Downface for iOS
Downface doesn't have a server, an account system, or analytics of any kind. There's no login, so there's no account to hack and no email address stored anywhere.
Downface uses the TrueDepth camera and Apple's ARKit face-tracking APIs to measure the distance between your face and the phone screen while you do a set. That distance measurement – not an image, not a 3D mesh, not any other representation of your face – is the only thing the app reads from the camera, and it's used solely to detect and count reps in real time.
This face data is processed entirely on your device and is never saved to disk, never leaves your device, and is never transmitted to Downface's developer or to any third party. It exists only for the fraction of a second it takes to compute the current distance value, then it's discarded. The camera turns on only while you're actively doing a set.
Your workout history (every set, every rep, every date) is stored locally in a small database on your phone. It only leaves the device if you export it yourself as a backup file, or if you turn on iCloud backup in Settings.
If you turn on Apple Health sync, Downface writes your finished workouts to Health so they show up next to your other activity. Downface never reads anything back from Health – it only writes.
If you turn on iCloud backup, an encrypted copy of your workout history is stored in your own iCloud account so it can restore automatically on a new phone. That copy lives in storage only you control – Downface has no server and no way to read it. Turning iCloud backup off stops updating that copy but doesn't delete it; you can remove it yourself from your iCloud storage settings at any time.
Backup files you export manually are encrypted before they're written to disk. Only Downface can open and read them back – if you send a backup to someone or store it in the cloud yourself, it stays useless without the app.
If you allow notifications, they're scheduled and delivered entirely by iOS on your own device. Downface has no way to know whether a reminder was seen, tapped, or ignored.
Since nothing about you or your workouts ever reaches us, there's no data to sell, share, or lose in a breach. If that ever changes, this page will change first.