Support

Write to support@titoprivacyai.com. Say which device and which version of iOS you are on, and what you expected to happen.

Questions that come up

Is a record still valid without a timestamp?

Yes, and it says so. A capture made with no signal is recorded, hashed, chained and signed all the same, and it declares a lower level of temporal confidence. The timestamp arrives on its own when the network returns, and the certificate is reissued with it; the proof in Bitcoin follows within hours, and the certificate is reissued again.

How does someone else verify what I send them?

The certificate carries the instructions in its footer. The file is checked with shasum -a 256 against the printed digest, and the timestamp token with openssl ts -verify, and the proof in Bitcoin with a short Python script that travels in the folder, with curl to a public block explorer, and with ots verify, the tool of the OpenTimestamps project. None of them needs this app, and none needs to trust us.

Why can I not import a photo I already have?

Because the app would have nothing to say about where it came from. What Tito Cam certifies is that a file was born inside it, in real time. A file it did not produce cannot be given that, so it is not accepted by any route.

What exactly leaves my device?

The digest of the file, to the timestamp authority. A digest of 32 bytes derived from the two digests of the file, to the calendars of OpenTimestamps, and the height of a Bitcoin block, to two public block explorers — both on from the start and each with a switch to turn it off. Nothing else, unless you turn on one of two more switches: syncing to your own iCloud, and resolving an approximate address, which sends the coordinates to Apple. Those two are off until you turn them on. The app says at each switch what it sends and to whom.

What does the free tier limit?

Only exporting out of the app: two exports per calendar month, counted per record, so exporting the same record again — including replacing a provisional certificate with the version with time proofs — costs no new quota. Everything else is free and unlimited.

My subscription expired in the field, mid-inspection.

You go on capturing exactly as before. The limit is at the exit, never at the shutter: an expired subscription drops you to the free tier's export quota and takes nothing away from the records you have.

I deleted a record by mistake.

It cannot be recovered, and the deletion is logged in the audit panel with the date, the identifier and the digest that was preserved — because what a series proves depends on knowing that one of its items was removed.