Privacy Policy

1. Privacy Summary

Faro is designed as a local-first eye-rest and digital wellbeing application. Rest records, screen-use summaries, rhythm scores, and preset records are first processed on your device.

If you sign in and consent to cloud sync, selected account, entitlement, consent, summary, and insight data may be synced to the Service Provider's backend infrastructure so that the Application can restore access, verify paid features, support long-term insights, and improve reliability.

Optional app-level usage insights are only enabled if you opt in. The Application does not collect precise GPS location, contacts, camera/photos, full payment card details, or public user posts.

2. Information You Provide

The Application may process information you provide directly or through sign-in, including:

• account information, such as email address;
• Google account profile information used for sign-in, such as display name and profile photo URL;
• support messages or other information you send when contacting the Service Provider;
• consent choices, settings, and preferences;
• purchase, trial, restore, or entitlement-related information connected to your account.

Registration is not required for every feature, but some features may require sign-in. These may include cloud sync, paid entitlement restore, trial eligibility, purchase verification, long-term records, or certain Pro features.

3. Information Processed from Your Device and App Use

The Application may process information automatically or through Android permissions to provide its features, including:

• app installation ID and account-linked user ID;
• hashed device-stability identifiers used to reduce duplicate device records;
• device information such as manufacturer, model, operating system version, app version, locale, and timezone;
• Android permission and settings state needed for reminders and insights;
• screen-use summaries, such as total screen minutes, pickup count, session length, active hours, and long-session patterns;
• rest records, such as completed rests, snoozes, pauses, reminder responses, rest duration, trigger type, and timestamps;
• preset records, such as preset type, active interval, settings snapshot, and rest activity during a preset session;
• safety exclusion state, such as active call or video-call detection and limited exclusion timing records used to suppress reminders and keep rhythm records accurate;
• rhythm insight data, such as rest opportunity counts, weighted response scores, rhythm scores, and related summaries;
• optional app-level usage insight data, such as package-level or app-category usage information, only when you enable the relevant opt-in;
• product usage events, such as app opens, screen views, paywall views, trial starts, restore attempts, premium opt-ins, purchase-related events, and custom preset activity.

The Application may use Usage Access and related Android system information to calculate screen-use summaries and rest rhythm insights. Overlay and notification-related permissions may be used to show rest reminder cards and notifications.

The Application may check device audio or communication state to detect active phone calls or video calls so it can suppress overlay reminders during those moments. The Application does not record call audio, call content, phone numbers, or the identity of call participants.

4. Location, Contacts, Camera, and Photos

The Application does not request or collect precise GPS location.

The Application does not request or collect your contacts.

The Application does not request or collect camera or photo library content.

5. Artificial Intelligence

The Application does not currently use Artificial Intelligence technologies to process your personal data or provide core features.

If AI-based features are added in the future, this Privacy Policy will be updated before or when those features are made available.

6. Product Analytics

The Application does not currently use Google Analytics, Firebase Analytics, Mixpanel, or third-party advertising analytics tools.

The Application may process first-party product usage events through the Service Provider's own backend infrastructure to understand feature usage, improve the Application, verify entitlements, evaluate product performance, and maintain reliability.

Product analytics may include event metadata such as app version, locale, country, session ID, screen name, entry point, entitlement status, event name, and event properties. Product analytics are not used for third-party advertising or remarketing unless this Privacy Policy is updated to say otherwise.

7. Payments, Trials, and Entitlements

Paid features, subscriptions, trials, purchases, cancellations, and refunds may be handled through Google Play or another supported app store or platform.

The Service Provider does not collect or store full payment card information. The Application may process purchase-related records needed to verify and restore paid access, including product ID, base plan ID, offer ID, purchase token hash, encrypted purchase token data, entitlement status, trial claim records, verification timestamps, and related metadata.

To prevent abuse of free trials, promotional access, restore flows, and paid entitlements, the Application may store limited fraud-prevention or eligibility records, such as hashed Google account identifiers or hashed device-stability identifiers.

8. How Information Is Used

The Service Provider may use information to:

• provide rest reminders, overlay cards, notifications, records, and rhythm insights;
• calculate screen-use summaries and rest opportunity patterns;
• save settings, presets, consent choices, and app preferences;
• provide account sign-in, cloud sync, entitlement restore, and paid feature access;
• verify purchases, trials, subscriptions, and promotional access;
• improve reliability, performance, feature quality, and user experience;
• understand aggregate product usage and feature adoption;
• respond to support requests;
• detect abuse, fraud, entitlement misuse, security issues, or technical problems;
• comply with legal obligations and enforce applicable terms.

9. Local Processing and Cloud Sync

Faro is local-first. Many records and calculations are processed on your device.

If you sign in and enable or accept cloud sync, selected information may be sent to the Service Provider's backend infrastructure. This may include account information, device records, consent records, usage summaries, rest records, preset records, entitlement state, purchase verification data, product analytics events, and long-term aggregate summaries.

Cloud sync may be limited by your plan, consent choices, retention policy, app version, or technical constraints. The Service Provider may store summary data instead of raw records where appropriate.

10. Third-Party Services

The Application may use third-party services that process information under their own privacy policies. These may include:

• Google Play Services
• Google Sign-In / Google Account services
• Google Play Billing
• Supabase

These services may process information for purposes such as authentication, app platform services, purchase processing, backend storage, Edge Functions, database services, entitlement verification, and service reliability.

The Application does not sell your personal information.

11. Sharing and Disclosure

The Service Provider may disclose information:

• to service providers that help operate, host, secure, sync, verify, or improve the Application;
• to app stores or payment platforms as needed for purchases, subscriptions, refunds, restores, and entitlement verification;
• if required by law, legal process, regulation, or government request;
• when necessary to protect rights, safety, security, users, the Application, or the public;
• in connection with a business transfer, merger, acquisition, restructuring, or similar event, subject to appropriate safeguards where required.

The Service Provider does not share personal information with third-party advertising networks for behavioral advertising unless this Privacy Policy is updated to say otherwise.

12. Your Choices

Depending on the feature and platform, you may be able to:

• use some features without signing in;
• decline or revoke optional app-level usage insight consent;
• adjust Android permissions such as Usage Access, notifications, and display over other apps;
• disable cloud sync where supported;
• delete your account and related account-linked data through the in-app account deletion option where available;
• uninstall the Application to stop further local collection by the Application;
• contact the Service Provider to request access, correction, deletion, or other privacy assistance.

Some features may not work correctly if required permissions or account features are disabled.

13. Data Retention

The Service Provider retains information for as long as reasonably needed to provide the Application, maintain account and entitlement records, comply with legal obligations, resolve disputes, enforce terms, improve reliability, and support legitimate business purposes.

Different data categories may have different retention periods. For example, detailed local records may remain on your device, cloud-synced records may be limited by plan or retention rules, and product analytics may be stored as event data or aggregated summaries.

If you request deletion, the Service Provider will take reasonable steps to delete or de-identify information that is no longer needed, unless retention is required or permitted by law, security, fraud prevention, payment dispute handling, accounting, or entitlement verification.

After account deletion, the Service Provider may retain limited hashed records where reasonably necessary to prevent repeated free trial abuse, payment abuse, restore abuse, fraud, or entitlement misuse. These retained records are intended to be limited and not directly identifying on their own.

14. Security

The Service Provider uses reasonable technical, administrative, and organizational measures to protect information processed by the Application.

However, no method of transmission, storage, or processing is completely secure. The Service Provider cannot guarantee absolute security.

You are responsible for keeping your device, operating system, app store account, and sign-in account secure.

15. Children's Privacy

The Application is not directed to children under the age of 13, or a higher age where required by applicable law. The Service Provider does not knowingly collect personal information from children under 13 without appropriate consent where required.

If you are a minor, you should use the Application only with the consent and supervision of a parent or legal guardian.

If you are a parent or guardian and believe that a child under 13 has provided personal information through the Application, contact the Service Provider at support@meetfaro.app. The Service Provider will take reasonable steps to delete such information.

16. International Users

The Application may be used in different countries and regions. Information may be processed and stored in countries other than the country where you live. Data protection laws in those countries may differ from those in your location.

Where required, the Service Provider will take reasonable steps to protect information in accordance with applicable privacy laws.

17. Regional Privacy Rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about how your personal information is processed.

To make a privacy request, contact the Service Provider at support@meetfaro.app. The Service Provider may need to verify your identity before responding. Some requests may be limited by legal, security, technical, fraud prevention, payment, or entitlement verification requirements.

18. Changes to This Privacy Policy

The Service Provider may update this Privacy Policy from time to time. When changes are made, the updated version will be posted on this page or otherwise made available through the Application or related website.

You are advised to review this Privacy Policy periodically. Continued use of the Application after changes become effective means that you acknowledge the updated Privacy Policy.

19. Contact

If you have any questions or suggestions about this Privacy Policy, contact the Service Provider at:

This email is also the privacy inquiry contact channel for access, correction, deletion, consent withdrawal, and other privacy-related requests.