WITNUSS NOTIFY ME

HYNDSYT

Privacy Policy

Effective date: October 10, 2026

Hyndsyt is the iPhone app for the Witnuss, a small device you carry that keeps the last few minutes of sound so you can save a moment after it happens. This policy explains what the app keeps, what our servers hold, and what you control.

Who we are: Hyndsyt Inc., Ottawa, Ontario, Canada. Contact: support@hyndsyt.io.

The short version

  • Your Memories stay with you. Recordings, transcripts and the places on your Memory Map live on your Witnuss and your iPhone. We never receive them unless you choose to share one.
  • What you share is end-to-end encrypted. Moments, locations, Company sound and Flare sound you send to friends are sealed on your phone. Our servers carry them but cannot read them.
  • No ads, no tracking, no selling. The app has no advertising, no analytics or tracking tools, and we never sell or rent your data.
  • You can delete your account in the app, at any time.

What stays on your devices

These stay on your Witnuss and your iPhone, unless you share them:

  • Your recordings (Memories) and anything made from them.
  • Transcripts. Speech recognition runs entirely on your iPhone.
  • The locations saved with your Memories, and your Memory Map.
  • Photos you attach to a Memory, and people you tag from your contacts.
  • Calendar events and completed reminders, which the app reads only while you look at a day, search your days, or view a place's visits in Long Memory, and never stores.

If your iPhone backs up to iCloud or to a computer, that backup includes these, as it does your other app data. Apple or your computer holds that backup, not us, and Apple's privacy policy applies to an iCloud backup.

When the app turns a location into a place name, or shows a street view, it asks Apple's maps service once. Apple's privacy policy applies to that request.

Daily Trace

Daily Trace is optional and off by default. If you enable it and allow Always location access, Hyndsyt saves where this iPhone was, so a place can help you find a time in Long Memory. (If you limit location precision in iOS, approximate areas are saved instead.) It can record while the app is not open. Location history can have gaps and does not establish that your Witnuss was with you.

This history stays on this iPhone, outside device backups. It is not sent to our servers or your friends and is not included when you share a Memory. Apple supplies the map through its mapping services.

Locations are kept for 30 days by default; you can choose 7, 30 or 90 days. Expired locations are hidden and removed when the app next has time to run. In Memory Map's Daily Trace settings, you can stop recording or delete all history. You can also delete one day from the map. Deleting locations does not delete audio or saved Memories. Deleting your social account does not clear this independent on-device history; use Delete all location history to do that.

What our servers hold

The sharing features (Between Us and Backed) run on our servers, hosted by Amazon Web Services in the United States (Ohio).

Your account. Your username, which is public and can be found by others, and the public keys and list of iPhones that let your devices prove it is you. We do not ask for your email, phone number or a password. Your account is protected by a 24-word recovery phrase that only you hold.

Your connections. Who you are connected with, and invitations you have sent or received.

Your profile. Your name and photo, encrypted separately for each friend. Copies expire after 30 days unless refreshed.

Moments you share. Sound, any photo, and details, end-to-end encrypted. The encrypted file stays on our servers only until your friend's phone has received it, and at most 14 days. A small record that the moment exists is kept so it plays only for the people you chose. Reactions and replies on a moment are encrypted the same way; we keep who sent one and when, never what it says.

A Later. A moment you send now that opens on a day you pick. It is end-to-end encrypted and kept exactly like a moment you share: it reaches your friend's phone right away, and their app keeps it closed until the time you chose. When it opens is sealed inside the moment, so our servers never see it.

Group moments. Encrypted, kept while the group exists.

Long Memory requests. A friend's request and any clip you choose to send, encrypted, kept up to 90 days. Also your choice of which friends can see that you keep a Long Memory, and a record of each visit: when it happened and how much was played, kept up to 90 days.

Company. When you start Company: the sound your phone's microphone hears from your tap until it ends, end-to-end encrypted so only the friends you picked can hear it (a friend you add later can play it from the start); which of them are listening and who has listened, and when one taps I'm here; and any short voice reply a friend sends you, encrypted so only you and that friend can open it. If you play a reply out loud while you share, the friends listening can hear it too. Company ends when you tap End, after 2 hours, or when nobody has listened for 15 minutes and you do not keep it going. We keep the sound, the replies and who listened for 30 days after it ends, so your friends can play it later, then erase them. You can stop sharing a recording sooner from its page; friends who already saved it keep their copy. If you send a Flare while Company runs, the minute before your Flare also goes to your Backed circle, as part of the Flare.

Backed.

  • While you have a window running: who you asked and the times, which we need to run the window, and your note and location, encrypted so only those friends can read them. The location history is deleted when the window ends.
  • Messages written in a window, by you or the friends in it: encrypted the same way as the note. We keep who wrote each one and when, never what it says. They are deleted when the window ends.
  • If you send a Flare: your location, and the sound from the moment you press until you stand down. With a Witnuss on you, also up to five minutes from before you pressed.
  • If a window runs out: your location, and sound only if a Witnuss is connected to your phone.
  • Either way, it is encrypted so only your chosen friends can read it. If it starts from a running window, the window's note and messages go with it. It is kept for 30 days, or 1 day for a Flare you stand down as a false alarm. A friend who received it may choose to keep it for up to a year.

Notifications. A notification token for each of your iPhones, so we can deliver alerts through Apple.

Reports. Reports you send about another person, and reports others send about you, kept for one year.

Technical information. Our servers use your IP address to limit abuse. It is stored as a code made from the address and the minute, and set to be removed after about 10 minutes. That code is not anonymous: it could be traced back to the address. Server logs keep error codes, never content, for 7 days. Our database keeps backups for 7 days.

What your friends receive

Anything you send reaches your friends' phones. You can delete your account, but you cannot recall a copy a friend saved outside the app. A Company recording is kept in the app on your phone and on the phones of the friends you picked who saved it, until each of you removes it.

Microphone and location

  • Microphone. The app records when you press record, and when you send a Flare in Backed: from the moment you press Flare until you stand it down. And when you start Company: from your tap until you end it, it reaches 2 hours, or it ends after 15 minutes with nobody listening. While it runs, iOS shows its microphone indicator and the app shows Company on your lock screen; on iOS 17 and later, End is there too. If you cancel within the three-second countdown, nothing it heard leaves your phone. A Backed window that is only running, or that runs out, never turns on your iPhone's microphone. The microphone hears whoever is near you. Recording other people is your responsibility where you are.
  • Location. Saved with a Memory on your phone. In Backed, shared only with the friends you chose, only while a window runs or a Flare is up. If you turn on Daily Trace, your location history stays on this iPhone: you choose how long it is kept (7, 30 or 90 days), you can delete one day or all of it, and it is never sent to us. Apple's maps service supplies the map imagery when you look at it.

Who else is involved

  • Amazon Web Services hosts our servers.
  • Apple delivers notifications and answers map requests. Apple also supplies the on-device speech and translation downloads when you add a transcript language; your recordings and words are not part of that request.
  • Shopify runs this website and holds its email list; see This website, below.

Nobody else receives your data. We do not use advertising companies, and the app uses no analytics. Some notes in a Memory are links - an address, a parcel's tracking number. Tapping one opens that page in your browser, like any link.

This website

When you leave your email on hyndsyt.io, we keep it, with your consent, to tell you about the launch and Hyndsyt news. It is stored with Shopify, the platform that runs this site. Every email we send has an unsubscribe link, and you can ask us to delete your address at any time.

Shopify sets cookies on this site to keep it working and to measure visits. When you type into an email field, Shopify's spam protection (hCaptcha) checks that you are a person. We do not run advertising or sell your information.

Deleting your account

In the app: Your profile, then the "•••" button, then Settings, then Delete account. When you delete:

  • Your account, profile, photo and connections, and the moments, sound, locations, notes and messages you shared, are erased from our servers and from your iPhone. Every iPhone signed in to your account is signed out, and your recovery phrase stops working.
  • Moments you sent can no longer be played by your friends.
  • Company sound, replies and who listened, on our servers, are erased.
  • Your Witnuss and your Memories are not affected.

A few records stay. Apart from the alerts below, none holds anything you recorded, wrote or photographed:

  • A permanent note that your account ID was deleted, so your recovery phrase can never bring it back. It holds no name.
  • Your username, held for 30 days, then anyone can take it.
  • Records that a moment passed between your account and a friend's: the two account IDs and a fingerprint of the sealed file, never the sound.
  • In a shared moment that goes on without you, the member list still shows your account ID as having left. A shared moment you made that had already closed keeps the name card it was sent with (your username and public keys).
  • Past Backed windows: who you asked and the times, never the route, the note or the messages, for up to 90 days.
  • Reports you sent, or that name you, for one year.
  • A Flare a friend chose to keep stays with them until their keep ends, at most a year from the Flare, with any messages from its window, yours included, under the username you had then. An alert of yours that is still open for your friends stays with them until one of them closes it.
  • Backups and server logs roll off within 7 days.

Children

The app is not meant for children under 13. We do not knowingly collect data from them.

Your rights

You can see, correct and delete your data in the app. For anything else, write to support@hyndsyt.io.

Wherever you live, you can ask us what personal information we hold about you, and ask us to correct it, delete it, or give you a copy. Depending on where you live, laws such as Canada's PIPEDA, the GDPR in Europe and the UK, and California's CCPA may give you further rights, including the right to object to or limit how your information is used, and to complain to your local privacy regulator. We do not sell personal information. We answer these requests within 30 days.

Changes

If this policy changes, we will update the date above and, for important changes, tell you in the app.