last updated oct 8, 2026
privacy policy
the short version
your data is yours. we never sell it, and we never use it to train AI models.
it stays private. your data lives in your own private cloud computer, separate from everyone else's, and anything sensitive (like the logins for apps you connect) is encrypted.
you're in control. delete your account from settings → privacy. access is revoked and deletion covers your memories, connected credentials and private companion-app databases; failed external cleanup is queued for retry.
overview and scope
folk is made by Nozomio, Inc. here's what we collect, why we collect it, the companies that help us run folk, and how to delete it all - in plain english, no legalese.
changes to this policy
we may update this policy as folk changes. if it's an important change, we'll let you know in the app or another reasonable way.
your data in folk
your cloud computer. folk runs on hosted agent servers and, for some accounts, a dedicated cloud sandbox. account data is isolated by user. temporary computers may be used for tasks. we retain service status and region details to operate them.
information you provide
your account. your phone number, your Telegram details if you use Telegram, a small file that keeps you signed in, and your basic settings.
your conversations. the messages, photos, and files you send folk, and its replies - that's what makes folk useful, and it's what gets wiped when you delete your account. if you talk to folk by voice, the audio is transcribed so folk can act on it. dictation in the iPhone app uses Apple's speech recognition, which may process the audio on Apple's servers under Apple's privacy terms; only the finished transcript reaches folk.
information collected through folk
billing and purchases. your plan, whether your subscription is active, and your invoices. Stripe handles web subscription checkout. separately, if you choose to save payment details in your Folk vault, we store those details encrypted for purchases you authorize. in the iPhone app, subscriptions are Apple in-app purchases handled by Apple, and Superwall (which runs our purchase screens) receives the purchase events so we know which plan you are on.
your bank, if you connect it. only if you choose to link a bank account through Plaid, folk receives read-only account balances and transactions for money questions and financial tasks or reminders you set up. this bank connection cannot move money. you can unlink your bank anytime and the synced copy is removed.
connected apps and services
apps you connect. for apps you choose to connect (like Gmail, Calendar, or GitHub), we store the secure key that lets folk act for you, and what you've allowed it to do. you can disconnect anytime.
when you connect an outside app, folk only uses the permission you give it to act for you. for example, if you connect Gmail or Calendar, folk can use it to answer you, draft, schedule, or automate what you ask. you can disconnect apps anytime in settings.
when you connect Google apps directly with folk you can pick read-only access, so folk can see but never send, edit or delete. every connected account shows what folk may do with it in settings.
disconnecting one app revokes folk's access to that account immediately and turns off the alerts it powered. emails, files and notes folk already saved for you stay until you delete them or your account; account deletion starts removal of this data and retries external cleanup when necessary.
those apps have their own terms and privacy policies. we never sell anything folk sees through them.
google workspace limited use
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
folk uses Google Workspace data only to do what you asked in that moment: read, draft, send, schedule, or file something in the Google apps you connected. we do not sell that data. we do not use it to train, fine-tune, or improve any generalized or foundational AI/ML model, ours or anyone else's. we do not transfer it to a third-party AI service for those purposes.
when folk calls an AI provider to answer you, it is on a paid API plan whose terms prohibit using API inputs to train their models. google user data is processed to fulfill your request and is not retained by those providers for training or other secondary use.
iPhone connections
your iPhone connections. only if you choose to connect them, folk receives the location, Apple Health categories, calendars, reminders, contacts, or photos you authorize. connecting Photos enables syncing the photos you authorize to your private folk account, including periodically in the background, so folk can answer questions about them. allowing photo access for an attachment, avatar or chat background does not by itself enable library sync. we also store your device's notification token so we can deliver reminders. each connection can be turned off and deleted separately. if you let folk read your contacts, their phone numbers are also matched, as one-way hashes rather than raw numbers, against other folk users so we can tell your contacts you joined and show you who is already on folk. you can turn this matching off by emailing support@nozomio.com.
iPhone connections are always optional and requested one at a time. folk uses background location for location-aware requests and reminders; Health data for the health actions and insights you ask for; Calendar and Reminders data for scheduling; and Contacts data to find or update people you name. iOS may let you authorize only some Health categories or selected contacts, and folk respects that choice.
health data is processed for the health features you choose, including answering questions, recording entries and generating estimates or reminders. relevant context may be processed by the AI and safety providers disclosed here. it is never used for advertising, never sold, never used to train models.
if you ask folk to call you, folk may phone you at your own verified number - never anyone else's - through our voice call provider, and only when you ask it to.
we never sell Health data, use it for advertising, or use it to train AI models. folk never invents measured health values. when you ask folk to write Health, Calendar, Reminder, or Contact data, sensitive changes require confirmation and remain pending until your iPhone reports that they succeeded.
usage and support information
how you use folk. which features you use, pages you visit, your device and browser type, and any errors or slowdowns - so we can fix bugs and keep folk fast.
when you ask for help. emails, bug reports, screenshots, and anything you send us when you reach out.
how folk uses information
run folk. sign you in, keep your cloud computer running, do the things you ask, and send you replies.
use the apps you connect. read or act on the apps you've connected only when it's needed to answer you or run something you set up.
bill and support you. handle your subscription, stop abuse, answer your questions, and keep folk reliable.
make folk better. see how folk is used overall - in totals, not by reading your stuff - fix what's broken, and decide what to build next.
AI, personalization and your choices
folk is an AI assistant, so answering you means sending relevant information to AI providers. before AI processing begins, we explain what is shared and why, with the provider details available beside your choice. in the iPhone app, tapping “agree & get started” or “agree & log in” records your agreement to your account when you sign in. opening the details alone does not give permission. an account that has not agreed is asked before using an AI feature; declining leaves that AI action undone.
what is sent. the messages you send folk, plus files, memories and information from connections you choose to enable (like calendar, contacts, health, banking, photos or location) - only what is relevant to the request at hand.
who receives it. most model requests go through OpenRouter, which routes them to model hosts such as Anthropic, OpenAI, Google, Together AI, Fireworks AI, Z.ai and Sail Research, depending on the selected model. OpenAI also processes in-app voice-call audio, phone-call summaries, voice previews and backup memory search. TypeSafe receives relevant text and context for structured decisions, including moderation, and fal.ai generates pictures when you ask for one. the full service-provider list is on our subprocessors page.
why. to answer you, do the tasks you ask for, generate images, check content safety and personalize proactive suggestions.
processing and retention. providers receive relevant information to run the feature you use. retention depends on the service, endpoint and configured controls. zero-data-retention routing for eligible model requests does not cover every connected service or erase your saved Folk chats and memories. image generation can temporarily store private outputs, and references you save can be retained for later requests. our service-provider list identifies each provider's role. Folk never sells your data or uses it to train AI models.
Feed builds an interests profile from your account details, messages, memories, commitments and activity, then uses it to select ideas and suggestions. the AI disclosure above must be accepted before that processing begins. you can tune or hide suggestions and report unsafe content from each card. your private Feed profile and posts are included in account deletion.
when you connect a custom model endpoint, we identify the recipient and ask for separate agreement before routing relevant conversation history, memory, files and connected context there. that operator has its own retention and training terms. removing the connection stops future routing but does not delete copies already held by the operator.
private apps, age and saved information
Cycle stores the period dates, symptoms and notes you enter in an owner-protected database. predictions are estimates, not medical advice or contraception. Study stores materials and progress you provide. other private companion apps store the records their screens describe. these databases require owner access and are included in account deletion.
we store the date of birth you provide for Character eligibility and an age-restriction record when your account information conflicts. this is private and is not identity verification. it is used to restrict adult features, not for advertising.
the vault stores credentials and payment details you explicitly save, encrypted at rest. relevant credentials may be used with the service or merchant for an authorized task. product analytics record identifiers, feature interactions, performance and crash diagnostics to improve reliability; native session replay is disabled. analytics events do not include raw message bodies, Feed titles or vault secrets.
AI model training
we never sell your data or use it to train AI models. processing a request, saving your history and training a model are different uses. the provider details above explain the processing needed to operate Folk; an optional custom model endpoint has its own terms, which you review before connecting.
characters and public listings
characters you make and publish. the characters you create in the app (name, picture, tagline, greeting, description, tags) and your chats with them. when you publish a character to the gallery, those listed fields become public to other folk users, along with your handle - or, if you have not chosen a handle, your first name. public listings have a share link and can be indexed by search engines. pictures you pick or generate for a character are stored on a public content delivery network, so anyone with the link can load them. unpublishing removes the listing from the gallery; the picture may stay cached for a short while.
run characters. character conversations are processed by our AI vendors exactly like your other messages: models and hosting providers such as Anthropic, OpenAI, Google, Together AI, Fireworks AI, Z.ai and Sail Research, reached through OpenRouter; TypeSafe supports safety and structured decisions; fal.ai generates pictures when requested. reference lookup providers may receive the character name you enter. public availability of a picture does not grant permission to reuse it, and we restrict unverified external pictures and provide a copyright reporting process. published characters are also filtered for objectionable content before they are listed, and reports you send about a character are reviewed by our team.
how information is disclosed
we rely on a few trusted companies (the legal term for these is “subprocessors”) to host, secure, deliver, and run folk. we only ever share what each one needs to do its job.
subprocessors
want the full, current list of these companies? see our subprocessors page.
data security and retention
every folk user is kept separate - your data lives in your own private cloud computer, never mixed in with anyone else's. anything sensitive we store, like the logins for apps you connect, is encrypted. only a few people can reach our live systems, and only to keep folk running and help you.
while your account is active, we keep your account info, your connected apps, and your cloud computer.
deleting folk data
when you request account deletion in settings → privacy, we revoke access and remove account records, memories, messages, saved credentials, Feed profiles and posts, and the private databases belonging to your companion apps, including Cycle and Study. deletion jobs retain the resource identifiers needed to retry external cleanup when a provider is unavailable. access is blocked during deletion; it is not a promise that every provider completes within seconds. encrypted backups expire on their retention schedule. limited records may be retained where needed for payments, taxes, security or legal obligations. deletion is permanent.
your choices and rights
see and change your info. you can view and update most of your settings right in the app. need something we don't show? just email us.
disconnect iPhone data. turn off Location, Health, Calendars, Reminders, Contacts, or notifications independently in the folk app. disconnecting stops new access and removes folk's synced copy of that connector's data.
delete everything. you can delete your account from settings → privacy anytime. access is revoked, account data is removed, and external cleanup is retried if necessary. deletion is permanent.
get a copy of your data. want a copy of your data to take with you? email us and we'll send what we reasonably can.
marketing. we keep marketing minimal. if we ever email you something promotional, you can opt out in one click. promotional push notifications from the iPhone app (offers, trial reminders) can be turned off in the app's Settings; reminders and replies you asked for keep working. to measure whether our own ads work, we may confirm a signup back to the ad platform it came from (Meta, Google, or OpenAI) using hashed contact details - never your conversations, and never for anyone else's advertising.
getting your name right. when you sign up by phone number, we may look that number up with a verification provider to prefill your name and city so folk can greet you properly. it's a one-time lookup, you can correct or delete the result by telling folk or editing your details in settings.
depending on where you live, you may have extra rights - like asking to see, fix, delete, or limit how we use your personal data. just contact us and we'll help.
children
folk is not for children under 13, and we do not knowingly collect personal data from children under 13. characters and the gallery are for adults only (18 or older).
contact
privacy questions: support@nozomio.com.