Faro runs on your iPhone. Your promise, your reasons, your journal, and your whole voyage are stored locally on your device. We don't operate any servers, we have no account system, and we never see your data. Faro draws a real world map, so it makes a small number of outbound requests — described plainly below — but none of them carry anything personal about you.
None. Faro has no analytics, no crash reporting, no advertising identifiers, no usage telemetry, and no account system. There is no Faro user database, because we don't operate any servers.
All of the above can be wiped at any time by deleting the app.
To draw a living map, Faro makes two kinds of request. Neither includes your promise, your reasons, your identity, or any account — because there is no account.
The world map is rendered from standard map tiles fetched from a map-tile provider. Like any map app, this sends your device's IP address and the map area you are looking at to that provider so it can return the right tiles. It does not send anything about your goal or who you are. The provider processes this under its own privacy policy.
When you reach a port, Faro may fetch a short public description of that place from Wikipedia / Wikimedia. The only thing sent is the public name of the place. The result is cached on your device. Wikimedia processes these requests under the Wikimedia Foundation privacy policy.
If you choose a path that is paced by your activity, Faro reads the relevant values from Apple Health on your device only, to move your voyage forward. This data never leaves your iPhone and is never sent to us. You can revoke access at any time in iOS Settings → Health.
If you turn on the app lock, Faro asks iOS to verify Face ID, Touch ID, or your passcode before opening. This is handled entirely by Apple's Secure Enclave — Faro only receives a yes/no result and never sees your biometric data.
Faro's optional one-time "Voyager" unlock is processed entirely by Apple through the App Store. We never see your payment details. Whether you've purchased is determined on-device from your App Store receipt.
The optional daily reminder is a local notification scheduled on your device. There is no push server, and its text never names what your promise is about.
Faro does not knowingly collect any data from anyone, including children under 13. Since Faro collects no data at all, this is automatic.
If we update this policy, the change date above will be revised. We will not retroactively change the policy to collect data that wasn't collected before.
For privacy questions, requests, or anything else: ahoi@sent.com.