Bothhere, by Said Al Haddad

Privacy policy

Last updated: 10 November 2026

In short: your photos and videos stay on your phone. The app stamps and saves them on the phone itself. We never receive your photos or videos. If you use Shared Proof or turn on checkable photos, only the details listed below are sent.

Camera, location and photos

The camera is used to take your photos and videos. Your location is used only while the app is open, to stamp the place, coordinates and map on what you shoot and to write them into the file. It is never used in the background, and it is sent to us only for Shared Proof and checkable photos, as described below. To show street names and maps on iOS, coordinates are sent to Apple Maps. On Android, street-name lookups use the device's geocoding provider (usually Google), and the map is drawn on the phone from OpenStreetMap map tiles downloaded from OpenFreeMap (openfreemap.org), which keeps no user accounts and sets no cookies. These services receive the requested coordinates or map area and connection information such as your IP address. See Google's privacy policy, Apple's privacy policy and OpenFreeMap's privacy policy. Map data © OpenStreetMap contributors, available under the Open Database License (openstreetmap.org/copyright). The microphone is used only while you record a video. On iOS, saving to Photos uses "add only" access. On Android, the app saves its own captures to the media library through MediaStore without broad photo-library access. Your logo is chosen through the system picker, and only the selected image is used.

Your files

Stamped photos, videos, logos and PDF reports are kept in the app's own storage on your phone, and reports can be saved or shared using the system file and sharing tools. Names you give to places are remembered on your phone only. Your media files are not uploaded to us. Map and street-name lookups are the location-service requests described above. You can delete captures in the app. Uninstalling removes its private app data; copies you saved to your media library or shared elsewhere must be deleted separately.

Sharing

Photos, videos and reports leave the app only when you share them yourself, to the place you choose. Shared photos carry their stamp and location, as you see them.

Shared Proof (optional)

Shared Proof lets people at the same place co-sign photos, each on their own phone. It is used only when you start or join a shared record. For that record, the app sends our server (bothhere.app, hosted in the EU):

the fingerprint (SHA-256) of each photo and of the PDF, never the photo or the PDF itself;
the name you type for the record (shown as "name entered by the signer"; it is not checked);
the place and time of each signature, and how far apart the phones were;
each signer's yes, or the note they write when they disagree about a photo;
the public part of a signing key made on your phone (on iPhone it is kept in the Secure Enclave and never leaves the phone), and Apple's App Attest result showing the request came from this app.

Shared Proof does not use your MAC address, advertising ID or any other device identifier. Anyone with a record's link or QR code can see its verify page: the names, places, times, notes and fingerprints. Checking a photo on that page runs in the browser; the photo is not uploaded. Earlier sealed records signed with the same key are listed on the verify page, so others can see the same phone signed them. A record is kept until a signer deletes it, and at most 2 years. To delete a record or ask about it, write to us.

Checkable photos (optional, off by default)

When you turn on "Checkable photos" in the app, each photo you take gets a QR code so that anyone can check it is unchanged. For each of these photos, the app sends our server (bothhere.app):

the fingerprint (SHA-256) of the photo, never the photo itself;
the place and time of the photo;
the public part of your phone's signing key and Apple's App Attest result, as for Shared Proof.

Each checkable photo has its own record, so the QR code on one photo shows only that photo's place, time and fingerprint, not your other photos. All of them are signed with the same key, which is shown on the page. Anyone who has the photo or its QR code can see this. A record is kept at most 2 years; write to us to delete one sooner. With the switch off, nothing about your photos is sent.

The app is free and shows ads from Google AdMob, never between you and the shutter. Where the law requires it, you are asked for consent first, and you can change your choice later in Settings, Privacy choices. On iPhone, ads are personalized only if you allow tracking when iOS asks. Google AdMob collects and shares data such as IP address (used to estimate approximate location), advertising or other device identifiers, ad interactions and diagnostic information for advertising, analytics and fraud prevention. Advertising ID use and ad personalization depend on consent, applicable settings and platform rules. We do not pass your photos, videos or precise capture coordinates to AdMob. Google's policy: policies.google.com/technologies/partner-sites.

App analytics and crash reports

Where configured, we may use Google Firebase Analytics to understand which features are used (for example "a photo was saved with the Classic stamp") and Firebase Crashlytics to fix crashes. These events contain no photos, places or other captured content. Firebase may process app-instance identifiers, device information, usage events and crash diagnostics. Firebase collection is currently not enabled in the Android build.

Children

The app is not directed at children under 13.

Contact

Questions or requests about your data: apps@zenqualityl.ink. We answer within 30 days.