1. Introduction
This Privacy Policy explains how personal data and other information are processed in the mobile application “Witnessy” (the “App”), provided by IAsoftware, based in Marcina Kasprzaka 31/119, 01-234 Warsaw, Poland, e-mail: support@witnessy.com (the “Provider”).
The App enables continuous documentation of surrounding sound using loop recording. The App does not collect or transfer audio recordings outside the User’s device. All recordings and settings remain stored locally on the device and are not transmitted to any external servers.
↑ back to contents2. Scope
This Policy applies to your use of the “Witnessy” mobile App available on Google Play and to the informational website witnessy.com. Using the App means you accept this Policy. If you do not agree, please uninstall the App and stop using it.
↑ back to contents3. Data processed by the App
Purpose of using user data:
- to enforce our Terms of Use, Community Guidelines, and other terms and policies;
- to improve and develop the Service, ensuring that tools within the Service are presented in the most effective way for you and your device, including by training and improving our technologies (such as machine-learning models and algorithms);
- to manage operations and internal administration, including troubleshooting, data analysis, testing, research, statistical purposes, and surveys;
- to provide advertising services, including delivering ads (including personalized ads where permitted) and measuring and understanding ad effectiveness;
- to comply with our legal obligations, or where necessary to perform a task carried out in the public interest, or to protect the vital interests of our users and other persons.
3.1. On-device data
Audio recordings: the App uses the device’s microphone to create a recording loop. Audio is buffered temporarily; any saved segment is stored only on your device. Files may be encrypted at rest (AndroidKeyStore / EncryptedFile). The Provider has no access to these recordings.
App settings: configuration data (e.g., loop length, language preferences) are stored locally in SharedPreferences or a local database.
Exported files: you may export recordings to a file format (e.g., .m4a). Exported files are no longer encrypted by the App; you are responsible for securing exported files.
3.2. Third-party services (Google)
Google AdMob — serving ads. May use the advertising ID, IP address, device data, and ad interaction data. Learn more: policies.google.com/technologies/ads
Google User Messaging Platform (UMP) — obtaining your consent (GDPR) and storing consent status locally. Learn more: privacy.google.com/businesses/adsservices/
Data collected by these services are processed under Google’s policies. The Provider does not have access to them.
↑ back to contents4. Processing scope & legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Proper operation of the App | settings, device technical data | Art. 6(1)(f) GDPR (legitimate interest) |
| Serving ads | AdMob data (advertising ID, IP, device data) | Art. 6(1)(a) GDPR (consent) |
| Obtaining & storing consent | UMP data (consent status) | Art. 6(1)(c) GDPR (legal obligation) |
| Local storage of audio recordings | audio files on device | Out of GDPR scope (no transfer to Provider) |
5. App permissions
- Microphone (RECORD_AUDIO): to record audio.
- Storage / files access: to save and export recordings.
- Foreground Service: background recording with a persistent notification.
- Internet Access: displaying ads and obtaining consent (AdMob, UMP).
If permissions are denied, some features may not work.
↑ back to contents6. Data not collected by the Provider
- no user accounts are created,
- no data is stored in the cloud,
- we do not have access to your recordings,
- we do not analyze recording content,
- we do not run user profiling or analytics,
- we do not share personal data with third parties other than Google integrations (as above).
7. Storage & security
All recordings and local data are stored only on your device. Files (if the feature is enabled) are protected using Android mechanisms (AndroidKeyStore + AES/GCM). The Provider keeps no backups and cannot restore lost recordings. You are responsible for securing access to your device.
User data will be retained for as long as necessary to provide the services and for the other purposes described in this Privacy Policy. We retain information where required to meet contractual and legal obligations, where we have a legitimate business interest (e.g., to improve and develop the Services and to enhance their safety, security, and stability), to protect the rights of others, and to establish, exercise, or defend legal claims.
↑ back to contents8. Ads & consent
The App serves ads via Google AdMob. In regulated regions (e.g., the EU), you are asked for consent via UMP before ads are shown.
You can manage ad preferences in the App (if available) or via Google settings: adssettings.google.com
↑ back to contents10. Your rights
- access,
- rectification,
- restriction of processing,
- data portability,
- erasure (“right to be forgotten”),
- withdrawal of consent (where processing is based on consent),
- complaint to your supervisory authority.
In practice, most data is processed locally and the Provider has no access to it — some rights may therefore be technically impossible to fulfill. Privacy contact: support@witnessy.com.
↑ back to contents11. Transfers outside the EEA
Google services (AdMob, UMP) may transfer data to countries outside the EEA (e.g., the USA) under the EU Standard Contractual Clauses and Google’s applicable terms.
↑ back to contents12. User age
The “Witnessy” App is intended only for persons who are at least 18 years old.
By using the App, you confirm that you are 18+. The Provider does not verify age and does not collect data that would allow age verification.
↑ back to contents13. Changes to this Policy
We may update this Policy due to changes in the App, law, or technology. The current version will always be available on witnessy.com and in the App. The update date appears at the top of this document.
↑ back to contents14. Contact
- Data controller: Igor Apelski (individual)
- E-mail: support@witnessy.com
- Based in: Warsaw, Poland
- Website: witnessy.com