Privacy Policy

1. Summary

This Privacy Policy explains how Facet ("we," "our," or "the App") handles information when you use the App. In this Policy, "we" means the publisher of Facet.

• Facet is a private, single-user iOS app that provides AI-generated perspectives for everyday decisions.
• Core app records are stored locally on your device.
• The App supports Sign in with Apple to separate local data by identity. It does not operate a separate publisher-hosted cloud account or cloud-sync service.
• When you use AI features, relevant text and any voice recording you choose to make are sent directly from the App to SiliconFlow for transcription, AI responses, conversation summaries, and speech synthesis.
• We do not sell personal information or use advertising, analytics, or crash-reporting SDKs in the current version.

2. Information we process

2.1 Information you provide

Depending on how you use the App, it processes:

• A unique Sign in with Apple user identifier and your given name, if you choose to share it. The current App does not request your email address from Apple.
• A nickname and an optional profile photo selected from your photo library.
• Decision questions, optional context, follow-up messages, session titles, and advisor names or roles you create.
• Voice recordings you voluntarily make for transcription.
• App choices and preferences, such as AI-data-notice acceptance, onboarding status, and reduced-motion settings.

2.2 Information generated or saved by the App

• A one-way hash of your Apple user identifier, used to associate local session records with the correct identity.
• Decision sessions, timestamps, completion status, advisor assignments, and conversation messages.
• Voice transcripts, AI-generated advisor replies, and rolling conversation summaries.
• Temporary AI-generated speech files used for ordinary room playback.
• Synthesized room replays that you explicitly create and save on the device.

2.3 Service and connection information

When the App connects to SiliconFlow or Apple, those providers may receive information needed to complete the request, such as your IP address and standard connection, request, device, security, or fraud-prevention information. Their handling of that information is governed by their own privacy policies.

2.4 Information not requested as dedicated app data

The current version does not request contacts, precise location, health records, payment card information, or advertising identifiers as dedicated app data. However, free-text fields and voice recordings may contain any information you choose to include.

Please do not submit highly sensitive personal, medical, legal, financial, or other confidential information in questions, messages, context fields, or recordings.

3. How we use information

We process information to:

• Authenticate with Apple and keep local records separated by identity.
• Create, save, restore, rename, complete, restart, and delete decision sessions.
• Transcribe recordings and generate AI replies, summaries, and spoken playback.
• Create, update, play, and delete synthesized room replays when you request them.
• Display your local profile, advisors, conversation history, and app preferences.
• Maintain the App's functionality, including request validation and error handling.

4. Local storage

• Decision sessions, messages, advisor assignments, and summaries are stored in an on-device SQLite database in the App's support directory.
• Profile settings, custom advisors, consent state, and interface preferences are stored using on-device app preferences.
• The Sign in with Apple user identifier is stored in the iOS Keychain. The identifier is hashed before it is used as the account identifier in session records.
• A selected profile photo remains local. The App saves a local file reference and does not include the photo in SiliconFlow requests. Removing the photo from the App does not delete the original image from your photo library.
• Voice recordings and ordinary per-message synthesized speech are written to temporary app directories. Recordings are deleted after successful transcription or when the room is closed or canceled. Temporary recording or speech files left after an interruption are cleaned up when the App starts after they are more than 24 hours old.
• When you choose Create Replay, the App sends the saved transcript to SiliconFlow for speech synthesis and stores the returned replay audio in the App's support directory. A replay remains local until you delete it, delete its session, delete the current local account and data, or uninstall the App.
• Facet does not provide publisher-operated cloud storage or cloud sync. Local app data may still be included in device backups depending on your iOS and backup settings.

5. Third-party processing

5.1 SiliconFlow

Facet uses SiliconFlow's API at api.siliconflow.cn for speech transcription, AI-generated text, conversation summaries, and text-to-speech.

Depending on the feature, data sent to SiliconFlow may include:

• A voice recording you choose to make.
• Your decision question, optional context, recent conversation messages, and a rolling summary of earlier conversation content.
• Local advisor identifiers, nicknames, and roles needed to generate a relevant reply.
• Saved user-message text and AI-generated reply text submitted for speech synthesis, including the full saved transcript when you choose to create or update a replay.

The App's SiliconFlow requests do not include your Apple user identifier or profile photo. SiliconFlow returns transcripts, text, or synthesized audio to the App. Ordinary per-message speech is temporary. Synthesized replay audio is saved locally only after you explicitly create a replay.

SiliconFlow processes data under its own terms and privacy policy. See the SiliconFlow Privacy Policy.

5.2 Apple

Facet uses Sign in with Apple for authentication and local identity separation. The App requests your Apple-provided unique user identifier and, if you choose to share it, your full name; the current implementation uses your given name as the default nickname. It does not request the Apple email scope.

Apple may process Apple Account, device, and fraud-prevention information as described in Sign in with Apple & Privacy.

6. Permissions

• Network: Used to authenticate with Apple and send live AI, transcription, and speech requests to SiliconFlow.
• Microphone: Requested only when you choose to record a message for transcription. The resulting recording is sent to SiliconFlow.
• Photo Library: Used only when you choose an existing image for your local profile. The selected profile photo is not sent to SiliconFlow.
• Camera: The iOS app configuration contains a camera-purpose description for local profile photos. The current App flow does not capture or transmit camera images.

The current App does not request contacts or precise-location permissions.

7. Data sharing and selling

• We do not sell personal information or share it with data brokers.
• We share data with SiliconFlow only as needed to provide the AI features described above.
• Sign in with Apple involves processing by Apple as described above.
• The current App does not include advertising, marketing-attribution, analytics, or crash-reporting SDKs.
• Information may be disclosed if required by applicable law or valid legal process.

8. Data retention and your controls

• Local session records remain on your device until you delete the session, delete the current local account and its data, uninstall the App, or the operating system removes the data.
• Local replay audio remains on your device until you delete the replay or its session, delete the current local account and its data, uninstall the App, or the operating system removes the data.
• Deleting a session removes that session and its saved advisors, messages, and summary from the local database.
• Sign Out ends the current local sign-in state but retains that identity's local records so they can be restored if the same Apple identity signs in again on the same device.
• Delete Local Account & Data removes sessions associated with the currently active local identity, clears the App's saved profile settings, custom advisors, consent and interface preferences, deletes the stored Apple identifier from the Keychain, and returns the App to guest state.
• Deleting local account data removes the App's saved reference to a profile photo but does not delete the original image from your photo library.
• Uninstalling the App normally removes data in the App's local container, subject to iOS backup and restore behavior. Sign in with Apple alone does not restore Facet's local session history.
• Data already processed by SiliconFlow or Apple is subject to the applicable provider's retention practices and privacy controls. In-app deletion controls do not send a deletion request to those providers.
• The current version does not provide an in-app data export tool or cloud account portal.

9. Security

Facet uses the iOS app sandbox for local files and the iOS Keychain for the Apple user identifier. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

10. International data transfers

When you use online AI features, relevant content is sent to SiliconFlow through its China API endpoint and may be processed in China or other locations described by SiliconFlow. Sign in with Apple information may be processed in locations described by Apple.

11. Children's privacy

Facet is intended for adults aged 18 and older. It is not directed to children, and we do not knowingly design the current features to collect personal information from children.

12. Changes to this Policy

We may update this Privacy Policy from time to time. If we do, we will update the "Last Updated" date and publish the revised version with the App or on its store or distribution page.

13. Contact

If you have questions about this Privacy Policy, want to make a privacy request, or need support for Facet, contact us by email: