Privacy Policy

Faro is a private journaling and personal-reflection app, built privacy-first. This policy explains what we collect, how we use it, and the choices you have. Plain language, no surprises.

The short version

• Your content is yours. Your journal entries, goals, reflections, and media are never sold, never used for advertising, and never used by Faro to train AI models.
• We collect as little as possible. Enough to run your account and sync your data across your devices — nothing more.
• You're in control. AI features stay off until you turn them on, and every AI Review lets you choose exactly which entries and check-ins it uses.
• You can delete everything. Deleting your account permanently erases your data, including your media files.

Who we are

Faro ("Faro", "we", "us") is operated by Tomás Frechou, based in Argentina. If you have any questions about this policy, contact us at support@hellofaro.app.

Information we collect

Account information. When you create an account we store your email address and, optionally, a display name. Authentication is handled through Supabase Auth and, if you choose it, Sign in with Apple.

Content you create. The core of Faro is the content you choose to save: goals and milestones, journal entries (text, voice notes, and photos), check-ins (reflections), and the AI-generated reviews you request. This content is stored so we can sync it across your devices and show it back to you.

Voice and photo media. If you attach voice notes or photos to an entry, the media files are stored in private, per-user storage. If you enable AI features, voice notes can be transcribed and photos can be described to text; in that case, the file is sent to our AI provider for processing (see "AI features" below).

Technical and diagnostic data. We collect limited, privacy-preserving usage and diagnostic data (for example, which features are used and crash/error signals) to keep the app working. This data never includes your journal content, goal text, reflections, or AI summaries, and user identifiers are pseudonymized.

What we do not do

• We do not sell or rent your personal data.
• We do not show ads or use your content for advertising.
• We do not use your content to train our own or any third party's AI models.
• We do not send your journal content, goal text, or AI summaries to analytics.

How we use your information

• To provide the app: store, sync, and display your content across your devices.
• To operate the features you use, including AI features you explicitly request.
• To manage your subscription and entitlements.
• To keep the app secure, reliable, and to fix problems.
• To communicate with you about your account or important service changes.

AI features and how your content is processed

Faro's AI features (such as AI Reviews, Ask Faro, the daily prompt, and AI-written reminders) are part of the Pro plan. When you use one of these features, the relevant content is sent securely to our AI provider, OpenRouter, which may route the request to a large-language-model provider to generate the result.

We take specific measures to protect this content:

• No training. Faro does not use your content to train models. In addition, we configure every request so it can only be routed to providers that do not store your content or use it to train their models.
• Only what's needed. We send only the content relevant to the feature you invoked — for an AI Review, only the entries and check-ins you selected for it.
• Your consent is enforced server-side. Every AI request checks your consent on our servers before any content is sent, regardless of the client. If you withdraw it, AI features stop working immediately.
• Reviews cite their sources. AI Reviews and Ask Faro reference the specific entries they used, and you can delete that trail.

Your privacy controls

• AI consent. AI features are off until you explicitly allow third-party AI processing. Until you do, none of your content is ever sent to an AI provider. You can withdraw your consent at any time in Settings, and AI features stop immediately.
• Choose what each review uses. Before generating an AI Review, you see exactly which journal entries and check-ins it will read, and you can deselect any of them. Only what you selected is sent.
• App Lock. Face ID / Touch ID / passcode, so the app re-locks every time you close it.
• Delete anything, any time. Individual entries, or your whole account (see below).

Third-party services

We rely on a small number of trusted providers to run Faro:

• Supabase — authentication, database, and media storage.
• OpenRouter and its underlying model providers — processing AI features you request, with routing controls and data policies depending on provider availability.
• RevenueCat and Apple — managing subscriptions and payments.
• PostHog — privacy-preserving product analytics, with no personal content.

Each provider only receives the minimum data needed to perform its function.

Data storage, security, and retention

Your data is stored on Supabase infrastructure and transmitted over encrypted connections. Access to your data is restricted by per-user security rules so that one account cannot access another's content. Media files are kept in private, per-user storage.

We retain your content for as long as your account exists. When you delete content or your account, it is removed as described below.

Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Because most of your data is visible and editable directly in the app, you can exercise many of these rights yourself at any time. For anything else, contact us at support@hellofaro.app.

You can also lodge a complaint with your local data-protection authority (in Argentina, the Agencia de Acceso a la Información Pública).

Account and data deletion

You can delete your account at any time from within the app (Settings → delete account). Deletion is immediate and permanent: it erases your profile, goals, milestones, journal entries, check-ins, reviews, badges, and all associated media files. This action cannot be undone.

Two clarifications, in the interest of full transparency:

• If you choose to tell us why you're leaving when deleting your account, that feedback (the category and optional comment) is stored separately, without your email or your content, and is no longer linked to an existing account.
• Deleted data may persist for a limited period in infrastructure backups until those backups rotate.

Children's privacy

Faro is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

International users

Faro is operated from Argentina and your data may be processed in countries other than where you live. By using Faro, you understand your information may be transferred to and processed in those locations, with the protections described in this policy.

Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the "Last updated" date and, where appropriate, notify you in the app. Continued use of Faro after changes take effect means you accept the updated policy.

Contact

Questions about your privacy? Reach us at support@hellofaro.app.