Privacy Policy
1. Your data stays on your phone
Your fasts, saved doses, electrolyte and water logs, symptoms, notes and (optional) weight are stored only on this phone, in the app's private storage. There is no account, no server and no sync: we never receive this data. The database is excluded from Google's automatic cloud backup, so it only leaves the phone in a backup file that you export yourself (optionally encrypted with a password you choose) or a report you choose to share. Saltfast reads no sensors, camera, microphone, location, contacts or health platforms (no Health Connect), and does not connect to any device.
Saltfast is a timer and log, not medical advice. It never sends your health entries (mg, ml, weight, symptoms, notes or times) to analytics or crash reports.
2. Permissions
- Notifications (Android 13+, the only permission Saltfast asks for) — asked when you start your first fast: the running-fast notification, milestone and goal alerts, and an optional daily electrolyte check-in. You can turn them off at any time; the timer keeps working.
- Run at startup and vibrate (no prompt) — to re-schedule milestone alerts after a restart and to vibrate with an alert.
- Internet and network state (no prompt) — ads, analytics, purchases and consent only. Your fasting data is never sent.
- Saltfast does not request phone calls (the emergency button only opens your dialer), exact alarms, location, camera, microphone, storage, body sensors or activity recognition.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: a slim banner on the History, Stats and Settings screens, an occasional full-screen ad when you leave History or Stats, and optional rewarded ads you choose to watch to unlock a Pro feature for a while. Ads never appear on the fasting timer, while logging a dose or a symptom, on the safety, refeed or red-warning cards, or in onboarding. Saltfast Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads and Meta Audience Network competing through AdMob mediation. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's, Unity's and Meta's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Saltfast asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your fasting data remains on your device until you delete it in the app (each fast, dose, symptom or weight entry, or everything at once) or uninstall the app. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Saltfast is intended for adults (18+) and is not directed to children; we do not knowingly collect children's data. Extended fasting is not safe for people under 18.
9. Changes
We will update this page if our practices change and revise the date above.