Privacy Policy
UPDATED MAY 2026Witness is a two-party log. Your data is small, the people who can see it are few, and we will tell you exactly what we collect and what we don’t. This document is in plain English. If something here is unclear, email support@stalwartcrest.com.
What we collect
- Your phone number (for sign-in via OTP)
- Your display name and optional avatar
- Entries you create (text, optional photos, optional voice notes)
- Timestamps and confirmation events
What we don’t collect
- Your contacts
- Your location
- Your microphone or camera outside of explicit voice/photo capture
- Browsing behavior, app behavior analytics, or usage telemetry
- Anything that would let us profile you for advertising
Where data lives
Encrypted in transit. Encrypted at rest in Supabase Postgres (US region). Photos and voice notes in Supabase Storage, encrypted at rest.
Who can see your data
You. The person you paired with. No one else, ever — not Stalwart Crest staff, not contractors, not third-party services.
Third-party services
- Supabase (database, storage, auth)
- Apple Push Notification service (for iOS notifications)
That is the complete list.
Your rights
- Access: see all your data inside the app
- Export: download a JSON archive of your entries from Account → Export
- Delete: delete your account from Account → Delete. Full purge in thirty days.
- Object: email support@stalwartcrest.com
How to delete your account
One tap from Account settings. The account is queued for purge in thirty days. Sealed entries you authored remain in your pairs’ records, attributed to a deleted user — that’s by design, so one party can’t rewrite shared history by leaving.
Children’s privacy
Witness is for ages 13 and up. We do not knowingly collect data from anyone under 13. If you believe a child under 13 has used Witness, email support@stalwartcrest.com and we will delete the account.
Changes to this policy
We will update this page if anything changes and update the date at the top. Material changes will be communicated via the app.