Privacy Policy

2026-09-19

This policy explains what data Fagia ("the app") processes, why, and with whom it is shared. Fagia is an intermittent-fasting app for iPhone; it does not require an account or your name or email.

1. Data stored on your device

Your fasts, weight, meals, the progress photos you choose to keep, and journal notes are stored locally on your iPhone: we do not keep them on our servers or tie them to an account. When you use the AI analysis features, the data described in section 2 is sent for processing. Deleting the app removes its local data; the pseudonymous identifier stored in the iOS Keychain may survive a reinstall, as explained in section 3.

2. Photos and AI analysis

Photo analysis (meals and body progress). When you photograph a meal to estimate calories and macros, or take a body-progress photo to estimate your composition, the image is sent encrypted (HTTPS) to our proxy server (api.fagia.app) together with the anchor data needed for the calculation: for a meal, an optional note; for the body analysis, your weight, height, sex, and age. Our server forwards it to an artificial-intelligence provider (currently OpenAI) solely to analyze it and return the estimate. Fagia's proxy does not persist the photos or request content after responding.

Before the first upload for each analysis type, the app asks for your explicit consent and identifies the specific data sent to OpenAI. You may withdraw it in Settings; doing so prevents future uploads and does not affect data you choose to keep locally. Estimates are informational, not medical. AI body analysis is available only to people aged 18 or over.

Goal projection. Separately, when you check your goal projection, the app sends —with no photo— the already-computed figures of that projection to the same AI provider, solely to generate the explanatory text that accompanies it. Fagia's proxy also does not persist that content after responding. OpenAI may retain inputs, outputs, and metadata under its API data controls; by default, abuse-monitoring logs may be retained for up to 30 days unless different retention controls have been approved.

3. Pseudonymous identifier and subscription

To manage your subscription we use a pseudonymous UUID generated on your device and stored in the iOS Keychain. It is not your name or email, but it is stable, can link requests, and may survive a reinstall. Apple handles the purchase, charge, and renewal through your App Store account and its own data. RevenueCat receives the pseudonymous UUID and the subscription status or data needed to validate your access. Fagia never sees or stores your payment details.

4. Abuse prevention (App Attest)

To prevent fraudulent use of the analysis service, the app uses Apple's App Attest to verify installation integrity. Pseudonymous technical records associated with that check are processed only for as long as needed to protect the service.

5. This website

This website uses no cookies or advertising pixels. Campaign pages under /discover/ measure visits and clicks to the App Store with a random tab identifier that expires after 30 minutes. Records include time, campaign, intended market and action, but no app data, advertising identifiers, IP address or user agent. They remain in Railway logs for up to 30 days; aggregate reports may be retained without the identifier. The hosting provider separately processes technical request data under its own policy.

5a. Optional ad measurement

In versions with the Meta integration, Fagia requests iOS tracking permission before activating ad measurement. If you allow it, Meta receives device identifiers, install and app-open signals, and technical data; RevenueCat may send subscription events, including trial starts, purchases, conversions and renewals, with their amount and currency. These are used to attribute and measure Fagia ads. We do not send your fasts, meals, weight, photos, notes or AI results to Meta. You can refuse without losing features or withdraw permission in iOS Settings → Privacy & Security → Tracking; when you reopen Fagia, it stops collecting information for this attribution and clears advertising identifiers retained in RevenueCat. Withdrawal does not automatically erase past records. Meta and RevenueCat retain received data under their policies; contact us using this page to request access or deletion.

Meta · RevenueCat

6. Third parties involved

Each processes data under its own privacy policy.

7. Retention

Local data remains on your device until you delete it or uninstall the app. The Keychain UUID may survive a reinstall. Fagia's proxy does not persist content sent to the AI after responding; the AI provider may retain it under the controls linked in section 2. Technical security records are retained only for as long as needed to protect the service. Apple and RevenueCat retain the data they process under their own policies.

8. Your rights

Removing the app deletes its local data, but does not guarantee deletion of the Keychain UUID or records processed by Apple, RevenueCat, the AI provider, or the hosting provider. For subscription matters or to exercise access, rectification, or erasure rights (Uruguay's Law No. 18.331 and, if you reside in the EU, GDPR), email us at hola@fagia.app. Data managed directly by Apple must also be requested from Apple.

9. Children

Fagia is intended only for people aged 18 or over and does not knowingly collect data from minors.

10. Changes

We may update this policy; the new version will be posted here with its date. If a change materially affects how your data is processed, we will provide appropriate notice in the app or on this website, as applicable.

11. Contact

Controller: fagia.app, Uruguay. Contact: hola@fagia.app.