Witness is an indie prototype that helps you track the real-world impact of your charitable giving. We collect as little as possible and try to be transparent about everything we do collect. This page explains it in plain language.
1. What stays only on your device
Your profile (name, birthdate, country, gender, language, currency, goal, theme) and your donation log are stored in your browser's localStorage. They never leave your device, are not sent to our servers, and are not visible to us. If you clear your browser data, switch browsers, or use a private window, this information is gone.
2. What we receive when you contact us
If you submit the contact form on your profile, we receive the name, email, optional message, and consent flag you provide. These are stored in our managed backend (Lovable Cloud, powered by Supabase) so we can reply to you and, if you opted in, send you product updates.
- We do not sell, rent, or share this data with third parties.
- We retain it until you ask us to delete it, or until the project shuts down.
3. Cookies and tracking
Witness does not use advertising cookies, third-party analytics, or cross-site trackers. The only browser storage we use is localStorage for your profile, donations, language preference, a one-time dismissal flag for the storage notice, and your usage-data choice.
Optional anonymous usage data. Usage tracking is off by default and only starts if you opt in (at the end of onboarding or in You → Your data). If you don't opt in, nothing is sent. When on, we store in our hosted database: a random anonymous ID generated on your device, the event name, a timestamp, and these events only — first open on this device, onboarding completed, app opened (at most once per day), donation logged (charity identifier or "custom", amount, currency, whether it's recurring, your answer to "Without Witness, would you have made this donation?" — sent as a counterfactual field with one of same_amount, smaller_amount, no, not_sure or unanswered — and, if given, the amount you'd have given otherwise), and goal set (goal type). We never send your name, email, birthdate, country or gender. Turn it off anytime with the toggle in You → Your data; this stops all sending and deletes the anonymous ID from your device. Because the data cannot be linked to you, we cannot identify or retrieve your individual events.
4. Hosting and processors
The app is hosted on Lovable / Cloudflare's edge network. Contact-form submissions are stored in Lovable Cloud (Supabase). Fonts are loaded from Google Fonts, which may receive your IP address as part of the normal HTTP request.
5. Your rights
You can exercise the rights afforded by GDPR, UK GDPR, CCPA, and similar laws — access, rectification, erasure, restriction, and portability — at any time:
- Local data: use the Export JSON and Delete all local data buttons in your profile.
- Contact-form data: email us using the contact form and we'll delete your records within 30 days.
6. Children
Witness is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has sent us personal data, please contact us so we can delete it.
7. Security
We use TLS in transit and rely on our hosting providers' production security controls. No system is perfectly secure; you use Witness at your own risk.
8. Changes
We may update this policy as the product evolves. Material changes will be reflected in the "Last updated" date above.