Terms of Service

Witness Panda · Effective 4 November 2026

These terms are the agreement between you and us about using Witness Panda. Using the app means you accept them. They are written to be read, not to be skimmed past. The sections on all-in mode and alarms in particular describe things the app will actually do to you, and are worth reading before you turn them on.

1. Who you are agreeing with

Witness Panda is operated by DuckFlock LLC, a limited liability company registered in Wyoming, USA ("we", "us"). Contact: luis@duckflock.com.

2. What the app does

You commit to a block of focused work. During the block, the app asks you to photograph your workspace. One check comes at a random moment you cannot predict. The last one comes shortly before the block ends. Each photo is compared automatically against a reference photo of the same workspace.

• A block is recorded as witnessed when its last check passes.
• It is recorded as missed when a check fails and you do not retake it within two minutes, or when the last check goes unanswered.
• It is recorded as abandoned when you end it early. Once a week you can use an emergency to end a block early and keep your streak.

Streaks accumulate. That is the whole product.

3. Who can use it

You must be at least 18 years old. You need an account, created by signing in with Google, and you are responsible for what happens under it. One person per account; do not share it, and do not let someone else check in for you, which defeats the entire point.

4. Using it honestly

The app exists to hold you to something you chose. Do not:

• Photograph a screen, a printout, or another photo in order to pass a check.
• Have someone else check in on your behalf.
• Upload photographs of other people without their agreement, or photographs of anything unlawful.
• Attempt to reach another user's data, or to interfere with, overload, or reverse-engineer the service.
• Automate or script the app.

Cheating the panda mostly harms you. The rest of this list harms other people, and we will suspend accounts for it.

5. Verdicts are automated, and imperfect

Checks are judged by an automated system. It gets things wrong: bad light, an unusual angle, or a rearranged desk can all fail a check you deserved to pass, and it may occasionally pass one it should not have.

Streaks, verdicts and grace tokens are motivational, not a record of fact. They are not evidence of hours worked, and must not be relied on for billing a client, satisfying an employer, or any other purpose where accuracy matters. If a verdict looks wrong, write to us and a person will review it.

6. All-in mode

All-in mode has two steps: you connect your X account, then you arm it. Once it is armed, a block that ends after the moment you armed it and is recorded as missed causes a post to be published on your X account, as you. That is the point of the feature: the stake is real, or it is not a stake.

• Grace tokens come first. If you have one, it is spent to cover the miss and nothing is posted. When you have none left, the post goes out.
• What gets posted. The message you wrote or, if you did not write one, our default: "I committed to a deep-work block today and I did not show up." Every post ends with "Automatically posted by @witnesspanda."
• Abandoned blocks never post.

By arming it, you agree that:

• You are responsible for the post's content, whether you wrote it or kept the default.
• It may be published at any hour, including one that embarrasses you. That is what you are betting.
• It may be published because of a wrong automated verdict, a phone that was off or out of battery, a notification your phone suppressed, or a bug in our software. We do our best; we cannot promise this never happens.
• We are not responsible for any consequence of a published post: reputational, professional, financial or otherwise.

You can disarm all-in mode at any time. Disarming stops future posts; it cannot retrieve one already published. Disarming does not disconnect X. The app keeps its access to your X account, which it uses only to read your X username and publish the all-in post, until you revoke that access in X under Connected apps, or delete your Witness Panda account, which revokes it for you. If you are not willing to accept a wrongly-triggered post, do not arm this feature.

7. Alarms, notifications, and your screen

To make a check hard to sleep through, the app schedules alarms on your phone:

• A check alerts you, by sound, vibration or both as you set it, for its whole two-minute window.
• It rings on the phone's alarm channel, so it rings even when the phone is on silent. The app also asks for Do Not Disturb access so it can ring through that.
• Where your phone permits it, the app wakes the screen and shows the check over your lock screen. While the camera is open, the volume buttons take the photo.
• The app will not start a block if your phone blocks exact alarms.

Witness Panda is not an alarm clock and must not be relied on for anything that matters. Do not use it to wake for a flight, take medication, or anything safety-related. Phone manufacturers aggressively restrict background apps to save battery, and a check can arrive late or not at all. If your phone is off, out of battery, or has denied the app permission, no check will reach you. A last check that does not reach you counts as unanswered, and the block is recorded as missed.

8. Your content

Your photos are yours. You keep all rights to them. You grant us only the narrow permission needed to run the service: to store them, and to transmit them to our verification provider so a verdict can be produced. Nothing else. We do not use your photos to train models, we do not publish them, and we do not share them with anyone else. See the Privacy Policy for the detail.

9. The service will change, and may stop

Witness Panda is early software under active development. Features will change or disappear, and the app may look different next month. We may suspend or discontinue it entirely. If we shut it down, we will give reasonable notice, stop all renewals, and send you a copy of your data if you ask.

10. Subscriptions and payment

Witness Panda Pro is a paid subscription, sold through Google Play, and some or all of the app needs it. There is a monthly plan and a yearly plan. Google Play shows the price in your currency, with any tax it adds, before you confirm.

• Payment. Google Play takes the payment. We never see your card or other payment details.
• Automatic renewal. A subscription renews automatically at the end of each month or year, and Google Play charges the price in force at that time, until you cancel.
• Free trial. The yearly plan may start with a free trial, and Google Play shows its length before you confirm. Cancel before the trial ends and you pay nothing. If you do not cancel, the first year is charged when the trial ends. Google Play decides who is eligible for a trial.
• Cancelling. Cancel at any time in Google Play, under Payments and subscriptions. You keep Pro until the end of the period you already paid for. Uninstalling the app or deleting your account does not cancel the subscription.
• Price changes. If we raise a price, Google Play tells you before the new price applies to you, and asks for your agreement where its rules or the law require it.
• Refunds. Google Play's refund policy applies, and refund requests go through Google Play. You can also write to us. If the law where you live gives you a right to cancel or to a refund, that right stands.

11. Ending it

You can stop at any time and ask us to delete your account, and we will. Cancel your subscription in Google Play first, see section 10. We may suspend or close an account that breaks section 4, or that we are legally required to close. If we close an account because it broke section 4, the unused part of a subscription is not refunded, unless the law requires it.

12. No warranty

The service is provided "as is". We do not warrant that it will be uninterrupted, that checks will always arrive, that verdicts will be correct, or that data will never be lost. To the fullest extent the law allows, we disclaim all implied warranties.

13. Limits on our liability

To the fullest extent the law allows, we are not liable for indirect, incidental or consequential loss, for lost profits or opportunities, for a broken streak, for a missed check, or for anything published by all-in mode. Where liability cannot be excluded, it is limited to the greater of the amount you paid us in the preceding twelve months, or US$100.

Nothing here excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud. If your country gives you consumer rights that these terms cannot override, those rights stand.

14. Changes to these terms

We may update these terms. The effective date at the top changes when we do, and we will tell you by email or in the app before a significant change takes effect. Continuing to use the app after that means you accept the new version.

15. Governing law

These terms are governed by the laws of the State of Wyoming, United States of America, and disputes go to the courts of the State of Wyoming, USA, except where the law of your own country of residence gives you the right to bring a claim locally, which it may.

16. Contact

Anything at all: luis@duckflock.com.