Privacy Policy

Fasti · Last updated: July 13, 2026

Fasti ("Fasti", "we", "us") is a schedule and study-planning app operated by an individual sole proprietor based in Quebec, Canada. This policy explains what data the app handles, why, and your choices. Questions: getfasti.support@gmail.com.

1. The short version

Your schedule lives on your device by default. Cloud backup is optional and only happens if you sign in.
When you import a screenshot or text, it is sent to our processing service to extract events, then discarded — we don't keep your uploads.
Location is optional and used only for maps, commute estimates, and leave-by help when you allow it.
Payments, trials, and subscriptions are handled by Apple, Google, and RevenueCat in the app.
Social profiles, private messages, groups, reports, blocks, and Community Rules acceptance are stored to provide and safeguard social features.
Reports are confidential but are not anonymous to Fasti. Reported users are not told who submitted a report unless disclosure is legally required.
We collect limited product and website analytics to understand visits, features used, crashes/errors, funnels, and retention.
We do not sell your data and do not use it for advertising or cross-app tracking.

2. What we collect and why

Data	Why	Where it goes
Schedule, events, notes, courses, goals, money/shift entries you create	Core app functionality	On your device. Synced to our cloud only if you sign in for backup.
Screenshots / PDFs / text you import	To extract your events with AI	Sent to our server & Google Cloud Vertex AI for processing, then discarded. Not stored.
Current location (only when you allow a location/commute feature)	Maps, commute estimates, "already there" checks, and leave-by timing	Used by the app for that feature. Coordinates may be passed to Apple Maps, Google Maps, or the selected maps provider when you request directions. Address text may be sent to OpenStreetMap/Nominatim for geocoding. We don't store location history.
Device calendar events (if you enable calendar sync)	Two-way sync you turn on	Read/written on your device; included in cloud backup only if you sign in.
Apple or Google account email & name (only if you sign in)	Account & cloud sync	Firebase Authentication (Apple or Google).
Purchase / subscription status	To unlock paid features and show trial/renewal state	Apple, Google, and RevenueCat.
A random install identifier	To enforce fair-use limits and prevent abuse	Our server. Not linked to your name; not used for advertising.
Product and website analytics (page visits, app opens, feature use, clicks, device type, approximate country/region from locale/IP, referrer/UTM campaign, errors)	To improve Fasti, understand growth channels, fix drop-offs, and make the product more reliable	Our server and, when configured, Google Analytics. We do not use this for advertising or cross-app tracking.
Social profile, connections, private messages, reactions, group names/photos, membership, invites, and shared planning cards	To provide private social, chat, group, and collaborative planning features	Our Google Cloud-hosted database. Content is available only to the intended account, conversation participants, or group members, subject to blocking, moderation, and legal requirements.
Community Rules acceptance (account ID, policy version, and server timestamp)	To confirm agreement before an account first posts social content under the current rules	Our server. A version-scoped marker is also kept on the device so the app does not repeatedly ask the same account.
Safety reports and blocks (reporter account ID, target user/message/group ID, selected reason, optional notes, timestamps, status, and server-side evidence needed to review the report)	To investigate abuse, protect users, enforce our Terms, prevent duplicate reports, and maintain an audit record	Our server and authorized safety personnel. The app does not attach unrelated calendar, money, location, contact, or imported-schedule data to a report.

3. AI processing

To turn an uploaded image or text into calendar events, the content is processed by Google Cloud Vertex AI through our server. Uploads are used only to produce your result and are not retained by Fasti afterward. Per Google Cloud's terms, Vertex AI does not use your content to train its foundation models.

4. App permissions

Fasti asks for permissions only when a feature needs them. You can decline location, notifications, calendar access, or cloud sign-in and still use the core planner manually. You can change permissions later in your device settings.

5. Service providers

We rely on: Google Cloud (AI processing, database hosting), Firebase Authentication (Apple and Google sign-in), RevenueCat and Apple/Google (in-app subscriptions), Google Analytics (website/product analytics when configured), and OpenStreetMap/Nominatim (geocoding). Each processes data only to provide its service.

6. Social safety and moderation

Fasti may use automated checks before social content is posted and human review after a report. A report submitted in the app sends the target's internal ID, the selected reason, and any optional notes you choose to add. Authorized reviewers may then access the reported profile, message, group, surrounding conversation needed for context, account history relevant to the concern, and technical records needed to investigate abuse. Do not put passwords or unrelated private information in report notes.

Blocking and reporting are separate actions. Blocking is used to stop direct contact; reporting sends a concern to Fasti for review. We may preserve reported evidence even if content is later edited or deleted when reasonably necessary for safety, enforcement, fraud prevention, or legal compliance.

7. Retention & deletion

On-device data stays until you delete it or uninstall the app.
Cloud backup data is kept until you delete your account.
Uploads for AI extraction are processed transiently and not stored.
Social content is kept while the applicable account, conversation, or group remains active, unless it is deleted sooner or retained for a safety or legal reason.
Safety and conduct records are kept only as long as reasonably necessary to investigate reports, enforce our Terms, prevent abuse, maintain security and legal records, and resolve appeals. They are then deleted or de-identified where appropriate.
Delete your account & cloud data anytime in the app: Settings → Account sync → Delete account. This permanently removes your synced data and your sign-in account. See Account Deletion.

8. Your rights

You can access, export (via cloud download), correct, or delete your data. Depending on your region (incl. Quebec/Canada, the EU/GDPR, and California/CCPA), you may have additional rights to access or erasure. To exercise them, email getfasti.support@gmail.com.

9. Children

Fasti is intended for users 13 and older and is not directed to children under 13.

10. Changes

We'll update this page and the "Last updated" date when this policy changes.

11. Contact

Privacy, safety, or rights requests: Fasti — getfasti.support@gmail.com, Quebec, Canada. Website: https://getfasti.com.