Analysis takes place on your iPhone. Videos, audio, machine details and reports are not automatically uploaded to the developer. The app communicates with Apple for purchases, and with Sectigo and FreeTSA for timestamps. Timestamp services receive file digests and technical data, including your IP address. The app does not use advertising or advertising-tracking tools.
1. Scope, controllers and contact details
StopTime is developed and distributed on the App Store by Carlo Tenca, under the RAVENG brand. For information about the app's data flows, contact info@raveng.it.
CE4U S.r.l., trading as RAVENG, tax code/VAT no. 04731920239, REA VR-444364, Via G. Rossini 29/2, 37012 Bussolengo (VR), Italy, is the controller for processing through its support, contact and test-management channels. Contact: info@raveng.it; certified email (PEC): posta@pec.ce4u.it. Use Privacy StopTime as the subject of a privacy request.
For recordings and reports, the controller is whoever actually determines the purposes and means of the activity: for example, the business, client or professional, depending on the actual relationship. The software licence does not automatically assign this role to the user or give the developer access to local files. Apple and timestamp providers process data for their respective services under the policies linked below. Browsing raveng.it is covered separately by the website privacy notice and cookie policy.
2. Device data
StopTime processes and stores video and audio, photographs and frames; details entered about machines, devices, locations, operators and clients; measurements, results, plots and reports; preferences and learning progress; and device distance and orientation used in calculations.
It also retains operator declarations, revisions and local acceptance receipts: a random identifier, declared name and organisation, role, choices, device date, app version, and the version and digest of the terms. Receipts are not automatically sent to CE4U and do not authenticate identity. Accepting the terms is not general consent to personal-data processing.
No StopTime account is required and the developer does not operate a cloud archive. File digests are transmitted for timestamps. A digest does not normally allow reconstruction of a file, but can be compared with a file already available; it is not presented as necessarily anonymous.
3. Timestamps and technical communications
The app automatically requests RFC 3161 electronic timestamps for real videos and items included in the measurement package. Requests may be retried when connectivity returns and during background activity permitted by iOS. Availability of a local measurement does not prove that a timestamp was obtained: the app displays its status.
The HTTPS request contains the SHA-256 digest, algorithm and a random control number. The provider also receives the connection's public IP address, request time, and app name and version. This protocol does not send video, audio, PDFs, operator names, machine details, advertising identifiers or persistent device identifiers. Timestamp transport does not use cookies or a persistent web session.
| Provider | Service and sources | Stated retention |
|---|---|---|
| Sectigo (Europe) S.L., Rambla Catalunya 33, 3º, 08007 Barcelona, Spain | https://timestamp.sectigo.com/qualified; privacy; policies |
The TSA Disclosure Statement refers to the CP/CPS audit-record retention periods. CP/CPS v1.1.0, section 5.4.3, specifies a minimum of two years for the categories described, with specific extensions. This is not a promise to delete all data after two years; archives and other categories follow the provider's separate rules. |
FreeTSA operator; published contact: busilezas@gmail.com |
https://freetsa.org/tsr; CPS and privacy statements |
The CPS states that it does not request or save information. It does not specify a separate retention period for every possible category of technical log. No additional guarantee of deletion or data location is given here. |
These services issue timestamps and process technical data for operation and security under their own policies. An endpoint's name is not a guarantee by StopTime of the qualification or evidential value of an individual timestamp.
The App Store privacy disclosure includes Other Diagnostic Data and Other Data for App Functionality, potentially linked to the user and not used for tracking. IP addresses and associated data are not anonymised before the request. This classification does not mean that the developer receives recordings.
4. Apple Purchases
Apple handles purchases, subscriptions, renewals, refunds and restoration under its privacy policy. StopTime does not receive payment-card numbers. The app verifies transactions through StoreKit and stores the transaction identifier and product, dates, environment, status and export entitlements on the device, including in Keychain.
For a Single Report, the app sends the random session UUID to Apple as the appAccountToken to associate it with the purchase. It contains no operator name, machine details or PDF. No CE4U server has been added for this data. Management and restoration are available in Archive → Subscription. Deleting the app or a measurement does not cancel a subscription; restoring a purchase does not reconstruct deleted files.
5. Permissions and choices
The camera and microphone are used for recordings and events; Photos for importing and saving; and motion sensors for orientation used in calculations. Manage permissions in iOS Settings. Denying a permission limits the features that need it. The app does not request access to contacts, calendars or GPS location.
Declining the declarations required for Measure and Calculate leaves Learn and Archive viewing available; it does not cancel a subscription. There is no separate switch to disable timestamp requests alone. They form part of the workflow described above and may be retried when connectivity returns.
6. Sharing and security
When you use Share, AirDrop, Mail, Files or another service, the selected recipients receive the exported content. A package may include originals, reports, revisions, declarations, receipts and terms of use. Check for identifiable people, personal data and confidential information before sending. The selected services and recipients apply their own rules.
Archive data and entitlements use the protections provided by the app container and iOS Keychain. Set a device passcode and protect backups. Digests and technical signatures help verify integrity; they do not guarantee absolute immutability or certified operator identity. Exported copies are not exclusively controlled by the app.
7. Purposes and legal bases
| Activity | Purpose and legal basis |
|---|---|
| Requested functions and associated technical flows | Providing software features, managing purchased entitlements and timestamp requests within the measurement workflow: Article 6(1)(b) GDPR, to the extent necessary for the requested service. Providers describe the legal bases for processing under their responsibility in their own notices. |
| Support and enquiries received by CE4U | Responding and carrying out requested pre-contractual or contractual activities: Article 6(1)(b). Irrelevant attachments are not necessary. |
| Requested TestFlight testing | Managing participation and reported errors: Article 6(1)(b). For security and the establishment or defence of rights in a dispute: Article 6(1)(f), limited to necessary data. |
| Recordings made by the business or professional | The controller for the actual activity determines its purposes, legal basis, notices and retention. This text does not replace the notice provided to workers or other people recorded. |
We do not use app data for advertising, commercial profiling or sale to data brokers. An iOS permission does not replace any legal basis required to record other people.
8. Retention and deletion
Local Archive. Sessions and reports remain until deleted using the available features. Uninstalling the app removes its local container but does not guarantee deletion of Keychain data, backups, Photos, exports or data already received by third parties. There is no general automatic deletion after 24 months. Previews remain in the protected container; iTunes/Finder file sharing is not enabled.
Backups and Photos. These follow device settings and the selected services, such as iCloud or a computer. Manage copies separately. Subscription expiry does not automatically delete the Archive.
Support and testing. Received data is retained to handle and complete the request or test and, where necessary, document the activity and manage a dispute. Further retention is limited to what that purpose requires. Documents subject to statutory retention obligations follow their respective periods, which are not indiscriminately extended to videos and attachments. You may request a deletion assessment using the contact details in section 1.
Providers. Apple applies its own rules; timestamps are subject to the policies in section 3. Deleting a local file does not automatically delete records already retained by a provider.
9. Recipients and transfers
For support and testing, data may be accessed by authorised personnel and the relevant email, hosting and support providers, and by authorities where required by law. The raveng.it channels are described in the website privacy notice. Support requests are not published.
Apple and timestamp providers may use infrastructure outside the European Economic Area. Sectigo's European registered office does not guarantee that every operation occurs within the EU. Providers' notices describe transfer conditions and how to request information about applicable safeguards. FreeTSA's CPS does not document a specific data-location guarantee or a transfer agreement with the developer; this notice does not attest that either exists. HTTPS protects transmission but is not, by itself, a legal safeguard for international transfers.
10. TestFlight and external sites
Through TestFlight, Apple may make service data available to the developer: invitation details, device and system information, installations, sessions, crashes, feedback and shared screenshots. These are used to manage testing and fix issues. You can leave the programme in TestFlight. See also Apple's TestFlight privacy information.
Links to sources, contacts and legal texts open pages in the browser. Website cookies and statistics are separate from the app: consult the relevant page's notice and manage website preferences. The app contains no third-party advertising or analytics SDKs.
11. Rights
Where the relevant conditions are met, you may exercise rights of access, rectification, erasure, restriction, portability and objection under Articles 15–22 GDPR. You may withdraw consent for processing based on it without affecting the lawfulness of earlier processing. For CE4U processing, write to info@raveng.it or posta@pec.ce4u.it, using Privacy StopTime as the subject. Identity may be checked proportionately; do not send complete identity documents or reports unless requested.
For local content, contact the controller of the measurement activity and use the app's features: the developer has no remote access to the Archive. For provider data, use the contact details in their notices. You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority.
12. Minors and updates
The app is intended for adults. It calculates physical quantities and does not make decisions about people that produce legal effects. Avoid unnecessary recordings and personal data. New features that change data flows will require an updated notice. The date and version identify this text, which does not describe future cloud services or unavailable features as active.