Witness audio

---

Effective date: February 7, 2026  |  Last updated: February 7, 2026

Witness Audio (“we,” “our,” or “the app”) is a mobile application that records audio in a rolling buffer and allows you to export recordings to your device. This Privacy Policy explains what information we collect, how we use it, and your choices. Please read it carefully.

Contact: For privacy-related questions or requests, contact us at info@lybbtech.com.

1. Who is responsible for your data?

The Witness Audio app is made available by Lybb Tech Inc. For the purposes of this policy, “we” refers to the provider of the Witness Audio application. We are the data controller for the data described below that we process.

2. Information we collect and how we use it

2.1 Audio recordings

• What we collect: When you use the recording feature, the app records audio from your device’s microphone and stores it in a rolling buffer on your device (e.g., up to 2–12 hours, depending on your plan). When you export, the app saves the selected portion as an audio file (e.g., WAV) on your device.

• How we use it: Audio is only stored on your device. We do not upload, transmit, or have access to your audio recordings. Recording, buffering, and exporting happen locally. We cannot hear, access, or store your recordings on our servers.

• Retention: Buffered audio is overwritten as new audio is recorded. Exported files remain on your device until you delete them.

2.2 Location data

We use location only in the following ways, and only on your device:

• Safe Zones: If you enable Safe Zones, the app uses your location to detect when you enter or leave zones you define, so it can automatically pause or resume recording. This is done on the device; we do not receive or store your Safe Zone locations or your position.

• Evidence packages: When you export a recording, you may create an “Evidence Package” that includes metadata to help verify the recording (e.g., for legal or authenticity purposes). That metadata can include location samples taken during the recording and at export time, plus device and app information. This information is saved only in the evidence folder on your device (e.g., in your Documents or app storage). We do not receive or store this data.

We do not use your location for advertising or analytics, and we do not send your location to our servers.

2.3 App usage analytics (optional)

• What we collect: If you have not opted out, we use Firebase Analytics (Google) to collect anonymous, aggregated data about how the app is used—for example, screen views, that recording was started or stopped, that an export was completed, or that certain features (e.g., Safe Zones, schedule) were used. This does not include your name, email, audio, or precise location.

• How we use it: To understand feature usage, improve the app, and fix issues. Data is aggregated and not tied to your identity.

• Your choice: You can turn off analytics at any time in the app: Menu → Privacy → “Share app usage analytics” (turn the switch off). This only affects analytics; crash reporting is separate (see below).

• Third party: Analytics are processed by Google (Firebase). Their privacy policy applies: Google Privacy Policy.

2.4 Crash reports and diagnostics

• What we collect: We use Firebase Crashlytics to collect crash reports and related technical information (e.g., device model, Android version, stack traces) when the app crashes or when we log non-fatal errors. This helps us fix bugs and improve stability.

• What we do not collect in crash reports: We do not include your audio recordings or your location in crash reports. Crash data is technical only.

• Your choice: Crash reporting is not separately toggleable in the app; it is part of our service to maintain stability. If you do not want any crash data sent, you would need to stop using the app.

• Third party: Crashlytics is provided by Google. Their privacy policy applies: Google Privacy Policy.

2.5 Information you give us directly

• Support / bug reports: If you contact us (e.g., by email to the address in the app for bug reports), we will use the information you provide (such as your email address and message) only to respond to your request. We do not use it for marketing unless you agree.

• Consent and preferences: When you accept the in-app consent and privacy notice, we store that you have accepted (e.g., in local app preferences). We may record that consent was given in analytics (without identifying you) for compliance and product purposes.

3. What we do not collect

We do not:

• Collect your name, email, or contact information except when you voluntarily email us (e.g., for support).

• Sell your personal data to anyone.

• Use your data for advertising or partner ad networks.

• Collect the contents of your recordings or your precise location on our servers.

• Use third-party advertising or tracking SDKs for ads.

4. Legal basis for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom:

• Consent: We rely on your consent for in-app analytics (when you have left the analytics option on) and for the consent and privacy notice flow.

• Legitimate interests: We use crash reports and diagnostics to maintain and improve the app’s stability and security, which we consider a legitimate interest. We do not use this data for marketing.

• Contract: Processing that is necessary to provide the app (e.g., storing preferences, enabling recording and export) is done to perform our contract with you (providing the app).

You may withdraw consent for analytics at any time in the app (Menu → Privacy). Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Data retention

• On your device: Audio in the rolling buffer is overwritten over time. Exported files and evidence packages stay on your device until you delete them. We do not control your device storage.

• Analytics: Firebase Analytics data is subject to Google’s retention and aggregation policies. We do not retain raw analytics data indefinitely on our own systems.

• Crash reports: Retained as long as needed to diagnose and fix issues, in line with Firebase Crashlytics practices.

• Support emails: We retain support correspondence as long as needed to resolve your request and for a reasonable period for record-keeping.

6. Sharing and third parties

We do not sell your personal data. We share data only as follows:

• Google (Firebase): Analytics and Crashlytics data are processed by Google in accordance with their privacy policy and terms. Google may process data globally. See Google Privacy Policy and Firebase terms.

• Legal requirements: We may disclose information if required by law, court order, or government request, or to protect our or others’ rights, safety, or property.

• Business transfers: If we transfer our business or assets, we may transfer data as part of that transaction, subject to the same privacy commitments.

Your audio and location data are not sent to us or to third parties; they remain on your device (including in exports and evidence packages you create).

7. Data security

• Audio and location used by the app are processed and stored only on your device.

• We use industry-standard services (Firebase) for analytics and crash reporting, with security measures as described in Google’s policies.

• No method of transmission or storage is 100% secure; we take reasonable steps to protect the data we process.

8. Your rights

Depending on where you live, you may have the right to:

• Access: Request a copy of the personal data we hold about you.

• Correction: Request correction of inaccurate data.

• Deletion: Request deletion of your personal data, subject to legal exceptions.

• Opt-out of analytics: Turn off “Share app usage analytics” in the app (Menu → Privacy).

• Portability: In some jurisdictions, request a portable copy of your data.

• Object or restrict processing: In some jurisdictions, object to or ask for restriction of certain processing.

• Withdraw consent: Where we rely on consent, you may withdraw it at any time (e.g., by disabling analytics in the app).

• Complain: Lodge a complaint with a supervisory authority in your country.

To exercise these rights, contact us at info@lybbtech.com. We will respond within a reasonable time and in line with applicable law. Note: we do not have access to your recordings or location; those stay on your device. For data held by Google (e.g., Firebase), you may also need to use Google’s tools and policies.

California residents: We do not sell personal information as defined under the CCPA. We may “share” or “disclose” information for analytics/crash reporting as described above; you can opt out of analytics in the app.

9. Children

The app is not directed at children under 13 (or higher age where required). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it as required by law.

10. International transfers

If you are outside the United States, your data (e.g., analytics and crash data sent to Firebase) may be transferred to and processed in the United States or other countries where Google operates. We rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) where required by law.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy at the same URL (e.g., in the app and on our privacy policy page) and update the “Last updated” date. For material changes, we may notify you in the app or by email if we have your contact details. Continued use of the app after the effective date of changes constitutes acceptance of the updated policy.

12. Contact

For privacy questions, requests, or complaints:

• Email: info@lybbtech.com

• In-app: Menu → Privacy (to view the privacy notice and manage analytics)