Privacy Policy

The short version

• There is no account, no sign-up and no password. We do not know who you are.
• Everything you log — cycles, symptoms, meals, supplements, labs, photos — is stored on your device and, if you have iCloud on, in your own private iCloud database that only you can read.
• We do not sell data, run ads, or embed third-party trackers or advertising SDKs.
• When you ask for meal feedback, a downscaled copy of that photo and a small amount of coarse context is sent to our processing service and then discarded. It is not stored, and it does not carry your identity.
• You can export everything, or permanently delete everything, from inside the app.

Who we are

Facet (“Facet”, “we”, “us”) publishes the Facet iPhone and Apple Watch app. You can reach us about anything in this policy at privacy@facetpcos.xyz.

What Facet stores, and where

Facet is a local-first app. The data you enter is written to a database on your device. If you have iCloud enabled, Apple syncs that database to your own private CloudKit container so it reaches your other devices. That container belongs to your Apple Account. We cannot browse it, query it, or recover it for you.

This includes:

• Cycle events, symptom check-ins and how you rate your energy, mood, skin, sleep and cravings.
• Supplements and medications you add — stored as the label you typed, plus the times you set.
• Meal photos, the feedback returned for them, and any correction you make.
• Lab values you type in, and the doctor-visit reports you generate.
• Your onboarding quiz answers and the pattern readout derived from them.
• Progress photos, if you use them — these stay on device and are Face ID gated.

Apple Health

With your permission, Facet reads cycle history, steps, workouts, sleep and body measurements from Apple Health so your charts are not empty on day one. That data stays inside Apple's health stack on your device. Facet does not transmit Apple Health data anywhere, and we never use health data for advertising or share it with third parties — as Apple's HealthKit terms require.

The meal-photo AI — what actually leaves your phone

Meal feedback is the only feature that sends anything off your device. When you ask for it, Facet sends, over an encrypted connection, to a thin proxy we operate:

• A downscaled copy of the photo you just took.
• Coarse context needed to phrase the response — for example whether it is morning or evening.
• Proof that your subscription is valid, in the form of a signed receipt from Apple. This proves a purchase exists; it does not identify you to us.

The proxy forwards this to a third-party model provider, returns the feedback, and keeps nothing. We do not store your photos, we do not store the responses, and we do not build a profile from them. Your name, your cycle history, your symptoms and your labs are never included.

Please don't photograph things that are not food. The feature is scoped to plates of food; anything else may be rejected, and there is no reason to send it.

Payments

Subscriptions and the lifetime purchase are handled entirely by Apple through the App Store. We never see your card, your billing address or your Apple Account email. Apple gives us anonymised sales and subscription reports — counts, not people.

Analytics and crash reporting

Facet does not include third-party analytics or advertising SDKs. We rely on the aggregate, privacy-preserving metrics Apple provides in App Store Connect, which you can turn off system-wide in Settings → Privacy & Security → Analytics & Improvements. Health data never appears in analytics of any kind.

Email you send us

If you email support, privacy, or Facet Access, we hold that email thread in our mail provider so we can answer you, and delete it once it's no longer needed. Please don't send us lab results or medical details you wouldn't want in an inbox — we don't need them to help you, and Facet Access never asks for proof of anything.

Your control

• Export. You → Privacy → Export my data produces a file containing everything Facet holds.
• Delete. You → Privacy → Delete everything wipes the local database and your private CloudKit zone. It is permanent and we cannot undo it, because we never had a copy.
• Lock. Face ID or passcode can be required every time the app opens.
• Revoke. Apple Health access can be withdrawn at any time in the Health app.

Because we hold no personal data about you, a formal access or deletion request to us has nothing to act on — the controls above are the real mechanism, and they are faster. If you are in the UK, EU, California or another region with statutory data rights, you can still contact us and we will confirm in writing what we do and do not hold.

Children

Facet is not directed at children under 13 and we do not knowingly collect their data. Teenagers with PCOS are a real and welcome part of this audience; if you are under 18, please involve a parent or guardian in decisions about purchases and about anything the app suggests.

Changes

If this policy changes materially, we will update the effective date at the top and note the change in the app's release notes. Continuing to use Facet after that means the revised policy applies.

Contact

privacy@facetpcos.xyz — privacy questions and data requests. For anything else, see support.