FAGL Privacy Policy
Summary
- FAGL stores your to-dos, focus sessions, goals and reflections on your devices and, when iCloud is available, synchronizes them through your private iCloud storage. No FAGL account is needed.
- AI is optional. Cloud AI (Claude by Anthropic) is only for people 18 or older and is used only if you agree in the app. FAGL does not store what you send. Anthropic uses it only to write the answer, does not train on it, and deletes it within 30 days (with narrow exceptions, see section 3).
- To manage the free AI credit, the AI Plus subscription and the daily limits, the FAGL server keeps hashed purchase identifiers with usage totals. It never stores your content or your IP address.
- Apple handles all payments. FAGL only receives Apple-signed transaction information to verify your purchase and subscription.
- If you connect your own AI API key (optional), requests go straight from your device to the company you chose. FAGL never receives the key or the content (section 6-1).
- The app downloads a daily background photo from picsum.photos and, on Mac and only if you choose, an AI model from Hugging Face.
- No ads, no analytics, no tracking, and no third-party SDKs for analytics, ads or tracking.
1. Who we are
FAGL is made by Jongmin Lee, an individual developer ("we", "us"). Contact: lee1993ljm@gmail.com
2. Data on your devices and in iCloud
- To-dos, goals and roadmaps, focus sessions, reflections (ratings and notes) and settings are stored in the app's own storage on each device where you use FAGL: Mac, iPhone, iPad and Apple Watch. On Mac, this is the app's sandbox container.
- When iCloud is available, records and shared timer status synchronize between devices using the same Apple Account through Apple's private iCloud database (CloudKit). Selected settings, including your weekly goal and break settings, use Apple's iCloud key-value storage. These services are operated by Apple under its own terms. This synchronization does not send your records to the FAGL server, and we cannot access them. Check the status in Settings > Data > iCloud Sync.
- The Apple Watch app gets your to-dos and the timer from FAGL on your paired iPhone and sends its focus sessions back to it. This goes only between your own devices; we never receive it.
- On Mac, iPhone and iPad, FAGL makes automatic local backups in the same storage and keeps the latest 14. Backup files (.fagl) that you export, and CSV exports on Mac, iPhone and iPad, are saved or sent only where you choose.
- If you download the on-device AI model (Mac only), its files are stored on your Mac too.
- We cannot see or access these records. To remove each device's local copy, delete the app from that device. On iPhone, iPad and Apple Watch, this deletes its data too. On Mac, also delete the app's data (
~/). Delete any backup files or exports you made yourself. Deleting the app or its local data does not automatically delete synchronized copies in iCloud or on your other devices.Library/ Containers/ com. jmlee. FAGL
3. Optional cloud AI
When it is used. Before using cloud AI, FAGL asks for your consent. It is used only if you confirm that you are 18 or older and agree on that screen. Every purchase of FAGL includes a one-time free cloud AI credit (roughly a few hundred uses) with a daily limit, and the optional AI Plus subscription adds a monthly allowance (section 4). TestFlight beta builds work the same way.
What is sent.
- With each AI request: only what that feature needs, such as to-do titles and notes, reflections, goals and a summary of your focus time, plus the app language.
- When a session starts (about once a day): the App Store purchase proof that Apple signs for your copy of FAGL (AppTransaction), the Apple-signed subscription transaction if you subscribe to AI Plus, the app version, the platform, and a random installation ID created by the app.
- As with any internet connection: your IP address.
FAGL does not send your name, email address, Apple Account, contacts, location or hardware identifiers.
Who processes it, and where.
| Recipient | What it does | Where |
|---|---|---|
| Cloudflare, Inc. (US company) | Hosts the FAGL server (Cloudflare Workers), which verifies purchases and subscriptions, counts usage, blocks abuse and forwards the request to Anthropic. | Cloudflare data centers worldwide, usually one near you |
| Anthropic, PBC (US company) | Writes the answer with its Claude models. Receives only the request content, the app language and a pseudonymous identifier (a hash, sent as metadata. so Anthropic can detect abuse), never your name, email, purchase details, installation ID or IP address. | Processed on Anthropic's global infrastructure, stored in the USA |
Purpose. To write the AI answer you asked for, to confirm that the request comes from a purchased copy of FAGL (and, for AI Plus, from an active subscription), to manage the free credit, the monthly allowance and the daily limits, and to prevent abuse. Nothing else.
How long it is kept.
- Request content and answers: the FAGL server does not store them. Anthropic deletes them automatically within 30 days after the answer, unless the law requires it to keep them longer or they are needed to enforce Anthropic's Usage Policy. Content that Anthropic's safety systems flag may be kept for up to 2 years.
- Hashed purchase and subscription identifiers with usage totals: kept while the service runs (section 4).
- Daily usage counters: deleted automatically after about 3 days.
- Hashed IP address for per-minute rate limiting: the hash changes every day, and the IP itself is never stored. It is deleted with the daily counters after about 3 days.
- Purchase proof, subscription transaction, app version, platform and installation ID: checked when the session starts, then discarded.
- Server logs hold only technical events (for example, an error code), never content, identifiers or IP addresses.
No AI training. FAGL does not use your content to train AI, and Anthropic does not use API inputs and outputs to train its models.
How to turn it off. Choose "On-device only" on the consent screen, or turn off cloud AI in Settings > AI at any time. Turning off "Use AI features" in the same place turns off all AI. Turning off cloud AI does not cancel an AI Plus subscription; cancel it in your App Store account settings.
What happens instead. If you have connected your own API key, your AI requests go directly to your chosen provider (section 6-1), even when FAGL cloud AI is off. Otherwise, AI runs on your device: with Apple's on-device AI on supported devices, or, on Mac, with the on-device AI model (sections 5 and 6). The same happens when you reach the daily limit or use up the free credit; you can then also subscribe to AI Plus. If neither on-device option is available, only the AI features are unavailable; everything else keeps working.
4. Purchases, free credit and AI Plus
Payment. Apple handles all payments for FAGL and AI Plus. We never see your payment details, your name or your Apple Account. FAGL receives only the transaction information that Apple signs (for example, the product, transaction IDs and the subscription's expiry date) and uses it only to verify your purchase and subscription.
Hashed identifiers. To give each purchase its one-time free credit, and each subscription its monthly allowance, the server has to recognize repeat requests without knowing who you are. It stores only one-way SHA-256 hashes:
- a hash of the App Store purchase identifier, with the running total of free credit used. It is kept while the service runs, because without it the one-time credit could be claimed again;
- if you subscribe, a hash of the subscription's original transaction ID, with your usage for each billing period, kept while the service runs;
- daily usage counters for the daily limit, deleted after about 3 days.
We cannot turn these hashes back into the original IDs, and we have no way to connect them to your name, email or Apple Account. They contain no content. Apart from the pseudonymous identifier described in section 3, they are not sent to Anthropic, and they are never used for tracking or advertising.
AI Plus. AI Plus is an optional auto-renewable subscription (USD 2.99 per month; prices vary by country or region) that adds a monthly cloud AI allowance with a daily limit. It renews automatically unless you cancel it in your App Store account settings at least 24 hours before the current period ends. It is not available through Family Sharing, and it does not change your one-time purchase of FAGL or its free credit. Terms of Use: Apple's standard license agreement (https://www.apple.com/legal/internet-services/itunes/dev/stdeula/).
5. Apple's on-device AI
On devices that support Apple Intelligence, FAGL can use Apple's on-device model. Requests are processed on your device, and FAGL sends nothing anywhere. Apple Intelligence itself is covered by Apple's privacy terms.
6. Optional on-device AI model (download, Mac only)
On Mac, in Settings > AI you can choose to download an AI model (about 3.6 GB or 5.2 GB) from Hugging Face, Inc. (USA). Only model files are downloaded; none of your content is uploaded. As with any download, Hugging Face can see your IP address and standard request details. After the download, the model runs offline on your Mac.
6-1. Your own API key (optional)
In Settings > AI > Your API key, you can connect your own API key from OpenAI (ChatGPT), Anthropic (Claude), xAI (Grok) or Google (Gemini). The AI features you use then send only what they need, such as to-do titles and notes, reflections, goals and focus totals, directly from your device to that company (all four are US companies). It handles the request under its own terms and privacy policy and bills your account. FAGL never receives your key or this data, and the FAGL server is not involved. The key is stored only in this device's keychain and is not synced to other devices; disconnecting deletes it. Some free API tiers (for example Google's) may use what you send to improve their models, so check your provider's terms. The automatic motivation line never uses your key.
7. Daily background photo
Once a day, FAGL automatically downloads a random background photo from picsum.photos (Lorem Picsum, which serves photos from Unsplash). No personal data is sent with this request. Like any web request, it shows your IP address and standard request details (such as the time) to that service and its hosting provider, which handle them under their own policies.
8. What FAGL does not do
No FAGL account or FAGL sign-in is needed. iCloud synchronization uses your Apple Account. The FAGL app uses no advertising, analytics, crash-reporting or tracking SDKs. We do not sell or share personal data, build profiles, or track you across apps and websites.
This public website uses Google Analytics 4 to understand visits and page interactions. This is separate from the FAGL app, which has no analytics SDK. Google may receive browser and device information, approximate location derived from an IP address, page URLs and interactions, and cookies or similar identifiers under its own policies. See Google’s Privacy Policy.
9. Legal bases and your rights
Where laws such as the GDPR apply: sending your content to cloud AI relies on your consent, which you can withdraw at any time in Settings > AI (this does not affect requests already made). Verifying purchases and subscriptions and keeping the credit and allowance totals are needed to provide what you bought. Rate limiting and the short-lived daily counters rely on our legitimate interest in keeping the service from being abused. You can ask us for access, correction, deletion or restriction, object to processing, and complain to your data protection authority. Because we keep only hashes that we cannot link to you, we usually cannot find data about a specific person. The daily counters delete themselves after about 3 days. Everything on your devices is under your control.
10. International transfers
Cloud AI requests may be processed in the USA and other countries where Cloudflare and Anthropic operate. Anthropic processes requests on its global infrastructure and stores data in the USA. The data protection laws there may differ from those where you live. By agreeing on the consent screen, you agree to this transfer. You can withdraw at any time as described above.
11. Children
FAGL has no account and is suitable for all ages, but it is not directed at children, and we do not knowingly collect personal information from them. Cloud AI is only for people 18 or older, in line with Anthropic's rules for services that minors might use, and the consent screen asks you to confirm your age. If you are under 18, please do not turn on cloud AI. On-device AI (Apple Intelligence and the optional on-device model) and every other feature work for everyone.
12. Changes to this policy
If this policy changes, we will publish the new version at this address with a new effective date. Significant changes, such as a new recipient of data, will also be mentioned in the app's release notes.
13. Contact
Jongmin Lee · lee1993ljm@gmail.com