Privacy Policy

Facete ("the App") is an Apple-platform app built by independent developer Waiho. This page explains, in plain terms, how it handles your data.

What we collect

The App itself does not actively collect personal data.

• No device identifiers (IDFA, UUID), install source, or network information is recorded.
• No click analytics, session duration, or usage behavior is collected.
• The conversation content and attached images you send to models are never uploaded to us.

A few optional flows use your Apple ID:

• Sign in with Apple: used only when you actively start a Premium purchase, restore purchases, or file a feedback ticket — to link your purchase receipt and contact record. Core chat features work fully without signing in.
• Feedback / Report: if you submit feedback inside the App, the backend receives the text you paste, an optional screenshot, and a timestamp, used to handle the ticket.

What we don't do

• No third-party analytics SDKs are integrated (no Firebase, Google Analytics, Umeng, Sentry, Crashlytics, and the like).
• No crash reports are sent to any server. Crash logs stay on the device and are handled by Apple's system collector.
• Apart from the Premium / feedback flows above, the App does not talk to the developer's server.

What is stored on your device

• Conversation history: kept in a local database inside the App's sandbox; other apps cannot read it.
• API keys and model configuration: saved in local config files inside the App's sandbox; never uploaded.
• Apple sign-in session: if you have signed in, your Apple ID identifier and the backend access token are stored encrypted in the system Keychain.
• Preferences: standard UserDefaults, also inside the sandbox.

Uninstalling the App removes all of it. You can also clear it manually under Settings → Data.

Third parties: your own API keys

The core function of the App is forwarding requests to the model providers you choose. The path is:

• Your device → direct HTTPS → the provider's official API (for example api.openai.com, api.anthropic.com).
• The App uses no relay server — there is no "Facete server" sitting in the middle forwarding or logging your traffic.
• How a provider handles what you send is governed by that provider's own terms.

Account & backend

Premium purchase, restore, and the feedback / report flows call the developer's backend at 070801.org/api. It is used only to:

• Verify your Premium purchase status.
• Receive the feedback ticket content you submit.
• Return basic profile info (display name and so on) for the App to show.

These endpoints never upload your conversation content and never touch your API keys.

Content moderation

The App includes a local content-moderation layer that flags clearly violating input on your device. Moderation runs on-device and does not send content to any third-party moderation service.

Children

The App is intended for users aged 17+, as models may output unfiltered information. It is not directed at children under 13 and does not knowingly collect data from children.

Export & deletion

• Clear local data: the relevant options under Settings → Data, or simply uninstall the App.
• Remove the sign-in session: Settings → Account → Sign Out.
• Delete account data on the developer's backend: email the address below.

Changes

Material changes update the "Last updated" date on this page and are shown as a banner the next time the App launches. Typos and formatting fixes are not announced separately.

Contact

Questions, or noticed the App behaving differently from what is described here? Email huangwaiho4972@gmail.com.