Privacy policy
Last updated: 14 September 2026
Tito Digital Evidence collects no data. There is no sign-up, no account and no server operated by us. The captures, the recordings, the page sources, the network context, the metadata, the digests and the certificates stay on your device.
Your browsing
The app carries its own browser, and what that browser fetches goes to the sites you navigate to, as any browser's would. That traffic is the activity itself, it does not pass through us, and we neither see it nor keep it. Each session opens a data store of its own: no cookies are carried over from a previous session, there is no autofill and there are no extensions.
Timestamping
To prove that a session existed at a given instant, the app sends a cryptographic digest — SHA-256 — to a public RFC 3161 timestamp authority, before the first navigation and again when the session closes. Only the digest is sent. The captures, the addresses you visited, the metadata, your location and your identification are not, and a digest cannot be turned back into the file or into who produced it.
Location
The coordinates of the place where the session was conducted, and their accuracy, are written into the record on your device. They are not sent to us, because there is nowhere of ours to send them to. They say where the operator was, and nothing about where the content came from — which the certificate states in as many words, so that an omission does not suggest otherwise.
Approximate address and map (optional)
If you turn this setting on, the coordinates are sent to Apple, which returns an approximate address and the map the certificate prints. It is the certificate's only outbound. The setting is off until you turn it on, and with it off nothing of the kind leaves the device.
What a session folder contains
This one is about your own care rather than ours. The recording captures the device's screen, so a notification that arrives mid-session enters the image, and a session conducted inside an account of yours shows that account. The app warns you before you export a session of that kind. What you hand over is a folder, and it is worth opening it before it leaves your hands.
On-device processing
Every digest, the tree, the signature and the certificate are produced on the device. There is no transcription of any kind, and no media of yours is processed anywhere but here.
What does not exist in this app
No analytics. No telemetry. No third-party crash reporting. No third-party SDKs. No tracking. No advertising. No user profiles. No automatic synchronisation to anybody's cloud.
Purchases
The subscription is processed by Apple. We neither receive nor store payment data.
Children
The app collects no data from anybody, children included.
Changes
This policy changes when what the app sends changes. The date at the top says when this version was published, and the version in force always answers at this address.