Privacy policy
The text below is the one inside the app, word for word. At the end there is a separate section about this website.
In short
Silueto doesn’t collect any data about you. The measurements you record are kept encrypted on your phone and never reach us, and the app analyses nothing else on it. We have no server, don’t require an account, and don’t use analytics, ads, or automatic error reports.
Who is responsible
Silueto is developed by Songurov Fiodor, an independent developer from the Republic of Moldova. For any question about your data: songurov@gmail.com.
What is saved and where
The values you enter (circumferences, weight, body fat percentage, height), the date of each one, the notes you write, the areas you choose, the name you want the app to greet you with, if you enter one, and the app settings. All of it is kept in a local database, in the app’s private storage on your phone, encrypted with SQLCipher (AES-256). The key is generated on the phone and kept in the system’s secure storage (the iPhone Keychain); no other device can use it. When several people use the app, the list of their names is also kept in the system’s secure storage, next to the key, not in a file. No one else, including us, has access to the database: we don’t have the key and can’t recreate it. One exception, only while reminders are on: the text of the upcoming reminders (the note you wrote for that day and, when several people use the app, the person’s name) is also kept outside the database, by the phone’s notification system and in a small file in the app’s private storage, so the reminders can arrive on time. The app doesn’t encrypt this text, and that file is not included in backups. A reminder’s text (the note and the name) is deleted the first time you open the app after its time has passed, and all of it when you turn reminders off or delete that person. A reminder already shown stays in the phone’s notification list until you clear it. Body measurements can be health data; that is exactly why they never reach us. In Trainer mode, while the trainer’s reminders are on, their text is kept the same way, unencrypted, in the phone’s notification system and in that small file: the appointment’s time and place, the clients’ names or initials — as you choose in Reminders — or no name, how many appointments a package has left and the day it expires. Clients’ notes, phone numbers and measurements never go into a notification, so they never reach the lock screen either. All of this text is deleted when you turn the reminders or Trainer mode off.
What is not saved
Email, phone number, age, sex, location, contacts, photos, device identifiers, or usage statistics. The app doesn’t ask for any of them and, apart from the measurements you enter, analyses nothing on your phone: it doesn’t read your photos, contacts or other apps, and it has no analytics.
Permissions and network
The app can ask you for two permissions. The first: notifications on measuring days, at 8:00 and 20:00. It asks only when you plan a day, choose a rhythm or turn reminders on, and the app still works if you say no. The phone itself schedules the reminders; they don’t come from any server. The second: adding images to Photos. The system asks for it the first time you save the report image to Photos from the share sheet; the app only adds the image and can’t see or read your photos. The app sends nothing anywhere, because it has nowhere to send it: we have no server. The add-to-calendar button in Schedule opens the iPhone’s calendar with the event filled in, and you save it there; for this, the app itself doesn’t read or write your calendar, so the button doesn’t ask for access to it. When you import, the app sees only the file you pick in the system file picker; it has no access to the other files on your phone. The round timer plays its sounds in the background too, with the phone locked, only while it runs; there is no question for this. For automatic backup, the app can reach only the folder you pick in the system picker, and uses it only to write its own backups and delete those older than the last 7. In Trainer mode, the add-to-calendar button on an appointment’s screen works as it does for days in Schedule: it gives the Calendar app the appointment’s title (the clients’ names), time, length, place and note, and you save the event there. A third permission, only in Trainer mode and only if you turn on “Keep appointments in your calendar”: full access to the calendar; without it, iPhone doesn’t let an app even move or delete its own events. The app uses it only to create the “Silueto · Appointments” calendar or show you the calendars it can write to, and to write, move and delete your appointments in the calendar you chose; it takes into account only the events it wrote, and doesn’t keep, move or delete any others. Silueto sends nothing anywhere. If you turn sync on, your appointments are written to your phone’s calendar, and the calendar syncs them with your Google or iCloud account. If you say no, the app keeps working, and the add-to-calendar button and the .ics file remain.
When something leaves your phone
Only when you choose, and only through the system share sheet. When you export: the encrypted .silueto copy and, only if you ask for it, the unencrypted CSV spreadsheet. When you send a report from Report: an image or a .json file for Silueto, both unencrypted. The image shows the changes in the period you chose: the dates, the values at the start and at the end, and the differences. The file contains the complete sessions in that period: each value with its date and time, the areas measured, with their names, and, unless you have hidden BMI, your last recorded height. You choose where it goes. Nobody can open the encrypted copy without your password, not even us; anyone who gets the CSV spreadsheet, the report image or the report file can read them. The name for the greeting, if you entered one, leaves in the encrypted copy and, only if you leave “Put the name on the report” on, in the report image and file; never in the spreadsheet. On iPhone, the first time you save the report image to Photos from the share sheet, the system asks your permission for the app to add images to Photos; the app only adds the image and doesn’t read your photos. From that moment on, the file or image is subject to the rules of the app or service you sent it to. We don’t see them and can’t take them back. And, only if you turn on automatic backup, into a folder you choose — see “Automatic backup” below. And, when you add a measuring day or the rhythm to your calendar, the event (its day and time, a title and a short note, no values) goes to the iPhone’s Calendar, which may sync it with iCloud or another account on the phone. In Trainer mode, the appointment schedule leaves only when you send it, through the share sheet, as an unencrypted .ics calendar file. Your copy has each appointment’s time, length, place, clients’ names and note; the copy sent to a client has only their own appointments, with the time, length and place, without any names or notes. The file is a copy of the schedule at the moment you send it and doesn’t update itself: an appointment moved or deleted afterwards stays unchanged in the calendar that received it. And, only if you turn on “Keep appointments in your calendar”, your appointments go to the calendar you chose: each with its time, length, place, the title you picked (the clients’ names, their initials or just “Appointment”) and a note that Silueto added it, without your notes. The calendar then syncs them with your account, under that account’s rules. When you turn sync off, you choose whether the appointments from today on are deleted from the calendar or stay there. Also in Trainer mode, “Message the client” opens SMS, WhatsApp or the share sheet with a message the app wrote in the language chosen for the client — the appointment’s time and place and how many appointments they have left in the package — which you can change. The message leaves only when you send it from that app, to whom you choose; Silueto sends nothing by itself. The client’s phone number reaches SMS or WhatsApp only when you pick one of them. In Trainer mode, the main person’s encrypted copy — the export and the automatic copy — also holds the trainer notebook: your clients, with their names, phones, notes and the link to their measurements, the places, series and appointments, with each client’s state, the packages and payments, and the notebook’s settings. Another person’s copy doesn’t hold the notebook. From Reports you can export, only when you ask, through the share sheet, the notebook’s CSV tables — appointments, packages and payments — unencrypted: they have your clients’ names, the days, times, places, appointment notes, prices and amounts, but not the phones or your notes about clients; anyone who receives them can read them.
App stores and the operating system
The App Store and iOS may collect data about installs, updates, or errors, under Apple’s policies and according to your system settings. From Apple we receive only aggregated, anonymous statistics that we can’t link to a person.
System backups
The database may be included in the iPhone’s iCloud or computer backup, but encrypted; its key goes into that backup only locked to this phone’s hardware, so such a backup opens only on the same iPhone. To move your data to another phone, use the encrypted export. System backups are managed by Apple, not by us.
Automatic backup
Only if you turn it on in Profile → My data → Automatic backup. Then, when you leave the app, Silueto writes an encrypted copy of your data (the same .silueto file as the export, with the password you chose) into a folder you chose in Files, for example in iCloud Drive. The app sends nothing: the folder is synced by Apple or the service you chose, in your account, not ours. The last 7 copies are kept. The automatic backup password is kept in the phone’s secure storage (Keychain), on this phone only, so the app can back up without asking you. Values in Recently deleted are not included. Turning automatic backup off makes the app forget the folder and the password; backups already made stay in the folder until you delete them.
Your rights
Because your data never reaches us, you exercise the rights given to you by the General Data Protection Regulation (GDPR) and the Republic of Moldova’s personal data protection law directly in the app: you can view your data at any time in History, correct or delete entries one by one, take it with you through Export, and delete all of it from Profile. There is no copy with us that we could show you, correct, or delete.
If you email us
An email sent to songurov@gmail.com reaches us with your address and what you wrote. We use them only to reply to you, don’t pass them on to anyone, and delete them once the conversation is over, unless you ask us otherwise. Don’t send measurements by email if you don’t want us to see them.
Deleting your data
You can delete all your data at any time from Profile → My data → Delete all data, or by uninstalling the app. Deletion is permanent: we have no copy to recover it from. The app also removes the data from the database file itself, not just from what you see, and clears the export copies kept temporarily on the phone. A value deleted in History stays for 30 more days in Profile → My data → Recently deleted, where you can bring it back or delete it for good sooner; then it is gone from the database file too. Copies you saved outside the app — exports or automatic backups — are yours: we can’t delete them.
Children
The app is not directed at children under 13 and doesn’t collect data from anyone, regardless of age.
Changes to this policy
If the way the app handles data ever changes, this text will be updated in the same version of the app, with the date above, and the change will be announced in the app before it takes effect.
Contact
For questions about this policy: songurov@gmail.com.
This website, silueto.com
No cookies, no tracking
This site sets no cookies and stores nothing in your browser. It has no analytics, no tracking pixels and no ads.
Nothing loaded from elsewhere
The fonts, the images and the only script, the one that sends the form without reloading the page, all come from silueto.com. No page asks another server for anything.
The contact form
What you type in the form is sent once, as an email, to Songurov Fiodor’s inbox (songurov@gmail.com), through Cloudflare Email Service: your name if you give it, your email address if you give it, your message, and, if you tick it, your request to hear about the launch. The email also carries the page language and the time it was sent. It does not contain your IP address, your browser or your location.
The site keeps the message nowhere else. The inbox is a Gmail account, so the email is also stored by Google. We use it only to reply to you or to let you know, we share it with no one, and we delete it once the conversation is over, unless you ask us not to.
Hosting
The site is hosted by Cloudflare. Like any host, Cloudflare processes every request (IP address, browser, the page asked for) to deliver the pages and protect them from abuse, under its own privacy policy: www.cloudflare.com/privacypolicy
The form uses your IP address only to limit how many messages can be sent from one place in a minute. We don’t write it down anywhere.
The site and the app
The Silueto app doesn’t talk to this site and sends nothing here. The site only describes it, and receives the messages you choose to write to us.