Privacy
Last updated: 23 October 2026
The short version. Your diary lives on your iPhone. There is no account. Filo uses an AI in the cloud to write, only if you say yes: it gets only what it needs, keeps nothing and never uses your words to train a model. No ads, no tracking, nothing sold.
Who we are
Filo is made by Alessandro Monti, in Italy, who is the data controller for what this policy describes. Write to support@hellofilo.app for anything about your data.
What stays on your iPhone
Your pages, notes and letters, how you feel, and what Filo reads to write the day (photos, places, steps, calendar, music, weather) stay on your iPhone. We have no server that stores them. If you turn on iCloud backup, Apple keeps a copy in your iCloud account, encrypted.
What leaves your iPhone, and when
To write with the AI (only if you turn it on)
To write the evening page, Filo sends the text it needs: the facts of the day (times, place names, the weather, steps; calendar titles and songs only if you turned those on), your words on the page and your answers. If you also turn on “The AI looks at the photos”, Filo sends small thumbnails of some photos of the day, without their location.
It travels encrypted through a small server of ours on Cloudflare, which passes the request and the answer and writes no logs of the content. From there it goes to OpenRouter, which routes it only to providers with zero data retention: Anthropic’s Claude models and Google’s Gemini, running on Google Vertex AI or Amazon Bedrock. They answer and keep nothing. Your words are never used to train a model.
We do this with your explicit consent, which you give in the app and can withdraw at any time in Tu › Privacy (“Filo con l’AI”, “L’AI guarda le foto”). Without the AI, Filo still works: the page shows the facts as your phone has them. In Tu › Privacy › “Cosa è uscito oggi” you can see each send, with the exact lines that left.
Apple services
Filo uses Apple’s services for place names (Apple Maps), the weather (WeatherKit), notifications, iCloud backup and purchases. For these Apple receives what it needs (for example a location to name a place), under Apple’s privacy policy.
Subscriptions
Purchases go through the App Store. We never see your payment details; Apple tells the app whether a subscription is active.
Counts, not people
Our server counts a few things as plain numbers, for example how many evening pages were written in a day, to keep the service working and the costs in check. No content and nothing that identifies you.
The waitlist and your emails
If you join the waitlist on this site, we keep your email address, the date and the language, only to write to you once when Filo is on the App Store. We delete the list after launch, or sooner if you ask. If you write to us, we keep your message as long as needed to answer.
This website
No cookies, no analytics, no trackers; the font is served from here. Cloudflare, which hosts the site, processes technical data such as IP addresses to deliver it and protect it from abuse.
Where data is processed
Some providers above (OpenRouter, Google, Amazon, Cloudflare, Apple) may process data outside the European Union, with the safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
Your rights
You can ask to access, correct, delete or receive your data, to restrict or object to its use, and withdraw your consent at any time, by writing to support@hellofilo.app. Most of your data is only on your iPhone: you can export everything in Tu › Esporta and delete everything in Tu › Privacy › Elimina tutto. You can also complain to your data protection authority; in Italy, the Garante per la protezione dei dati personali.
Age
Filo is for people aged 14 and over.
Changes
If this policy changes, we update the date above and, for important changes, we tell you in the app first.