Witness
Witness Privacy Policy
How Witness handles your personal data, and your rights under GDPR and Turkish KVKK.
Who we are
This policy explains how Witness (the "app") handles personal data. The app is developed and published by Ibrahim Akcay, independent app developer based in Türkiye, trading as WXW Labs ("we", "us"). We are the controller of the personal data described here.
At a glance
Data Not Collected. Witness does not send any personal data to us or to partners. What you create in the app stays on your device.
Data that stays on your device
The following is stored only on your device. We cannot see or access it:
- Recordings and imported audio files.
- Transcripts, speaker labels, reports, bookmarks, notes and your questions with their answers.
- Temporary voice features used to separate speakers exist only in memory during processing and are discarded.
- Recordings and the database are excluded from device backups unless you turn backups on in Settings.
You can delete this data in the app or by deleting the app. If you back up your device, Apple or Google may include app data in your device backup under their own terms; we have no access to these backups.
Device permissions
The app asks for these permissions only when you use the related feature. You can allow or deny them, and change your choice at any time in your device settings (on iPhone and iPad: Settings > Privacy & Security). Denying a permission only disables the related feature.
| Permission | Why |
|---|---|
| Microphone | To record meetings, lectures and interviews only while you are recording. Audio is processed on your device and never uploaded. |
Why we use data and our legal bases
| Purpose | Legal basis |
|---|---|
| To deliver purchases and keep the records the law requires | GDPR Art. 6(1)(b) and (c) KVKK Art. 5(2)(c) and (ç) |
| To answer your support requests | GDPR Art. 6(1)(b) and (f) KVKK Art. 5(2)(c) and (f) |
You do not have to give us any personal data to use the app.
Artificial intelligence
Transcription, speaker separation, structured reports and answers to your questions about a recording, produced by open-source speech and language models running on your device.
The AI runs entirely on your device. Your prompts, content and the AI's answers are not sent to us or to an AI provider.
Your content is not used to train AI models.
AI-generated content is labelled as such in the app.
AI output can be wrong or incomplete: misheard words, wrong speaker attribution, missed or misstated items. Do not rely on it for medical, legal, financial or safety-critical decisions; verify important details against the recording.
The AI does not make decisions that produce legal or similarly significant effects on you.
Purchases
Purchases are processed by Apple through the App Store and, on Android, by Google through Google Play. We never receive your card or payment details. For in-app purchases we receive a verified confirmation of the transaction (product and status) so that we can deliver what you bought.
How long we keep data
Everything stays on your device until you delete a recording, delete all data in Settings or delete the app. An option deletes the original audio after processing.
Security
Because your data stays on your device, it is protected by your device's own security, such as your passcode and data protection. Keep your device updated and locked.
Children and minors
Not directed at children. Minors should use it with a parent's or guardian's involvement where recording-consent laws require.
The app does not collect personal data from anyone, including children.
Automated decisions and profiling
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects (GDPR Art. 22), and we do not build profiles of you for advertising or to sell to others. You keep the right under KVKK Art. 11(1)(g) to object to any result against you arising exclusively from automated analysis.
If something goes wrong
If a security incident affects personal data we hold, we take immediate steps to contain it, notify the Personal Data Protection Board within 72 hours of becoming aware of it (KVKK Art. 12(5)) and, where required, the competent EU supervisory authority (GDPR Art. 33), and inform the people affected as soon as possible with what happened and what they can do.
Support requests
When you contact us through a support form, we store the details you enter (subject, message, category, the app concerned and, if you provide them, your name, e-mail address, app version and device model), the conversation that follows, the language of the page and the time. We use them only to answer and resolve your request, on the basis of our contract with you or our legitimate interest in providing support (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
Requests are stored in Google Cloud Firestore in the European Union (multi-region eur3). Each request has a private link that only you receive; anyone who has the link can read the conversation, so keep it to yourself. We keep requests for at most 24 months after they are closed and delete them earlier when you ask.
Your rights
Depending on where you live, you can ask us to give you access to your personal data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting earlier processing.
To exercise a right, contact us as described below. We answer within one month (GDPR) and at the latest within 30 days (KVKK), free of charge. If you are in the EU or EEA, you may also complain to your local data protection authority; in Türkiye, to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu). E-mail emirhan@wxwlabs.com, or open a request through our support form.
Information notice under Turkish law (KVKK Art. 10)
Under the Turkish Personal Data Protection Law No. 6698 (KVKK), the data controller is Ibrahim Akcay, independent app developer based in Türkiye, trading as WXW Labs.
- Purposes: answering support requests you send us.
- Recipients: no one; your data is not transferred; and competent authorities where the law requires.
- Method and legal basis: The app itself collects no personal data; only the support forms on this website collect the data you enter. Personal data is processed because it is necessary for the performance of the contract with you (Art. 5(2)(c)), for our legitimate interests provided your fundamental rights are not harmed (Art. 5(2)(f)), to fulfil legal obligations (Art. 5(2)(ç)) and, where required, on the basis of your explicit consent (Art. 5(1)).
- Transfers abroad: none; we do not transfer your data abroad.
- Your rights (Art. 11): to learn whether your data is processed and request information about it; to learn the purpose and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data and its deletion or destruction, and notification of these to recipients; to object to results against you arising exclusively from automated analysis; and to claim compensation for damage caused by unlawful processing.
- How to apply: in writing, or by e-mail from the address registered with us, to emirhan@wxwlabs.com, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are answered free of charge within 30 days at the latest.
Notice for US residents
We do not sell personal information or share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act and similar US state laws, and we do not use sensitive personal information to infer characteristics about you. You may exercise the rights those laws give you by contacting us; we will not discriminate against you for doing so.
Apple
Apple processes data related to downloading the app, purchases and, if you have chosen to share analytics with app developers, crash reports and aggregated statistics, under Apple's own privacy policy. These reports never include the content you create in the app. Apple Privacy Policy
Google Play
On Android, Google processes data related to downloading the app from Google Play, purchases and, if you have chosen to share usage and diagnostics with developers, crash reports and aggregated statistics, under Google's own privacy policy. These reports never include the content you create in the app. Google Privacy Policy
Changes to this policy
We update this document when our apps or the law change. The date at the top shows the latest version. If a change materially affects you, we will tell you in the app or on this website before it takes effect.
This document is published in English and Turkish. For users in Türkiye, the Turkish version prevails if the two differ.
Contact
Ibrahim Akcay, independent app developer based in Türkiye, trading as WXW Labs. E-mail emirhan@wxwlabs.com, or open a request through our support form.