Atesta Privacy Policy
Last updated: November 9, 2026
Atesta takes proof photos of your service: each photo is stamped with the date, time, place, client and service, and signed on your device. It was built so your work records stay with you.
Atesta is developed by Noramis, the company responsible for the app and for this policy (“we”, “us”).
What Atesta stores
Your clients, services, visits, proof photos, notes, drawings made over photos, reports, your name and company as they appear on the stamp, your logo and your settings. Each proof photo includes the time it was taken, the coordinates and accuracy of the location when available, and the address when it could be found. All of it stays in the app’s database on your device.
Signing key
When you first open Atesta, it creates a signing key in your device’s Secure Enclave (or in the Keychain on devices without one). The private key never leaves the device. Its public key and a short fingerprint go into every proof so anyone can check that it was not changed.
What a proof link contains
A proof QR code or link carries the signed data of that photo or report: date and time, coordinates, address, client, service, visit, stage, the name on the stamp and the device key. Anyone you give the photo, report, QR code or link to can read that data. Only share them with people who should see it.
The verification page at atesta.noramis.com/v checks proofs inside the visitor’s browser. The proof travels in the part of the link after the # sign, which browsers never send to a server, so we don’t receive it.
Addresses
To turn coordinates into an address, Atesta uses Apple’s location services, which receive the coordinates under Apple’s privacy policy. Without a network, the photo is signed with the coordinates only and the address is added later on the same device.
iCloud sync
If iCloud sync is on, Atesta keeps your data in your private iCloud database so it shows up on your other devices. The fields are encrypted, and Apple keeps them under your Apple Account. Noramis can’t see or access them. You can turn sync off in Settings > iCloud sync at any time.
What Atesta doesn’t do
- No account to create.
- No ads.
- No analytics or tracking.
- No third-party code that collects data.
- No selling or sharing of your data.
- No servers of ours that receive your data.
Permissions
All permissions are optional and you can change them in the iOS Settings app.
- Camera: to take proof photos and to scan proof QR codes.
- Location: only while the camera is open, to stamp where each photo was taken.
- Photos: to choose your logo or an image with a QR code, through the iOS photo picker, which only gives Atesta the photos you choose. Saving an exported photo to your library asks for permission to add photos.
- Files: to compare a photo file with a proof. Atesta only gets the file you choose.
Sharing
Photos, reports and links only leave the app when you share them, for example through Mail, Messages or AirDrop. The app you choose handles them under its own policy.
Purchases
Atesta Plus subscriptions are processed by Apple. We never receive your payment details.
Your control
- Delete any photo, visit or client in the app.
- Erase everything in Settings > Erase everything. When your data is in iCloud, this erases it on this device, in iCloud and on your other devices.
- Deleting the app removes the data stored on the device.
Children
Atesta is made for adults who provide services and is not directed at children.
Changes
If this policy changes, we update this page and the date at the top.