Privacy Policy — PhoneWitness

The data controller is ITSquareD d.o.o., Omladinskih brigada 90A, Novi Beograd, Serbia (PIB 114538977, MB 22036769). For any privacy questions or to exercise your rights, contact us at office@it2.rs.

PhoneWitness has two roles, chosen at registration:

• Eagle (protected person) — runs a service that continuously detects incidents (voice keywords, falls, geofence exits) and captures audio, photos, and location.
• Angel (guardian) — views sessions and media from linked Eagles and receives push notifications about incidents.

The roles are linked through a six-digit pairing code within the same family (account).

• Audio — keyword detection runs on-device (Vosk). Audio is recorded and uploaded only when an incident is triggered.
• Photos — captured only during an incident, to document the situation.
• Precise location and geofences — used to detect exits from a defined zone and to attach location to a recorded incident; location may also be used while the app runs in the background during monitoring.
• Motion data (accelerometer) — used on-device for fall detection.
• Account and pairing data — registration details and the links between Eagle and Angel users within a family.
• Notification token — a Firebase Cloud Messaging (FCM) token, used to notify Angels about an incident.

Incident detection (voice, fall, geofence) runs locally on the device. Data leaves the device only when an incident is triggered — at that point audio, a photo, and location are uploaded to our server so a linked Angel can respond.

We store captured data with trusted processors: media (audio and photos) is stored via Amazon Web Services (AWS S3), and push notifications are delivered through Google Firebase (FCM).

Incident data is shared only with the Angel(s) linked in the same family. We do not sell personal data or use it for advertising.

We keep data while the account is active. When you delete your account or request erasure, we remove the associated personal data and media. To request deletion, email us at office@it2.rs. (Note: media view links expire after 7 days, which is separate from data deletion.)

Under Serbia's Personal Data Protection Act and, where applicable, the General Data Protection Regulation (GDPR), you have the right to access, correct, and erase your data, to restrict and object to processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with the competent supervisory authority (the Commissioner for Information of Public Importance and Personal Data Protection).

PhoneWitness is intended to protect at-risk individuals, including cases where a guardian sets up monitoring on another person's behalf. Where monitoring is established for a minor or a person who cannot give consent, it must be set up by a parent or legal guardian, who is responsible for use in accordance with applicable law.

• Microphone — voice keyword detection and audio capture during an incident.
• Camera — photo capture during an incident.
• Location (including background) — geofences and incident location during monitoring.
• Notifications — sending alerts to Angels.

We may update this policy from time to time. The last-updated date is shown at the top of this page, and we will inform you in the app of material changes where appropriate.

For any questions about this policy or how we process your data, email us at office@it2.rs.