How Filo handles your data.

This policy explains what Filo collects, why, and what you control. It covers the Filo mobile apps, the filo.im website, and the services behind them (api.filo.im and dev.filo.im).

• Account basics. Your name and email address, taken from the Google or Apple account you sign in with.
• Your conversations. What you say to Filo on calls and what you type in chat. Call audio is processed to produce a transcript so Filo can respond and remember.
• What Filo remembers. Notes Filo keeps between conversations — topics you return to, what matters to you, reminders and schedule details you share — so you don’t start from zero each time.
• Connected Google data. If you connect Google Calendar, Gmail, Drive, Docs, Sheets, Slides, or Contacts, we store an access token — encrypted — and use it only for what you’ve authorized and asked Filo to do.
• Device and push tokens. Needed to deliver call invites and reminders through push notification services.
• Usage analytics. Behavioral events like “reminder created” or “call started.” By design these contain ids and counts — never your name, email, or anything you said or typed.
• Technical logs. Server logs and AI traces our engineers use to debug problems. Traces may include conversation content; access is restricted and treated as confidential.

We use your data to operate Filo: answering your calls, remembering what you’ve shared, creating reminders, and working with the integrations you’ve connected. We also use it to keep the service reliable, debug failures, prevent abuse, and answer support requests.

We don’t build advertising profiles and we don’t make automated decisions that affect you legally.

Realtime audio is carried by third-party voice infrastructure, and Filo runs on large language models accessed through third-party AI providers; what you say and what Filo remembers are shared with those models to generate replies. Different voices and models may use different providers, and we list available voices in the app before you choose one.

When you connect a Google integration, Filo stores an OAuth token encrypted at rest and uses it to act on your explicit instructions — checking your calendar, drafting an email, finding a document.

Filo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect any integration in the app, which deletes the stored token immediately. You can also revoke Filo’s access any time from your Google account at myaccount.google.com/permissions.

Product analytics are deliberately behavioral — which screens were viewed, which buttons were tapped, how many reminders were created. The event pipeline is type-checked so names, emails, and message content cannot be sent.

Engineering traces are available to our team when something breaks or Filo answers poorly, showing us why. They are access-restricted, used for debugging and quality, and never shared or sold.

• We don’t sell, rent, or trade your data. Ever.
• We don’t run ads, and we don’t share your conversations with advertisers.
• We don’t use your conversations to advertise to you.
• We don’t look at your data except to fix a problem you’ve asked us about or to keep the service safe.

We keep your data while your account is active so Filo can remember you. If you stop using Filo and want everything gone, email hello@filo.im — we’ll delete your conversations, memories, reminders, and account data within 30 days. Disconnecting a Google integration deletes its stored token immediately. Backups roll off on the same schedule.

Data travels over TLS. Google integration tokens and other secrets are encrypted at rest. Access to production systems follows least privilege. No system is perfect, so if you find a vulnerability, tell us at hello@filo.im — we’ll take it seriously.

Filo isn’t directed to children under 13 (or under 16 in countries that require it). If we learn we’ve collected data from someone that young, we’ll delete it. Parents and guardians can write to hello@filo.im.

Wherever you live, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it — just email hello@filo.im. We’ll respond within 30 days. If you’re in the EEA or UK and something feels off, you can also complain to your local data protection authority.

If we change something material — what we collect, why, or who sees it — we’ll update this page, change the date above, and tell you in the app before the change takes effect.

Everything in this policy, one email away: hello@filo.im. We read it all.