Privacy Policy

Section 01Data we collect

Witnessed collects the minimum necessary to deliver the service:

• Evidence files: photos, videos and audio recordings you capture inside the app. These are stored exclusively in your personal iCloud private database (CloudKit). We have no access to these files.
• File hashes: a cryptographic fingerprint (SHA-256 hash) of each file is sent to a trusted timestamp authority (DigiCert) to obtain an RFC 3161 timestamp token. The hash cannot be used to reconstruct your file.
• Location data: GPS coordinates at the time of capture, embedded in your evidence certificate. Location is only accessed when you are actively using the app to capture evidence.
• Device information: device model and iOS version, recorded in your evidence certificates for verification purposes.
• Crash and diagnostic data: anonymised crash reports via Sentry, used solely to fix bugs. No evidence content is included.

Section 02Data we do not collect

• We never store your evidence files on our servers.
• We do not sell, share or monetise your data.
• We do not collect advertising identifiers.
• We do not track you across other apps or websites.
• We do not require you to create an account or give us your name, email address or phone number to use the app.

Section 03iCloud storage

All evidence files and certificates are stored in your personal iCloud account using Apple’s CloudKit framework. This means your data is subject to Apple’s iCloud Terms and Conditions and is protected by Apple’s encryption. Witnessed cannot access, read or retrieve your CloudKit data. Only you can, via your Apple ID.

Section 04Timestamp authority

When you capture evidence, a SHA-256 hash of your file is transmitted to DigiCert’s timestamp authority to obtain an RFC 3161 timestamp token. DigiCert receives only the hash, never the file itself. DigiCert’s privacy policy is available at digicert.com.

Section 05Permissions

• Camera: to capture photo and video evidence.
• Microphone: to capture audio recordings and video with sound.
• Location: to embed GPS coordinates in your evidence certificates. Only accessed during active capture.
• Photo Library: to let you select existing photos or videos as evidence, and optionally save captures to your library.
• Face ID: to protect your evidence library from unauthorised access. Biometric data is handled entirely by Apple’s LocalAuthentication framework and never leaves your device.

Every permission is optional and requested only at the point it is needed. Declining a permission limits the related feature but does not prevent you from using the rest of the app.

Section 06In-app purchases

Purchase transactions are processed by Apple and subject to Apple’s privacy policy. We receive only a confirmation of the transaction, with no payment card details.

Section 07Legal basis & your rights (UK GDPR)

Where the UK GDPR and Data Protection Act 2018 apply, our legal basis for processing the limited data described above is performance of a contract (delivering the timestamping and certificate service you asked for) and legitimate interests (fixing crashes so the app works reliably).

You have the right to access, correct, export or erase your personal data, and to object to processing. Because your evidence is held in your own iCloud account rather than by us, most of these rights you can exercise directly and immediately:

• Access and export: open any item in the app and export the file and its PDF certificate.
• Erasure: delete an item in the app, or remove the app’s data from iCloud in iOS Settings. Once deleted from your iCloud, it is gone; we hold no copy to delete.
• Diagnostics: you can turn off crash reporting in the app’s settings at any time.

If you want to exercise a right that you cannot action yourself, contact us using the details in section 11 and we will respond within one month. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

Section 08Data retention

Your evidence files and certificates remain in your iCloud account for as long as you choose to keep them. We do not hold them and therefore cannot retain or delete them on your behalf. Anonymised crash reports are retained by our diagnostics provider for a limited period and contain no evidence content and nothing that identifies you personally.

Section 09Children’s privacy

Witnessed is not directed at children under the age of 13. We do not knowingly collect personal information from children.

Section 10Changes to this policy

We may update this policy from time to time. Any changes will be posted here with an updated date. Continued use of the app after changes constitutes acceptance of the revised policy.

Section 11Contact

If you have questions about this privacy policy or how your data is handled, please contact us at lewisbradley49@gmail.com. We aim to reply within two working days.

See also our Terms of Service and Support page.