Witnessed — Privacy Policy

Last updated: 29/07/2026

Witnessed ("Witnessed", "we", "us") is a personal-safety app operated by Mirelu, based in FRANCE. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the choices you have. By using Witnessed you agree to this policy.

1. What Witnessed does

Witnessed lets you record video and audio if you feel unsafe. When you start a recording, a countdown is armed; if you do not cancel it in time, your chosen emergency contacts are alerted with your recording, your last-known location, and a link to a private web page. Because delivering that alert is the core purpose of the app, some data is necessarily shared with your emergency contacts, as described below.

2. Information we collect

Account & identity

• Phone number (if you sign up with a phone), verified by SMS; or
• Google account — your email address and Google account identifier (if you sign in with Google);
• First name you provide, shown to your contacts in an alert;
• PIN and optional decoy PIN, stored only as a one-way hash (we cannot read them);
• Preferred language.

Emergency contacts

The name, phone number, and/or email address of the people you choose as emergency contacts. You are responsible for having their permission to add them. You can edit or remove them at any time.

Recordings & sensor data

• Video and audio you record in the app, uploaded to and stored on our servers;
• Location (GPS coordinates) captured while recording, if you grant location permission, so contacts can see your last-known position;
• Camera and microphone access, used only while you are recording.

Device & usage

• Push notification token, so we can notify your device (e.g. that an alert is armed);
• Alert metadata — timestamps, status, and unguessable share tokens for the alert pages;
• Basic technical logs needed to operate and secure the service.

Purchases

If you subscribe to Guardian, purchases are processed by Google Play and RevenueCat. We receive your subscription status and identifiers — never your card or payment details.

3. How we use your data

• To deliver safety alerts to your emergency contacts (recording, location, name, alert link);
• To create and secure your account, and verify your phone number;
• To send you and your contacts notifications by push, email, SMS, and (paid) voice call;
• To provide, localize, and improve the service and prevent abuse/fraud;
• To manage subscriptions and enforce plan limits;
• To comply with legal obligations.

We do not sell your personal data or use it for advertising.

4. How alerts share your data

When an alert fires, we contact the emergency contacts you configured. They may receive your first name, your recorded video/audio, your last-known location, and a link to a private web page authorized by an unguessable token (no login required). Anyone with that link can view the alert while it is available, so treat the link as sensitive. A "test" alert is clearly labeled as a test.

5. Third-party services (processors)

We share the minimum data needed with service providers who process it on our behalf:

Provider	Purpose	Data
Google (Sign-In, Play, Play Billing)	Login, app distribution, subscriptions	Email, account ID, purchase status
RevenueCat	Subscription management	Account ID, subscription status
Twilio	SMS verification, alert SMS & voice calls	Phone numbers, message content
Resend	Alert emails	Contact email, alert content
Expo	Push notifications	Push token

Each provider has its own privacy policy. We may also disclose data if required by law or to protect safety.

6. How long we keep it

• Recordings (free plan): viewable for 3 days, then blocked, then permanently deleted after 10 days.
• Recordings (Guardian plan): retained while you are subscribed, up to the most recent 10.
• Account data: kept until you delete your account.
• Verification codes and short-lived tokens are deleted shortly after use.

7. Your rights & choices

• Delete your account and data from within the app at any time.
• Access or correct your profile and contacts in the app.
• Permissions (camera, microphone, location, notifications) can be changed anytime in your device settings; location and notifications are optional.
• Depending on where you live (e.g. the EU/EEA under GDPR, or California), you may have additional rights to access, portability, restriction, or objection. Contact us to exercise them.

8. Recording other people

Witnessed can capture other people in your video and audio. Laws about recording others (including audio/consent laws) vary by location and are your responsibility. Only record where you are lawfully permitted to do so.

9. Security

Data is transmitted over encrypted connections (HTTPS/TLS). PINs are stored as one-way hashes. Alert pages are protected by unguessable tokens. No system is perfectly secure, but we take reasonable measures to protect your data.

10. Children

Witnessed is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

11. International transfers

Your data may be processed in countries other than your own (including where our providers operate). Where required, we rely on appropriate safeguards for such transfers.

12. Changes to this policy

We may update this policy. We will change the "Last updated" date above and, for material changes, notify you in the app.

13. Contact

Questions or requests about your privacy: mireludev@gmail.com