Privacy Policy
What Faite collects, what it doesn't, and who can see it.
Last updated
Placeholder draft. This page was written from the Faite codebase to describe what the product actually does, but it has not been reviewed by a lawyer and is not a binding agreement. Questions? Get in touch.
1. The short version
Signed out, everything you do in Faite lives in your browser's local storage (IndexedDB) and nothing is transmitted anywhere. Sync to Faite's servers begins only when you sign in.
Faite runs no analytics, no error tracking, no advertising technology, no tracking pixels, and does not use your content to train any AI model. There is nothing in this app whose job is to watch what you do.
2. What's stored, and where
Faite splits data across two stores. Account information — email, display name, avatar image, and (for email/password accounts) a hashed password — lives in a shared database used only for sign-in. If you sign in with GitHub or Google, Faite also holds the connection tokens for that provider, and your session carries the IP address and browser user-agent of each device you're signed in from.
Everything you actually make in Faite — to-do titles and descriptions, day notes, list/tab/label names, saved places (including addresses and coordinates), your timezone, and any avatar photo you upload — lives in a private data store created just for your account, addressed by your account id and reachable only by requests carrying your session.
3. Isolation
Each account's data store is addressed by your account id, so a request can only ever read or write its own account's data. Faite is solo-user today — there is no sharing UI, no permission model, and no way for another account to read yours.
4. Who else touches your data
Faite runs entirely on Cloudflare's infrastructure — compute, both databases, transactional email, and the security check on the contact form. Beyond Cloudflare:
- GitHub and Google— only if you choose to sign in with one of them.
- Google Places API— only when you look up an address for a saved place. See the next section for how that call is handled.
- Linear— if you contact us through the form on this site, or by emailing support@myfaite.app, your message is filed in Linear, the issue tracker Faite uses to keep track of it and reply. Messages you send to privacy@myfaite.appare deliberately kept out of Linear — those reach a private inbox and nowhere else.
5. How location lookup actually works
Typing an address into a location field routes through Faite's own server, using Faite's own API key — your IP address is never sent to Google. Only the text you typed and a short-lived session token leave Faite's server. If you're signed out, there is no lookup at all: the text you type is saved as-is, with no request made anywhere.
7. Logs
Faite's hosting includes standard request logging. One deliberate exception: if Faite is ever unable to send you an email (password reset, email verification), the failure is logged with your email address, the email's subject line, and the reason it couldn't send — but never the email's content, and never a reset or verification link.
8. How long your data is kept
Faite keeps your data for as long as your account exists. Deleting an individual to-do, list, or tab removes it from everywhere you can see it, but Faite keeps an internal record that it once existed — the same way most apps with multi-device sync do — until you delete your account (below). Archiving a list or tab is different from deleting it: an archived list keeps its to-dos, and you can bring it back.
9. Deleting your account
Settings → Account → Delete account permanently deletes your account and everything in it, on every device. This is different from Settings → Developer → Reset, which clears your board's content but leaves your account and sign-in intact — reset is for starting your board over, not for leaving Faite.
10. Exporting your data
Faite does not yet have a self-serve data export tool. If you'd like a copy of your data, get in touch and we'll help.
11. Security
All traffic to Faite is encrypted in transit. Passwords are hashed, never stored in plain text. Session secrets and third-party credentials are stored as encrypted platform secrets, not in the codebase.
12. Children, international use, and changes
Faite is not directed at children under 13, and does not knowingly collect their data. Faite's infrastructure runs on a global network, so your data may be processed outside your own country. Faite may update this policy as the product changes; material changes will be reflected in the “Last updated” date above.
Questions, or a privacy or deletion request? Get in touch.