Is my data private and secure?

Yes. WitnessWork has no sign-up and no ads, and your records live on your device. Anything that leaves it is encrypted or anonymized, so it isn't tied to you. Your account is anonymous: no email, phone number, or password. If you turn on Backup (Settings → Account), WitnessWork's server keeps an end-to-end encrypted copy of your records that only your devices can read, not WitnessWork; it's off unless you turn it on. Cloud Sync keeps an end-to-end encrypted copy of each device's data on WitnessWork's server that only your devices can read. iCloud Sync and Google Drive Sync go straight to your own account over an encrypted connection, never through WitnessWork's servers; on iPhone and iPad, turning on Apple's Advanced Data Protection makes iCloud end-to-end encrypted. Buddies is end-to-end encrypted, so only you and your buddies can read what you share. A shared contact travels inside its link and isn't stored by WitnessWork. Scribe AI sends what you ask it over an encrypted connection to Zero Data Retention providers that don't store it, and route planning sends only map coordinates. Usage statistics are anonymous counts that never include names, contacts, reports, or notes; turn them off anytime in Settings → Preferences → Share Anonymous Usage Statistics. Supporter purchases use a random identifier, not your name or email. Backup files you export are yours, so keep them somewhere private; they can include householder details. WitnessWork deletes its own temporary copies of exported backups, shared contact files, and picked photos the next time it starts and when you permanently delete householder data. For privacy questions, use the private support link in the Help Center.