, and the camera brand, model and the first three bytes of its MAC address; the full MAC address, serial number and IP address are included only if you tick that option, and recent app errors only if you tick that too. It never includes passwords, job names, addresses, photos or floor plans. We keep your IP address only as a salted hash, used to limit abuse (for example to stop automated spam), and delete reports and those hashes after 180 days. Nothing is sent unless you press Send; you can share, email or copy the report instead.

Beta builds also have two optional report types that you can switch on in Settings. A route result reports how one beta IP-change attempt went, and an experiment result reports how read-only probe packets sent to cameras on your own network were answered. Both contain only fixed result codes and a masked outline of the camera's reply (field names and lengths, not values); they never include the full MAC address, serial number, IP address, passwords or logs. Experiment mode is off by default, nothing is uploaded automatically, and you see the whole report before choosing Send, Share, Email or Copy. A second switch inside experiment mode, also off by default, lets you send one IP-change packet to a camera you pick, after you confirm that camera; the packet repeats the camera's own current IP, mask and gateway, carries no password or username, and is not retried. This is a command packet, not a read-only probe, and it is untested on real cameras. Its result is handled the same way as the other reports. Nothing is sent to the Internet.

Beta builds

Beta builds for Android, Windows and Linux ask thocam.kaifuz.com for a short-lived free-PRO “lease”. The request contains the random device identifier the app created, the platform, the app version and the build number. The service stores these with timestamps; your IP address is kept only as a salted hash, for up to 30 days, to limit abuse. The app tells you when you are using a beta build.

Data retention and deletion

You can delete a job inside the app, or remove all Thợ Cam data by clearing the app's data or uninstalling it. Saved logins can be removed in Settings. If you created an account, you can delete it in the app (Settings → Account → Delete account) or on thocam.kaifuz.com: this deletes your account, sessions and device records and removes your email from activation codes (purchase records are kept for accounting without your email), and asks RevenueCat to delete the linked customer. RevenueCat keeps the store purchase record needed to restore purchases. For questions, contact privacy@kaifuz.com.

Children's privacy

Thợ Cam is a professional tool, not directed to children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as Thợ Cam evolves. The latest version will always be available on this page.

Contact

For privacy questions, email privacy@kaifuz.com.