WorkersCompWitness Privacy Policy

Effective date: 2026-05-18 · Last updated: 2026-05-18

1. Who we are

WorkersCompWitness is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

2. Information we do not collect

We do not collect, transmit to our servers, store on a server we operate, sell, share, or analyze:

• Your name, Social Security number, claim number, Apple ID, email, phone, date of birth, or address
• Your employer name, employer type, state of injury, industry code, job title, years in position, union affiliation, or any party identifier
• Your work injuries, body parts affected, mechanism of injury, injury severity, OSHA-recordable status, or any injury detail
• Your medical treatment records, provider names, NPIs, diagnoses, ICD-10 codes, procedure codes, work restrictions, costs, or mileage
• Your wage loss documentation, pre-injury AWW (Average Weekly Wage), TTD / TPD / PPD / PTD benefit amounts, paystubs, W-2 / 1099 content
• Your AWW calculator inputs (weekly wages, bonuses, overtime, tips, per diem) or outputs (calculated AWW, compensation rate, state caps)
• Your IME records (carrier-paid IME, second-opinion IME, AME / QME), pre-IME checklist, visit documentation, post-IME doctor's opinions, or conflict analysis with treating physician
• Your PPD assessment prep (AMA Guides edition, state PPD method, self-reported impairment, pre-existing conditions, apportionment notes)
• Your 50-state SOL tracker entries (notification, claim filing, reopening, hearing request, appeal deadlines)
• Your Reference-Only Mapper outputs (first-responder PTSD presumption, occupational disease, aggravation, CTD, Long COVID occupational)
• Your HealthKit data (heart rate, resting heart rate, HRV, step count, sleep) — read locally on-device, never transmitted
• Your scanned documents (state-specific claim forms, treating physician records, diagnostic imaging, surgery reports, IME reports, settlement documents, denial letters, pay stubs, W-2/1099, attorney retainer agreements, light-duty job offers, photos of injury), photos, or other attachments
• Device identifiers (IDFA, IDFV) for advertising or tracking purposes
• Location data
• Crash reports or analytics events sent to any third party

We have no servers. The fields above never reach us.

3. No data sharing with insurance carriers, employers, state WC boards, law firms, or any third party

WorkersCompWitness does not share any records with the National Council on Compensation Insurance (NCCI), the Occupational Safety and Health Administration (OSHA), the Bureau of Labor Statistics (BLS), the U.S. Department of Labor (DOL), federal workers'-compensation programs (FECA / Longshore / Jones Act / Black Lung), any state workers' compensation board (50 states), any insurance carrier (Travelers, Liberty Mutual, The Hartford, AIG, Sedgwick, Gallagher Bassett, Zurich, Berkshire Hathaway, or any other), any third-party administrator, any self-insured employer, any law firm, any bar association, any commercial workers'-comp service or SaaS platform, or any research database. There is no advertising SDK, no analytics SDK, no AI integration, and no marketing-data partnership in the app. If a future release ever introduces any such integration, it will be strictly opt-in, with a clear in-app notice before any record leaves your device.

4. Information stored on your device

All archive data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data is included in your iCloud or iTunes device backup if you have device backup enabled.

5. On-device processing

Several features process data locally on your device only:

• HealthKit integration (Pro, optional) uses Apple's HealthKit framework with read-only permission. Heart rate, resting heart rate, HRV (SDNN), step count, and sleep analysis are read on-device and rendered as trend displays in support of first-responder PTSD biomarker, repetitive strain injury, and Long COVID occupational evidence. HealthKit data is never written, never copied off-device, and never uploaded.
• AWW Calculator Engine applies 50-state-specific AWW formulas (52-week, 13-week, pre-injury year, seasonal, concurrent, irregular employment) and state max/min weekly benefit caps to user-entered payroll data, entirely on-device against a bundled reference catalog of publicly available state regulations. No payroll content or AWW output is transmitted off-device.
• 50-State SOL Tracker Engine computes notification, claim filing, reopening, hearing request, and appeal deadlines on-device from user-entered injury dates against a bundled reference catalog of publicly available state statute of limitations regulations. No SOL output is transmitted off-device.
• Reference-Only Mapper Engine matches user-entered injury type, mechanism, state, and occupation against bundled reference catalogs (first-responder PTSD presumption, occupational disease, aggravation, cumulative trauma disorder, Long COVID occupational) on-device. No input or mapper output is transmitted off-device.
• PPD Calculator applies state-specific PPD methods (scheduled benefits, whole-person impairment, wage-loss, hybrid) to user-entered impairment data on-device. Reference only.
• Document scanning uses Apple's VisionKit on-device. Scanned images of claim forms, treating physician records, diagnostic imaging, IME reports, settlement documents, denial letters, pay stubs, W-2 / 1099, and attorney retainer agreements never leave your phone.
• PDF report generation uses Apple's PDFKit on-device. No archive content is transmitted during generation. The 8 PDFs (Work Injury Timeline, Medical Treatment Log, Wage Loss Documentation, IME Preparation Pack, PPD Assessment Prep, Attorney Brief, State Form Companion, Comprehensive Claim Archive) are all built from your local records and rendered on-device.
• App Lock uses Apple's LocalAuthentication framework. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.
• SOL, IME, and PPD reminders are scheduled via Apple's UserNotifications framework and fire locally on your device. No remote push servers are involved.

5a. Device backup is your archive's lifeline

WorkersCompWitness stores all records on your iPhone only. The app does not use iCloud sync, CloudKit, or any cloud storage of its own. If you lose your phone and have no backup, your archive is gone.

To protect against device loss:

• Keep iCloud Backup on (iOS Settings > [your name] > iCloud > iCloud Backup). When enabled, Apple includes WorkersCompWitness's SwiftData store in your nightly encrypted device backup, and a new iPhone restore recovers your archive automatically.
• Alternatively, back up to iTunes / Finder on a Mac or PC. WorkersCompWitness's records travel with the device backup.
• For sharing a single record at a time (sending a clean text summary to your attorney, the carrier, or the file), every user (Free or Pro) can use the per-injury text export to the iOS Share Sheet from any injury's detail screen.

We have no servers and cannot retrieve your records for you. Apple's device backup is the canonical recovery path. Workers' compensation claims accumulate evidence across months to years (PPD and PTD claims, decades); the long horizon is exactly why backup discipline matters.

6. Subscriptions and StoreKit

WorkersCompWitness offers an optional Pro subscription (Monthly, Annual, or Lifetime one-time) via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. WorkersCompWitness receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

7. Permissions the app requests

• HealthKit (Pro, optional) — only after you tap "Authorize HealthKit" in Settings > Health Integration. Read-only.
• Camera — only when you tap "Scan document" or "Photograph injury".
• Photo Library — only when you tap "Import photo" or "Import document".
• Face ID — only after you enable App Lock in Settings.
• Notifications — only after you enable SOL / IME / PPD reminders.

You can revoke any of these permissions at any time in iOS Settings > WorkersCompWitness.

8. No AI, no automatic legal determination

WorkersCompWitness does not use artificial intelligence, machine learning, or cloud processing of any work-injury, medical, wage, or HealthKit data. It does not predict claim outcomes, calculate official PPD lump-sum values for settlement basis (the in-app PPD calculator is informational only), generate appeal letters, or guarantee any claim outcome. The 50-state AWW Calculator, the 50-state SOL Tracker, the PPD Calculator, and the Reference-Only Mapper Engine all produce reference suggestions based on publicly available state regulations; they are not legal determinations of eligibility, benefit amount, or settlement value. WorkersCompWitness is not a workers' compensation attorney, accredited representative, or claims agent. In January 2025, the Federal Trade Commission finalized an enforcement order against DoNotPay for deceptive "robot lawyer" claims (Federal Trade Commission v. DoNotPay, Inc., 2025). WorkersCompWitness explicitly disavows any AI legal claims.

9. Not a workers' compensation attorney

WorkersCompWitness is a personal records organizer. State unauthorized practice of law (UPL) statutes restrict who may represent injured workers and what services may be offered. WorkersCompWitness does not represent injured workers, does not file workers'-compensation claims or forms (state-specific DWC-1, C-3, etc.) on your behalf, and does not provide legal advice. For accredited representation, consult a workers' compensation attorney licensed in your state. For free claimant assistance, contact your state's workers' compensation ombudsman service — every state offers free assistance. The app includes an in-app Free State Ombudsman Locator with contact information for all 50 states + DC.

10. Children's privacy

WorkersCompWitness is not directed to children under 13. We do not knowingly collect any information from anyone, including children. The app's age rating reflects this.

11. Data retention and deletion

You control retention completely. Records you delete in the app are removed permanently from the on-device store on the next save, after a mandatory confirmation alert. There is no in-app trash, no soft-delete recovery window, and no remote copy on our servers for us to delete because we do not have servers. For exporting an individual record before deletion (or for your own records), every user can use the per-injury text export from any injury's detail screen. To remove every trace of your archive: delete the app from your device. If you have an iCloud device backup, that backup may contain prior versions of the WorkersCompWitness store — you can manage iCloud device backups via iOS Settings > [your name] > iCloud > Manage Account Storage.

12. International users

The app is published in English and is primarily marketed to U.S. injured workers (50 states + DC). Because we operate no servers, we do not transfer your data internationally.

13. Changes to this policy

If we ever change how the app handles data, we will update this policy and surface the change in the app before you can use the affected feature. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact

Privacy questions: captainlongevity@gmail.com