This Privacy Policy details how the mobile application ItHappnd
(developed and operated by Thomas Charbonnier, acting as an independent software developer,
hereinafter referred to as the "Publisher", "we", "us", or "our") collects, uses, stores, and protects your
personal data when you use our mobile applications (iOS and Android) and related services.
User privacy, transparency, and data integrity are central to our cryptographic media authenticity verification service.
1. Data Controller
The designated Data Controller under applicable data protection regulations (including the EU General Data Protection Regulation - GDPR) is:
Controller: Thomas Charbonnier (Independent Developer)
In order to provide cryptographic capture verification and ensure the application operates correctly, we collect the following categories of data:
Account and Profile Data: Email address, unique user identifier (UUID), public username or pseudonym, and profile picture.
Media Content: Photos and videos captured directly via the application's built-in camera for certification purposes.
Integrity Metadata: High-precision timestamps (UTC and local time), geolocation coordinates sealed at the exact time of capture, and camera device hardware technical metadata.
Cryptographic Data: Cryptographic SHA-256 hashes, ECDSA (P-256) public keys and digital signatures, Merkle tree roots, and public ledger transaction identifiers (tx_id).
Direct Messaging: Private messages and encrypted media shared between authorized users.
3. Device Permissions Required
The application requests access to specific device features, activated only upon your explicit prior consent:
Camera: Strictly required to capture live media and guarantee that the content does not originate from an external, AI-generated, or tampered source.
Microphone: Used exclusively to capture the audio track during video recordings.
Location (Precise GPS): Required at the time of media capture to seal the geographic origin into the cryptographic certificate of authenticity.
Photos / Storage: Required only if you choose to export your authenticity certificates or save certified media files directly to your device storage.
4. Purposes & Legal Bases for Processing
Purpose
Data Processed
Legal Basis
Authentication & Account Management
Email, UUID, Profile details
Performance of a Contract (Terms of Service)
Cryptographic Media Certification
Media files, Timestamp, GPS coordinates
Provision of the requested service
Public Ledger Anchoring & Verification
SHA-256 Hash, Merkle Root, tx_id
Explicit Consent & Legitimate Interest
Secure Messaging
Messages, recipient identifiers
Performance of a Contract
5. Blockchain Technology & GDPR Notice
ItHappnd utilizes a public decentralized ledger (the Polygon blockchain) to provide verifiable, permanent, and tamper-proof timestamp proofs for certified media.
Important Notice: No raw personal media (photos, videos, or personally identifiable information) is ever recorded on the blockchain.
Only anonymized cryptographic mathematical hashes (Merkle tree root hashes aggregating SHA-256 proofs) are anchored to the public ledger.
Immutability: By technological design, records anchored to a decentralized public blockchain are immutable, irreversible, and permanent. This allows independent, permanent third-party verification of your certificates without relying on ItHappnd's servers.
6. Subprocessors and Cloud Hosting
Your personal data is never sold, rented, or traded with third-party advertisers. We rely strictly on the following infrastructure providers:
Supabase Inc.: Secure database hosting, encrypted media storage, and authentication infrastructure (Row-Level Security enforced).
Polygon Network: Public decentralized blockchain network used exclusively to record cryptographic Merkle root hashes.
Apple Inc. & Google LLC: App distribution platforms and core operating system notification services.
7. Your Rights (GDPR & CCPA)
In accordance with applicable privacy legislation (including GDPR and CCPA), you are entitled to the following rights:
Right of Access & Portability: You may inspect your stored personal data and export all cryptographic proofs at any time via the "Export Codes" feature.
Right to Erasure (Account Deletion): You may permanently delete your account and all associated hosted media files directly from within the app settings or by contacting us. (Note: Cryptographic hashes already anchored on the public blockchain cannot be altered or removed due to the fundamental immutable nature of distributed ledger technology).
Consent Revocation: You can revoke Camera, Microphone, or Location permissions at any time via your device's operating system settings.
To exercise any of these rights, please contact us directly at: contact@ithappnd.com.