Privacy Policy

Effective July 27, 2026

Facedown ("the App") is developed and operated by Sen Huang. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

Data We Collect

• Apple ID — when you sign in with Apple, we receive your Apple user identifier, and optionally your name and email address (if you choose to share them). Your Apple ID is used solely to authenticate your account and detect credential revocation.
• Display name — a name you choose to show your partner. This is entered manually and can be changed at any time.
• Email address — if you choose to share your email during Sign in with Apple. Used only for account identification and support. We do not send marketing emails.
• Bypass details — when you break through an app block, the date, time, and name of the bypassed app are recorded. The app name is used to tell your paired partners what was bypassed. Aggregate bypass and shield-resist counters are also stored to compute streaks.
• Blocked-apps summary — the count of individual apps you have selected to block, plus the names of any high-level categories you've picked (e.g. "Social", "Games"). The specific app identifiers, app icons, and app names are not collected — only the totals and category labels, so partners can see "5 apps + Social" rather than which apps.
• Device tokens — used for push notifications via Firebase Cloud Messaging. Tokens are stored per-device and used only to deliver notifications you have opted into.
• Subscription / purchase history — if you subscribe to Facedown Premium, RevenueCat receives subscription transactions tied to your account so we can keep entitlements in sync. We do not store payment card details.

How We Store Your Data

Account, partnership, bypass, subscription, and notification-delivery data is stored in Firebase Firestore, hosted on Google Cloud Platform. Data is encrypted in transit and at rest per Google Cloud's security standards. Your blocked-app selection and weekly time-spent totals remain on your device; authentication and invite credentials are stored in the iOS Keychain.

Data Shared With Your Partner

When you pair with a partner in Facedown, the following data is shared with them:

• Your display name
• The timestamp of your most recent bypass (so they can see when your streak last reset)
• The name of an app when you explicitly bypass its block, delivered in the partner alert
• Your current streak length
• Your longest streak ever
• Your lifetime bypass count and shield-resist count
• Your blocked-apps summary (the count and high-level category labels described above — never the specific app names)
• The pairing creation date

This sharing is the core purpose of the App. We never sell your data, and we never share it with advertisers or data brokers. When you send a partner an invite link, whoever opens that link can see your display name (so they know who invited them) before they pair. The only other parties that process your data are the infrastructure, subscription, and analytics providers listed below, acting on our behalf to operate the App.

Third-Party Services

Facedown uses the following third-party services:

• Sign in with Apple (authentication)
• Firebase Authentication (identity management)
• Firebase Firestore (data storage)
• Firebase Cloud Messaging (push notifications)
• Firebase App Check (abuse prevention)
• Google Analytics for Firebase (in-app product analytics)
• RevenueCat (subscription management)

Firebase services are subject to Google's Firebase Privacy Policy. RevenueCat's privacy policy is available at revenuecat.com/privacy.

Analytics

We use Google Analytics for Firebase (GA4) to understand how people move through a few key moments in the App — for example sending a partner invite, opening an invite, completing pairing, and starting or completing a subscription. These events are tied to a Firebase-generated installation identifier, not to your name, email, Apple ID, or partner. We do not put your display name, account identifier, blocked-apps data, streak data, or any partner information into analytics events. This data helps us see where onboarding and pairing can be improved. It is processed by Google under Google's Firebase Privacy Policy. We do not use it for advertising, and we do not track you across other apps or websites.

On-Device Usage Chart

To show you your weekly usage chart, Facedown reads aggregated daily totals (minutes per day) for the apps you have chosen to block. This calculation happens entirely on your device using Apple's DeviceActivity framework. The aggregated minutes are cached locally for the chart and are never uploaded to our servers, sent to your partner, or shared with anyone else.

What We Do Not Collect

• No advertising SDKs or ad identifiers
• No tracking of your activity across other apps or websites
• No location data
• No contacts, photos, or other personal media
• No browsing history
• No screen recordings, screenshots, or content from any app
• No time-spent totals or continuous app-usage history leave your device; only bypass details and aggregate counters described above are uploaded

Data Deletion

You can delete your account and all associated data at any time from within the App via Settings → Delete Account. This permanently deletes:

• Your user record and display name
• All partnership data
• All bypass history
• All shield-resist history, weekly recaps, and reactions
• Your Firebase authentication record
• All device tokens

Deletion is immediate and irreversible.

Children's Privacy

Facedown is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided data to us, please contact us and we will delete it promptly.

Your Rights (CCPA / GDPR)

Depending on your jurisdiction, you may have the right to:

• Request a copy of your data
• Request deletion of your data
• Opt out of data sharing (note: partner sharing is integral to the service)

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the revised policy.

Contact

For questions or concerns about this Privacy Policy, contact us at [email protected].