Privacy

The Facet app for iPhone, Facet in a browser, and the “Save to Facet” Chrome extension. Last updated 9 September 2026.

Facet is a personal app. It is not a business, it sells nothing, and it has no advertising. This page describes exactly what it stores and why.

The short version

Everything you write in Facet is kept on your own device. Nothing is sent anywhere unless you switch something on — syncing across devices, sharing a list, or one of the AI features — and each of those says here exactly what it sends and where. The one thing that is on from the start is a crash report when something in the app fails; it carries nothing you wrote and nothing that identifies you, and you can switch it off. There is no advertising, no tracking, no analytics, and nothing about you is sold or handed to anybody.

Where your data is kept

On your phone. Your habits, routines, lists, notes, goals and photos live in the app on your device, and the app works completely offline. If you have iCloud switched on, the phone also keeps an automatic backup in your own iCloud Drive, in a folder called Facet that you can open and delete yourself — that copy goes to Apple, under your Apple Account, and never to us.

What Facet asks your phone for

Each of these is asked for only at the moment you use the feature it belongs to, and saying no leaves the rest of the app working.

• Reminders — to create a reminder in your Reminders app for each habit you turn reminders on for. Facet reads nothing else in Reminders.
• Calendar — read only, and only when you switch on planning around your calendar. Facet reads today’s events so it can lay your tasks out between them. It never adds or changes an event, and it does not store your calendar.
• Camera and Photos — only when you choose a photo for a list item. The photo is kept on your phone. If you turn on the Photos setting, Facet also saves copies of your item photos into a Facet album in your own library; it never deletes anything from your library.
• Location — only to notice when you arrive at a place you chose yourself, so it can offer to start that routine. Your location is never stored and never sent anywhere; the places you save stay on the device and are not synced.
• Microphone and speech recognition — only while you are recording a capture, to turn what you say into text. The recording itself is never saved. Where your iPhone can do the recognition on the device it does; where it cannot, iOS sends the audio to Apple to transcribe, which is Apple’s speech service and not ours.

Syncing across devices — only if you sign in

Facet does not have an account until you make one. Signing in is optional: it exists so the same data can reach your phone and Facet in a browser. Until you do, nothing you write leaves your device.

You can sign in with Apple or with Google. Either way Facet asks only for who you are: with Google that is the openid and email scopes; with Apple it is your email address, which may be the private relay address Apple offers (that works exactly the same). Facet stores your email address and the account identifier Apple or Google issues, which together are how your data is kept separate from anybody else’s. It does not ask for your name, and it does not request or receive access to your Gmail, Drive, contacts, or anything else in either account.

The two are two separate accounts. Signing in with Apple on one device and with Google on another makes two Facets that do not see each other, even if the email address behind them is the same — so keep to the one you started with.

Once signed in, what travels is the content of the app: your habits, routines, lists and their items, the scratchpad, goals, notes, captures, the facts you have told the About you page, and your item photos. Two things deliberately never travel and stay on the device that made them: your AI key and your saved places.

Sharing a list with someone

Sharing a list uses Apple’s iCloud sharing. That list’s contents go to your iCloud account and to the person you shared it with, through Apple, and not through us. Stop sharing and it stops.

The AI features

Facet’s AI features — editing a list by asking, the blob’s answers, the one-task breakdown, and laying out a day — use your own Anthropic API key, which you type in yourself. Without a key they do nothing at all.

When you use one, the text it needs goes from your device straight to Anthropic: the list or task you are working on, the facts on your About you page, and — if you have turned on planning around your calendar — the names and times of today’s events. It does not pass through any server of ours. Your key is stored on that device only: it is never synced, never included in a backup or an export, and never sent anywhere except to Anthropic as the credential for your own request. What Anthropic does with a request is covered by their privacy policy.

Connecting Google Calendar

Optional, read only, and separate from the calendar on your phone. Facet reads today’s events so the day can be laid out around them, and stores none of them. You can disconnect it at any time in Settings.

Deleting things, and deleting your account

Anything you save can be deleted in the app, on any device you are signed in on, and the deletion travels to the others.

If you have signed in, Settings › Sync across devices › Delete account deletes your account and everything Facet keeps on the server for you — every record and photo it has synced, and every signed-in device — straight away and for good. What is on the phone in your hand stays exactly as it is; it simply stops syncing. There is nothing to write to anyone and nobody to ask.

What the Chrome extension can see

Nothing, until you ask it to. The extension has no standing access to the pages you visit: it reads a page only in the moment you right-click and choose a destination, and only the tab you did that in. That is Chrome's activeTab permission, granted by your click and expiring with it. It does not read your browsing history, your other tabs, or any page you have not just acted on.

What it sends

• The text you selected, or the page title if you saved a whole page.
• The link you saved, with common advertising and tracking parameters removed.
• The address of an image, if you saved one.
• Which list, or today's scratchpad, you chose.

That is the whole of it, and all of it is something you chose to save.

Your sign-in, in the extension

The extension signs in to the same account described above, and the same two scopes. Your sign-in session is stored in this browser only — not in Chrome Sync. The server keeps a one-way hash of it rather than the session itself. Sign out in the extension's options page ends that session immediately, on the server as well as in the browser.

Where it is kept

In a Cloudflare D1 database, reachable only through the Facet sync service, and every read is scoped to one account. Facet is not sold, shared, rented, or handed to any third party, and it is not used to train anything.

Pictures

When you save an image, only its address travels. Your own device downloads the picture and keeps it locally; the image itself is never uploaded to the sync service and never leaves your device.

Crash reports

When something in Facet fails, the app sends the error and the place in its code where it happened to Sentry, a service that collects crash reports for us, so the fault can be fixed without you having to write in. A report carries the error message, the steps the app took just before it, the app version, and whether it was the phone or the browser. It carries no name, no email address, no account id, and nothing you have written in the app — there is nothing in it that identifies you or your phone, and reports are never joined up into a picture of one person. This is on from the start. You can turn it off in Settings → Diagnostics → Send crash reports, and the same screen has a button that sends a test report so you can see exactly what one is.

Analytics

There are none, in any of the three. No tracking, no usage statistics, no advertising identifiers, and no cookies beyond the sign-in session described above. The crash reports above are the only thing that goes to a third party, and they are not analytics: nothing is sent when the app works. Facet does not track you across other apps or websites, and it has nothing to track you with.

Children

Facet is not directed at children and does not knowingly collect anything from them.

Questions about any of this: snehapriscilla@gmail.com.