Privacy Policy

Facete ("the App") is an Apple-platform app built by independent developer Waiho. This page explains, in plain terms, how it handles your data.

What we collect and process

The App requires no registration or sign-in and does not use Sign in with Apple. Ordinary AI chats do not pass through the developer's server.

• No device identifiers (IDFA, UUID), install source, or network information is recorded.
• No click analytics, session duration, or usage behavior is collected.
• The conversation content and attached images you send to models are never uploaded to us.

• Purchases and restoration: handled by Apple StoreKit. Facete uses verified StoreKit transactions to determine Plus or Premium access.
• iCloud identity: the App may read your private CloudKit record identifier. If iCloud is unavailable, it generates a random on-device identifier for local data and tickets you intentionally submit.
• Feedback / Report: only when you submit a ticket, the developer backend receives its text, optional screenshots, timestamp, app/OS/device-model information, and the random identifier.

What we don't do

• No third-party analytics SDKs are integrated (no Firebase, Google Analytics, Umeng, Sentry, Crashlytics, and the like).
• No crash reports are sent to any server. Crash logs stay on the device and are handled by Apple's system collector.
• Apart from feedback or reports you explicitly submit, the App sends no user content to the developer's server.

What is stored on your device

• Conversation history: kept in a local database inside the App's sandbox; other apps cannot read it.
• API keys: stored in the system Keychain; model configuration is stored in the App's sandbox.
• Preferences: standard UserDefaults, also inside the sandbox.
• iCloud (optional): when enabled in the App, chats, model configuration, Echoes, usage records, and profile data sync through your private CloudKit database; API keys sync through iCloud Keychain. It is off by default.

Uninstalling removes the App's sandbox data. Because the system Keychain has a separate lifecycle, clear Secure Vault under My → Privacy & Security first if you also want to remove API keys. Local and iCloud data can be erased under My → Storage.

Third parties: your own API keys

The core function of the App is forwarding requests to the model providers you choose. The path is:

• Your device → direct HTTPS → the provider's official API (for example api.openai.com, api.anthropic.com).
• The App uses no relay server — there is no "Facete server" sitting in the middle forwarding or logging your traffic.
• This data is used only to process your model request and generate a response. How a provider handles what you send is governed by that provider's own privacy policy, terms, and applicable law.
• The selected provider must provide the same or equivalent protection for the data it receives. If you do not trust the current provider, you can decline or withdraw permission.
• Before the first transmission, the App shows the current provider domain, lists the data to be shared, and requests explicit permission. Changing provider requires permission again.
• Data sent may include messages, required chat history and summaries, intentional attachments, and saved memory, personalization, and profile details such as birthday, location, and occupation.
• You may decline or withdraw permission anytime under My → Privacy & Security. Without permission, AI chats and model-powered features send no network request.

Purchases & developer backend

The App creates no Facete account and stores no sign-in session. The developer backend at 070801.org/api is used only to:

• Receive the feedback ticket content you submit.

Purchases, subscription status, and restoration are handled by Apple StoreKit. The developer backend receives no ordinary conversation content and never accesses your API keys.

Content moderation

The App includes a local content-moderation layer that flags clearly violating input on your device. Moderation runs on-device and does not send content to any third-party moderation service.

Children

The App is not directed at children. Minors should use it with parental or guardian supervision, as models may produce inaccurate or age-inappropriate information. The App does not knowingly collect data from children.

Export & deletion

• Withdraw third-party AI permission: My → Privacy & Security → Third-Party AI Data Sharing.
• Clear local data under My → Storage; clear API keys by clearing Secure Vault under Privacy & Security.
• Clear synced data under My → Storage → Wipe All iCloud Data.
• For deletion or further handling of a feedback ticket, email the address below.

Changes

Material changes update the "Last updated" date on this page and are shown as a banner the next time the App launches. Typos and formatting fixes are not announced separately.

Contact

Questions, or noticed the App behaving differently from what is described here? Email huangwaiho4972@gmail.com.