Privacy policy

Who runs the app

Witnessing Planner is an independent, non-commercial project. Dawid Ciesiełkiewicz, a volunteer in Poland, runs it and is responsible for your data (the “controller” in law).

For any question or request about your data, write to hello@witnessingplanner.app.

What we keep

• Your account: your name, your email address, and whether you sign in with a password or with Google.
• Your profile: your phone number and photo if you add them, your language and your privacy choices.
• Your witnessings: the groups you belong to and your role in each, the times you offer to serve, your notes and the shifts you’re given.
• Invitations: the email address a coordinator types in to invite you, before you have an account.
• Server logs: your IP address, your browser and the pages you open, as every web server records them.

Taking part in public witnessing can say something about your religious beliefs. The law treats that as sensitive data, so we protect everything in the app that way.

Why we use it

We use your data only for these purposes, each on the legal basis shown:

• Running the app for you and your group: our agreement to provide the app when you create an account, and your explicit consent, which you give when you set up your profile.
• Sending an invitation to someone without an account, when a coordinator asks us to: the group’s legitimate interest in inviting people. Coordinators should only invite people who expect it.
• Keeping the app safe and working, with server logs, backups and limits on misuse: our legitimate interest in a secure, reliable service.

We never use your data for advertising or profiling, and we never sell or share it for those purposes.

Who can see it

• People in your witnessing see your name and photo, and who serves on each shift.
• Coordinators of your witnessing also see your email address, phone number, the times you offered and your notes.
• Other volunteers see your email address or phone number only if the witnessing allows it and you haven’t hidden them in Profile.
• We can reach the data to keep the app running and to answer your requests, and look at it only for that.
• The services below handle it for us, only to do their job.

We don’t give your data to anyone else unless the law requires it.

Services we use, and where your data is stored

• OVHcloud runs the server with the app and its databases, in Canada.
• Amazon Web Services keeps encrypted backups of the database, in Sweden.
• Auth0 (by Okta) handles signing in and keeps your password, on its servers in the European Union. We never see your password.
• Resend sends the app’s emails, such as invitations, from its servers in the European Union.
• Google tells us your name and email address if you choose to sign in with Google. Your Google account follows Google’s own privacy policy.

OVHcloud, Amazon Web Services, Auth0 and Resend act only on our instructions, under data processing agreements.

The European Union, the United Kingdom and Switzerland recognise Canada as protecting personal data to their standard. Amazon Web Services, Auth0 and Resend are American companies, so any access to your data from outside the EU is covered by the EU’s standard contractual clauses. If we move the server or add one in another country, we’ll update this page first.

How long we keep it

• Your account, profile and witnessings: until you delete your account. Your times, notes and shifts in a witnessing also go when that witnessing is deleted.
• Published schedules: each version stays until a year after the month it covers. Drafts stay for 30 days.
• Invitations: until the witnessing they belong to is deleted. The link in them stops working after 7 days.
• Backups: up to 30 days, so deleted data is gone from them within a month.
• Server logs: for a limited time. Older entries are deleted automatically as new ones come in.

Cookies and your device

This website sets no cookies and stores nothing on your device. The app keeps only what it needs to work:

• A sign-in cookie keeps you signed in. It’s encrypted, and it’s removed when you sign out.
• A language cookie remembers your language for a year.
• Your browser’s storage keeps your colour theme, the witnessing you opened last and a copy of your upcoming shifts, so they show without a connection. Signing out clears the shifts.
• Auth0 sets its own cookies when you sign in, to keep you signed in and to spot attacks on accounts.

There are no analytics, advertising or tracking cookies, so there’s nothing to agree to, and nothing for Do Not Track or Global Privacy Control to switch off.

Your rights

Wherever you live, you can:

• See your data and get a copy. Most of it is in the app. Write to us for all of it, in a file you can take elsewhere.
• Correct it in Profile, or ask us to.
• Delete it. Profile → Delete my account erases you from the whole app, every published schedule included.
• Withdraw your consent at any time, by deleting your account. That doesn’t undo what was done before.
• Object, or ask us to limit how we use your data.

Write to hello@witnessingplanner.app and we’ll answer within 30 days, free of charge. You can also complain to a data protection authority: the one where you live, or Poland’s Personal Data Protection Office (UODO, uodo.gov.pl).

Changes to this policy

When this policy changes, so does the date at the top. If a change affects what you agreed to, the app asks you to agree again before you carry on.