Privacy policy
Last updated: 10 October 2026
Tito Cam collects no data. There is no sign-up, no account and no server operated by us. Captures, metadata, transcripts, digests and certificates stay on your device.
Timestamping
To prove that a record existed at a given instant, the app sends the cryptographic digest of the file — SHA-256 — to a public RFC 3161 timestamp authority. Only the digest is sent. The media, the metadata, your location and your identification are not, and a digest cannot be turned back into the file or into who made it.
Proof of time in Bitcoin
Since version 1.2, the app also anchors each new record in the Bitcoin network through OpenTimestamps. It sends a digest of 32 bytes, derived from the SHA-256 and the SHA3-512 of the file, to the public calendars of OpenTimestamps (a.pool.opentimestamps.org, b.pool.opentimestamps.org, a.pool.eternitywall.com and ots.btc.catallaxy.com), and later asks those calendars whether the digest reached a block. To check that block, it sends only the height of the block to two public block explorers, mempool.space and blockstream.info. Nothing else is sent: not the media, not the metadata, not your location, not your identification. Both are on from the start, and each can be turned off in Settings, under Integrity; with the first off, no digest goes to any calendar, and with the second off, no explorer is asked.
Location
The coordinates of the point of capture, and their accuracy, are written into the record's metadata on your device. They are not sent to us, because there is nowhere of ours to send them to.
Approximate address (optional)
If you turn this setting on, the coordinates of the point of capture are sent to Apple, which returns an approximate address. The setting is off until you turn it on, the record notes when an address was resolved this way, and with it off nothing leaves the device.
Sync (optional)
If you turn sync on, records are stored in your own iCloud, under your Apple Account. We have no access to that content. Sync is off until you turn it on.
On-device processing
Transcription happens entirely on your device. No audio is sent anywhere to be transcribed.
App integrity
The app uses Apple's App Attest to attest that the installation is legitimate. That mechanism is Apple's and hands us nothing of yours.
What does not exist in this app
No analytics. No telemetry. No third-party crash reporting. No third-party SDKs. No tracking. No advertising. No user profiles.
Purchases
Tito Cam Pro is a subscription processed by Apple. We neither receive nor store payment data.
Children
The app collects no data from anybody, children included.