Privacy Policy

SiteFact is made by Ulix (the “operator”, “we”). This page explains what the SiteFact app and its sharing service do with your data. Questions: (contact email not yet configured).

No account, no tracking

SiteFact has no sign-up. The app creates a random anonymous install ID on your device. It is not linked to your name, email, phone number or Apple ID. We do not use the advertising identifier (IDFA), we include no third-party analytics or advertising SDKs, and we do not track you across other apps or websites.

What stays on your device

Your records, photos, notes and settings are stored on your device. Nothing leaves it unless you choose to share.

What is uploaded when you share

When you share a report, an entry or a project invite, the app uploads to our server:

• a snapshot of the text you chose to share: titles, notes, locations, statuses, comments, dates, and any project, company or personal names you typed (for example “prepared by” or an inviter name);
• the photos attached to those entries. Photos are re-encoded by the app before upload and do not include location (GPS) metadata;
• your anonymous install ID, used to apply fair-use limits.

Anyone who has the link can view the shared record. Links are long and random, but treat them like a key: share them only with people you trust. Shared pages are marked noindex and are not cached by our servers or browsers.

How long we keep it

• Free: shared records are deleted after 30 days.
• Pro: shared records are kept until you withdraw them.
• Withdrawing: you can withdraw a share or an invite at any time in the app. The content and photos are deleted immediately and the link then shows “no longer available”. Withdrawing an invite also withdraws the records share attached to it.
• Invites expire after 30 days and are deleted from our database 90 days after they expire, are accepted or are withdrawn.
• Usage events (below) are deleted after 400 days.

Usage events

To understand whether the app and sharing work, the app sends a small set of events (for example “report generated” or “app opened”) with your anonymous install ID, a timestamp, and a few coarse values such as a count or a plan name. Events never contain the text of your records, photos, names or contact details. When an event refers to a share or invite link, we store only a one-way hash of the link, not the link itself. We also keep a count of how many times each shared page was opened (excluding link-preview robots).

Technical data

Our hosting provider (Cloudflare) processes requests, including IP addresses, to deliver the service and block abuse. We use IP addresses only for short-lived rate limiting and do not store them with your records.

Subscriptions

Subscriptions are handled entirely by Apple. We never see your payment details. See the Terms for renewal and cancellation.

Your choices

You can withdraw any share or invite in the app, or delete the app to remove everything stored on your device. To ask us to delete data tied to your install ID, or any other privacy question, contact (contact email not yet configured). If you are in the UK or EU you also have rights of access, correction and deletion under data protection law.

Children

SiteFact is a professional tool and is not directed at children.

Changes

If we change this policy we will update the date above and, for material changes, tell you in the app.