Privacy Policy — Todiste
1) Who we are
Todiste is provided by Saifullah Ahad (“we”, “us”, “our”).
2) What Todiste does
Todiste lets two nearby Android devices record independent views of the same scheduled moment. The devices exchange their capture records over the same local network, sign each other’s records, and create an evidence bundle that can later be checked for changes.
3) Information processed
Depending on the features and permissions you choose, the app processes:
- Photos: camera images taken during a paired session.
- Capture metadata: timestamps, generated device-key identifiers, public signing certificates, hashes, signatures, and record sequence data.
- Optional location: a location reading and its reported accuracy when location permission is allowed.
- Sensor context: available pressure, ambient-light, heading, and motion readings.
- Local network context: a one-way hash representing the local network segment. The original address is not saved in the evidence record.
- Redaction selections: rectangles you draw when creating a redacted derivative.
Todiste does not include developer analytics, advertising SDKs, crash-reporting services, accounts, or a developer-operated backend.
4) How information is used
- To synchronize a paired camera capture.
- To compare timing, image geometry, and available environmental context.
- To create and verify hashes, signatures, ordering, and cross-signatures.
- To store, export, share, verify, delete, and redact records you control.
5) Device-to-device transfer
When you deliberately join a paired session, both phones exchange the session’s photos, metadata, public-key information, and signatures directly over the local network. The connection uses an encrypted session established by the two devices. A matching confirmation phrase is shown on both phones before capture.
The developer does not receive this data. A person you pair with receives the shared bundle contents and may keep exported copies. Only pair with someone you intend to share the record with.
6) Storage, data retention, export, and deletion
Everything Todiste records stays on your device. We do not store or retain your data on any server, so there is nothing for us to keep, share or delete. On the device your event records and proof documents stay until you delete them in the app, clear the app’s storage, or uninstall Todiste — Android removes the app’s private data when it is uninstalled. We keep no backups of your content, no analytics profiles and no advertising identifiers.
Records are stored in Todiste’s private app storage on each participating device. They remain there until you delete a record or uninstall the app. You can export or share a ZIP bundle using Android’s system file and sharing controls. Exported copies are controlled by the apps, devices, or people you choose.
A redacted derivative does not modify the original record. Deleting a record from its details screen removes its locally stored images, signatures, metadata, and derivatives from that device; it cannot delete copies already exported or held by the paired person.
7) Permissions
- Camera: required to take an independent paired photo.
- Location: optional; adds a location reading and accuracy to a record. The core capture can proceed without it.
- Nearby local network: used to discover and connect the two phones on the same network.
- Device sensors: Android exposes available environmental sensors without a runtime permission.
You can change camera and location permissions in Android Settings.
8) Feedback and contact
The About screen opens your chosen email app with the public support address. Todiste does not transmit a feedback message itself. Your email provider and selected email app process anything you choose to send under their own policies.
9) Security and technical limits
Todiste uses Android Keystore signing keys, encrypted local transport, hashes, and cross-signatures. Hardware key protection is reported only when the device reports it; software-backed keys are labelled honestly. No security method is infallible.
The verifier reports whether bundled files and recorded technical checks remain consistent. It does not identify subjects, determine why an event happened, or decide whether any authority will accept a record.
10) Children’s privacy
Todiste is not directed to children under 13, or the equivalent minimum age in a user’s jurisdiction. We do not knowingly collect personal information from children. The app has no profiles, public posting, chat, or developer-operated collection service.
11) International use
The app’s core processing is performed by the participating devices. If you export or share a record across borders, the service and recipient you choose may process it in other jurisdictions.
12) Changes to this policy
We may update this policy when the app’s features or legal requirements change. The current version and effective date will remain available on this page.
13) Contact
For privacy questions or requests, email [email protected].