Privacy Policy

This policy covers the Filo app for Mac, the services it uses at api.filo.im, and this website. Filo is an open-source project by an independent developer.

Your agents, conversations, notes, reminders, Feed, artifacts and settings are kept in the folder .config/filo in your home folder. Sign-ins for apps you connect are kept in your macOS Keychain. We never receive any of it.

Filo has no AI models of its own. Your agents answer with Claude Code, Codex, Muse Code or OpenCode, signed in with your own accounts. To answer, a tool gets your messages, the agent's instructions and the files you share, and sends them to its provider (such as Anthropic, OpenAI or Meta) under that provider's terms and privacy policy. Apps you connect work the same way, under their own terms.

• Voice messages. While you record, the audio goes through our relay at api.filo.im to Microsoft's speech service and comes back as text. We don't keep the audio or the text; we count minutes per network each day to apply fair-use limits.
• Updates. Filo checks its releases on GitHub for new builds and downloads them from there; GitHub sees your network address, as with any download.
• Problem reports. Only when you press Send, after a preview. They contain app and system details and the error, never your conversations.
• Shared artifacts. Only if you turn on sharing to claude.ai and share one.

Filo sends two anonymous events to PostHog: one when it's installed and one on each day it's opened. They carry a random install ID, the app version and channel, and that it runs macOS on Apple Silicon or Intel. Never your name, files or anything you write. To turn them off, add export FILO_TELEMETRY=0 to the .zshrc file in your home folder and reopen Filo.

This site sets no cookies. It uses Cloudflare Web Analytics, which counts visits without cookies or fingerprinting, and it's hosted on Cloudflare, which sees your network address to serve it. The Download button downloads Filo from GitHub, which sees it too.

Playing one of the demo videos loads YouTube's player, from youtube.com and youtube-nocookie.com, which then sees your network address; nothing loads from YouTube until you press Play.

We'll update this page and its date when Filo's handling of data changes. Questions, or requests to delete a problem report: hello@filo.im.