Foleil Privacy Policy

Version 14 · Effective 14 October 2026

The current version of this policy, its number and its effective date are always at https://foleil.app/privacy.

Foleil is made by Nemvist Pty Ltd (ABN 44 701 765 344), of Victoria, Australia. In this policy, "we" and "us" mean Nemvist Pty Ltd, and "Foleil" means the Foleil iPhone app, its Apple Watch app, its widgets, controls and Live Activities, its Messages extension (Foleil Together), its share extension and the server that runs Sprout's AI. The email sign-up on the foleil.app website has its own notice, at https://foleil.app/signup-privacy.

This policy explains what information Foleil uses, where it is kept, who receives it and why, how long it is kept, and the choices you have. Each kind of information is used only for the purposes described here.

The short version

• Your records are kept on your iPhone and Apple Watch. By default Foleil also keeps an encrypted copy of them in your iPhone's backup, which you can turn off.
• Sprout's AI is part of Foleil. When you set Foleil up, a screen called "Your consent for Sprout's AI" lets you choose Agree or Not now. If you choose Agree, "Use Sprout's AI" is on by default in Settings. If you choose Not now, it starts off and Foleil uses its on-device features instead. The consent screen also offers Not now when shown later; choosing it leaves Sprout's AI off. While it is on, the information described under "Sprout's AI" can be sent, securely through Foleil's own server, to our AI provider, Anthropic (Claude), to run answers, analysis, suggestions, reactions and plans. Requests can run automatically after logging or importing activity and when strength targets are updated; you do not have to ask a question each time. These requests may include sensitive Apple Health summaries, such as mood and mental-health assessment scores, ECG classifications, hearing thresholds and cycle and reproductive records. Connecting Apple Health can start local topic analysis automatically; you do not need to tap Analyse first. For requests about somewhere nearby, this includes your precise location as supplied by iOS, subject to the accuracy you allow, only when you have already allowed location access.
• Anthropic's commercial terms don't allow it to train its models on what Foleil sends. Anthropic deletes it within 30 days, subject to the safety, Usage Policy and legal exceptions in its current terms and retention notice. This is a summary of Anthropic's published information, not a substitute for its applicable Commercial Terms of Service and Data Processing Addendum. For the latest published terms and data-handling details, see those documents and Anthropic's Privacy Center.
• Other information leaves your devices only for the feature you are using: Apple Health, Apple Weather and Apple Maps, food lookups with Open Food Facts, your Apple Watch, things you export or share, messages and SharePlay sessions you start, and email you send us.
• No advertising and no tracking. Foleil has no advertising, no third-party analytics or advertising tools, and we don't sell your information or give it to data brokers.
• Your health information is used only to provide Foleil's health and fitness features, including Sprout's AI, and never for advertising, marketing or data mining.

Your agreement

The screen "Your consent for Sprout's AI" appears at setup and later when an agreement is needed before AI use, or when you choose to turn Sprout's AI on. It explains what Sprout's AI uses, what it is used for and where it goes, and links to this policy. By tapping Agree, you consent to Foleil using your information and sending it to our AI provider as described in "Sprout's AI" below, including your health information and other sensitive information, in both requests you start and automatic requests for strength progression, reactions, the daily summary and the nightly sleep observation. Foleil keeps a local record of your current AI choice, with the time and policy version of any agreement and the time of any recorded decline or withdrawal. Choosing Not now at setup or on a required later consent prompt records the choice to leave Sprout's AI off; choosing Not now when it is already off leaves it off. Turning it on requires a fresh Agree, which replaces the earlier withdrawal with a new agreement. The record is kept on your iPhone and included in the encrypted backups and full exports described below. A local copy for background operation is kept in the app's preferences, which your iPhone's backup can include. You can choose Not now at the bottom of the consent screen, during setup or when it appears later, to leave Sprout's AI off and use Foleil's on-device features, as described under "When it isn't available". Turning "Use Sprout's AI" on later shows the consent screen and requires Agree before requests start. You can withdraw consent with that switch in Settings, as described below.

Foleil asks for each iPhone and Apple Watch permission (such as Apple Health, location, camera or notifications) through iOS's own prompts. You can decline any of them; the features that need that permission then don't work, and the rest of Foleil does.

If we make a material change to this policy, Foleil asks you to agree again before the change applies to you (see "Changes to this policy").

What Foleil keeps, and where

On your iPhone

Foleil keeps the records below in its own store on your iPhone, using what you enter, permitted readings and its own calculations. Some Apple Health readings are used as temporary analysis state rather than saved as permanent original records:

• About you: your name (Foleil uses it to greet you on Today), your date of birth, sex, height, weight and units, your goals and why you use Foleil, the sports you do and your experience, the days and times you optionally set later when planning Your week, injuries and notes about them, your activity level and energy target, your food preferences, the foods you avoid, your cooking equipment and time, the equipment you train with, and a profile picture if you choose one.
• Your activity: workouts, sets, loads and exercise notes, personal records and race results, training plans and routines, repetition counts, routes you record (with their points and times), golf rounds, activity stories and your own route segments, heart rate from a strap during sessions you start, and the songs you play during a workout (title and play time). This includes activities imported from Apple Health and saved workout-analysis reports, with the workout's measured figures, dates, source and coverage information and any Sprout wording. Foleil also keeps local import, duplicate, deletion and delivery state so it can recognise a workout it has already processed. If you add a class timetable, it keeps the classes you save (day, time, name and any level, coach or location shown), which classes you choose to attend, and the sessions planned around them.
• Places: places you save, with their name, coordinates and any address you add; and, only if you turn on place visits for your stress journal, the places iOS reports you visited (coordinates, arrival and departure times and the kind of place).
• Food and water: meals, foods, recipes, meal plans, shopping lists, your pantry, water, caffeine and standard drinks, nutrient goals, fasting sessions, meal descriptions and estimate notes, small copies of meal photos you keep with a log (without their image metadata), and the Nutrition Score and glucose grades worked out for your meals.
• How you feel: check-ins (mood, energy and soreness), stressful moments, habits you track, journal entries, day notes and reflections, and calm and mindful sessions.
• Sleep: your sleep records, bedtime and the alarms you choose.
• Health measures: cycle records if you turn cycle tracking on (including symptoms, contraception and the phase predictions worked out from them), pregnancy and life-stage details if you add them, blood pressure and glucose you type in, body and tape measurements, blood test results, and medicines and doses you log (with their notes).
• Health documents you keep: lab reports, clinical notes, imaging reports, prescriptions and other documents you scan or choose as files, with their originals. This is separate from Apple Health clinical-document access, which is not available in this version.
• Ask Sprout: your saved chats, the facts you confirm for Sprout to remember, your coach preferences and the thumbs up or down you give an answer. A temporary chat is never saved.
• Photos and videos: progress photos and workout photos (with their location removed), and the workout clips you attach (Foleil keeps a link to the clip in your photo library and your trim points; it keeps its own compressed copy only if you include clips in the backup copy).
• Awards, challenges and celebrations: what you earned, challenges under way and which celebrations Foleil has already shown.
• A check-in contact: if you choose someone with the contact picker, their name and the one phone number or email address you pick. Foleil does not read your other contacts.

This store is kept where only Foleil can open it. It is excluded from your iPhone's backups (the encrypted copy below is how your records reach a backup) and is not synced through iCloud. Health documents and several other files beside it are stored with complete file protection, so they can be opened only while your iPhone is unlocked.

Preferences. Some settings are kept in Foleil's settings rather than its store, and your iPhone's backup carries them as they are. Most are switches. Others record what Foleil has learned from your routine (each suggestion you accepted or put away, which can name a food you often log or a goal's title) and which celebrations it has shown. You can clear what Foleil has learned under Progress, What Foleil has learned, and Reset local data clears it too. The overnight run-down notice's switch and recent delivery ledger are kept in this iPhone's preferences; the ledger records episodes and the last delivery day, not the measured health values. The notice does not sync through Foleil. As with other device preferences, iOS may include UserDefaults in its own backup.

The encrypted copy for your iPhone's backup. So that a new iPhone can bring your history back, Foleil keeps an encrypted copy of your records, including meal-photo copies, descriptions and estimate notes, saved chats, what Sprout remembers, workout photos and the health documents you keep. Local training records, saved class timetables, imported workout records and saved workout reports are included with those records. Progress photos are included only if you turn that on. The copy is on by default. Foleil updates it when you leave the app (at most every 30 minutes) once you have finished setting up, and your iPhone includes it in its backup, in iCloud or on your computer, whenever that backup runs. It is encrypted with AES-GCM using a 256-bit key kept in your iPhone's keychain, which syncs to your other devices through iCloud Keychain when that is on. A new iPhone restored from iCloud Backup can open the copy only once iCloud Keychain brings it the key; an encrypted backup made on a computer may carry the key with it. You can turn the copy off in Settings, under Backup and restore.

Restoring from an export. Under Backup and restore you can choose a Foleil export to bring its records onto your iPhone. It merges with the records already there: where both hold the same record, the newer version is kept, and that can be a deletion. An export whose lists clash with the ones already there can be refused, and then nothing changes.

iCloud. Foleil does not sync anything through iCloud in this version. Your records reach iCloud only inside your iPhone's own backup, as the encrypted copy, and the copy's key through iCloud Keychain, as above. An export you save to iCloud Drive, and the Apple Health app's own iCloud sync, are yours to control.

On your Apple Watch

Your Apple Watch keeps the workouts and water you record on it, the plan your iPhone sends it (your coming week's sessions, routines and their exercise guides), the places you saved and routes you recorded, and a summary of your day for its dashboard and complications: your scores, stress and energy, water, food totals and latest meals, glucose, today's plan, recent workouts with their heart rate, and tonight's sleep window. These move between your iPhone and your Watch over Apple's connection between the two. During a strength workout the Watch can estimate your repetitions from its motion sensors; its smart alarm reads your wrist's movement during the window you set. Those motion readings are used on the Watch.

Widgets, controls, Live Activities and Siri

• Widgets and complications read a small summary that Foleil keeps in a space shared only with its own widgets and extensions: today's workout and minutes, workouts finished, any workout under way, water, steps, your Sleep, Recovery and Strain scores, stress and energy through the day, food totals and meal names, streaks, training load, exercise records, recent nights, body history and, if you turn the cycle glance on, your cycle day and phase. A widget's figures are marked as private, so your iPhone can hide them while it is locked. Water and caffeine buttons on widgets and controls keep each tap in a small queue until Foleil saves it.
• Live Activities on the Lock Screen and Dynamic Island show a workout's next and last set, your latest heart rate and the rest timer, or a fast's start and end. They are updated on your iPhone; nothing is sent to a push service.
• Siri, Shortcuts and Spotlight: Foleil's shortcuts can log water, food and habits, set a sleep alarm, open a page, and show your last workout, training week, records and routines in Siri or Shortcuts. Your saved meals are offered to iOS as shortcut suggestions, and the names of your saved foods and meals are added to your iPhone's search index (they are removed when you lock Foleil with App Lock or reset it). iOS keeps these on your device.

The Apple Health app

When you connect Apple Health, Foleil requests the supported ordinary read types together. Its own read choices start on; Apple's permission sheet decides what you actually allow. Turning off a nutrition, body or cycle feature does not narrow this read request; those switches still control the feature and what Foleil saves back to Apple Health. Availability depends on your iOS version, device, records, permissions and source choices. Foleil cannot tell that a read was allowed merely because a permission request completed or a query returned no records.

The requested topics cover:

• Movement and activity: steps, active and resting energy, exercise and stand time and activity-ring goals; flights climbed; walking, running, cycling, swimming and wheelchair distances and pushes; walking speed, step length, asymmetry, double-support time and steadiness; stair speed, six-minute walking distance, falls, and mobility-aid use; running speed, power, stride length, vertical oscillation and ground-contact time; cycling speed, cadence, power and functional threshold; swimming strokes, physical effort, workout effort and workouts with their routes and associated readings.
• Heart and circulation: heart rate, resting and walking heart rate, variability, recovery, VO2 max, blood pressure, peripheral perfusion, high, low and irregular-rhythm events, low-cardio-fitness events, ECG recordings and heartbeat series.
• Breathing and sleep: respiratory rate, oxygen saturation, lung-function measures, inhaler use, sleep times and stages, breathing disturbances and sleep-apnoea events.
• Body and environment: height, weight, body mass index, body fat, lean mass, waist, body, basal and wrist temperature, time in daylight, UV exposure, underwater depth and water temperature.
• Food, drink and nutrients: energy, protein, carbohydrate, fats, fibre, sugar, cholesterol, vitamins and minerals, water, caffeine and alcohol consumed or measured in blood or breath.
• Mindfulness, mood and assessments: mindful sessions, State of Mind, depression and anxiety assessment results, including PHQ-9 and GAD-7 scores.
• Cycle and reproductive health: menstrual flow, spotting and bleeding (including during or after pregnancy and after menopause), cycle variations, cervical mucus, ovulation and pregnancy tests, progesterone tests, contraception, pregnancy and lactation, sexual activity and related recorded symptoms.
• Hearing and sound: environmental and headphone sound exposure, sound-reduction measures, exposure events and hearing-test thresholds.
• Symptoms and other recorded events: recorded physical symptoms and their severity or presence, including pain, breathing or digestive symptoms, fatigue, sleep changes and movement-disorder measures; toothbrushing and handwashing events.
• Characteristics: date of birth, sex, blood type, skin type, wheelchair use and activity-ring mode.
• Health records: supported clinical record types, including allergies, conditions, immunisations, lab results, medication records, procedures, vital signs and coverage records, only where your device and Foleil's actual runtime capability allow them. An entitlement declared in source does not by itself make these records available.

Items you choose separately. Vision prescriptions and Apple Health medications use Apple's separate item-by-item sharing sheets, opened only when you choose to share them. Dose events follow the medications you share; Foleil does not choose items for you. It remembers locally that a choice sheet was completed, across launches, and clears that completion on disconnect or reset. That flag means only that you were asked, not that you granted access or shared every item. Apple Health supplies only the items your choice actually permits. You can reopen the choice from the Health page. Apple Health clinical documents are unavailable in this version, including the clinical-document selection path; connecting ordinary Health data does not enable it.

With your permission, Foleil writes to the Apple Health app: workouts and their effort, mindful minutes, water, nutrition, caffeine, vitamin D, alcoholic drinks, body measurements, blood pressure, blood glucose, State of Mind and cycle records. The Health app's permissions decide which kinds Foleil may write, and Foleil's Apple Health settings let you choose how each kind is saved. On Apple Watch, Foleil reads your heart rate during workouts and heart checks you start, and saves those workouts to the Apple Health app.

So that Foleil can react when new data arrives, it asks iOS for immediate background delivery of workouts, food-energy samples and cycle records, and hourly delivery of other observed kinds. iOS decides when the app is actually woken; this is not a guarantee of immediate delivery.

Imported workouts and saved reports. Foleil automatically imports workouts other apps or devices saved to Apple Health into its local activity history. It keeps their dates, activity type, available workout figures, source and ownership information, and the local state used to handle duplicates and removals. It can match imported activity to your plan. It saves a local analysis report with the available measured figures, coverage and any wording, rather than keeping only your additions to the Apple Health workout. Missing or unread values are not treated as zero. Stored reports and import state have capacity limits; this is not a promise that every historical record can be imported or retained without limit. Other apps' food samples are read for food totals and reactions; this does not mean every sample becomes a meal you logged in Foleil.

Older workouts brought in during the initial history import are analysed locally without a burst of alerts or paid wording requests. Later heart-rate or recovery data can update the same report without a repeated initial alert. AI wording for eligible new reports is described below.

Automatic topic analysis. After connection, local analysis of the Month window can start on load, return to the foreground or Health changes, without tapping Analyse. A completed analysis is normally refreshed after six hours; stale, missing or retry cases are spaced at least fifteen minutes apart. The automatic pass runs only with current Health and source choices and suitable device conditions; it waits in the background, in Low Power Mode, or when battery is below 20% and not charging. These are opportunities to run, not a guaranteed background schedule. Topic analysis holds bounded local readings and summaries, with coverage and incomplete-read states. These support Sprout Age, habit comparisons, recommendations and the bounded AI context described below; not every topic contributes to every estimate.

Lab proposals. Where readable health-record lab results match the names and units the Blood feature accepts, Foleil offers a proposal. Results are saved to Blood only after you confirm. A saved panel keeps its collection date, results and a health-records source; it also keeps the provider name when one provider supplied that date. Saved results can inform Sprout Age and the existing AI context under its consent and switch controls.

How Foleil uses Apple Health data: only to provide Foleil's health and fitness features to you: your day, progress and history, scores and estimates, reminders and celebrations, cycle predictions, and Sprout's AI, which can include information from Apple Health in the requests described below. Foleil never uses Apple Health data for advertising, marketing or data mining, and never sells it. External AI requests send only the context described below to Anthropic, with your AI consent. The separate encrypted-backup, Watch, Apple Health and user-directed export/share flows are described elsewhere in this policy.

You choose these permissions in the Health app and can change them there at any time. Disconnecting Apple Health in Foleil stops its reads and writes and clears the remembered item-choice completion. Records already in Apple Health stay there. Disconnecting is not an erase of the activities, reports or confirmed lab panels already saved in Foleil; manage those in Foleil or use its reset and erase tools.

Sprout's AI

Sprout's AI is part of how Foleil works. It writes Sprout's answers to your questions, the analysis and insights on your pages, suggestions, its reactions to the workouts and meals you log, and plans such as workouts, programmes, meal weeks, recipes and route names.

What it uses

Depending on the task and the request's size limit, Sprout's AI can use the following information. This list does not mean it receives every original file, photo or Apple Health record:

• your profile and body measurements: your age (never your birth date), sex, height, weight, goals and why you use Foleil (never your name);
• your goals and plans;
• your workouts and activity, including personal records and route summaries (distance, time, pace, climb and kilometre splits, never a route's map points);
• food and water;
• sleep and recovery;
• heart rate and other vitals;
• cycle records and life-stage details;
• mood, check-ins, stressful moments and your journal;
• habits;
• medications;
• lab results you have saved, including confirmed panels from health records, and short text extracts from documents you keep in Foleil; Apple Health clinical documents are not available and are not sent;
• mindfulness sessions;
• awards;
• what Sprout remembers;
• your preferences, including food restrictions (such as halal or kosher) and how you like answers worded;
• meal photos you ask Sprout to estimate, the words read from food labels you scan, and photo, screenshot or PDF-page images you choose for class-timetable reading;
• the names and kinds of places you save or visit and, only when you ask about somewhere nearby and location access is already allowed, your precise location as supplied by iOS, subject to the accuracy you allow (your suburb or town, coordinates and the location fix's reported accuracy). This AI path does not prompt for location permission;
• what you ask and type.

Some of this comes from Apple Health. Each request carries your question or the task and selected context within a size limit, the most relevant first. Profile pictures, progress and workout reference photos are not sent by these context flows. A route's raw map points are not part of the AI context; the separate nearby-location item described above is the only precise-current-location exception.

Apple Health topic summaries, including sensitive information

After local topic analysis, a request may carry dated summaries grouped as movement; heart; breathing; sleep; body; food and nutrients; mindfulness; mood and assessments; cycle and reproductive health; hearing and sound; symptoms; and other. These can include:

• a topic's catalogue name, figures and units (totals, averages, latest, lowest or highest readings, recorded or asleep time and entry counts), daily values for up to 31 days and weekly aggregates where the context includes them;
• recorded category meanings, such as sleep stages, symptom severity and present or not present;
• age; activity-ring energy, minutes, stand hours and goals; blood-pressure readings; and nutrient amounts by name;
• mood valence and kind, PHQ-9 and GAD-7 scores and their maximum scores, ECG classification labels and average heart rate, hearing thresholds at each frequency, and heartbeat intervals;
• cycle and reproductive figures and category counts; record counts, the number of contributing sources, coverage dates, read limitations and whether data is simulated.

A summary is bounded to 64 topics, up to 31 daily values, 12 recorded categories and 24 typed facts per topic, with smaller task and token limits able to leave information out. It is not raw unlimited history. These topic summaries exclude native, parent, source and device identifiers, source and device names, coordinates, raw time series and waveforms, FHIR or CDA content and free text. In this summary path, profile characteristics other than age (including sex, blood type, skin type and wheelchair use) stay on the device. Vision prescriptions, medication and dose records, clinical records and health documents contribute no raw values or detail to this path and are marked unavailable. This does not exclude medications you log in Foleil or lab results and document extracts saved in Foleil from the separate context list above. Energy and macronutrient intake topics are left out while those figures are hidden in Foleil.

These sensitive summaries can be included in Ask, automatic strength-progression requests and passive reactions. They are not restricted to questions you type or analyses you start by tapping Analyse. They are sent only while Use Sprout's AI is on and your agreement is current, subject to the request's existing data-category, source and size controls. Opening a page, composing a question or choosing a topic does not itself send that page or topic; automatic progression and reaction events can nevertheless start their own requests while you use the app.

Requests that start automatically

Strength progression. When automatic progression is enabled, changes to training-relevant information can prompt a request without a separate Ask action: recent strength sets, loads and effort; session ratings, feedback and notes; exercise notes; missed sessions; goals, training answers, equipment and units; row targets; personal status and life stage. Unrelated settings, Health imports and interface choices do not themselves trigger a new progression request. The request may also carry sleep, recovery, strain and the eligible wider context, including the sensitive topic summaries above. Foleil's own rules set permitted targets and safety holds; the AI chooses within those bounds and provides wording. Invalid suggestions are refused, and Foleil uses its deterministic on-device choice when AI is off or unavailable. You can edit a target before lifting.

Reactions and saved-workout wording. With Reactions enabled, new activity or food you log or that Apple Health reports can prompt a request. For an eligible imported workout's saved-report wording, the request can carry the workout's start and end times, duration, average heart rate, time in heart-rate zones and measured recovery drop; the most recent preceding night's asleep minutes; that day's Sleep, Recovery and Strain scores; and permitted wider context, including the sensitive summaries above. Heart-rate figures are used only while heart-rate reads are ready and no contributing heart-rate source is hidden. Workouts that arrive within twelve hours of ending after a known import baseline may receive this wording; older or unproven history stays local for this purpose. The local wording budget is at most six requests in twenty-four hours and three per import during an app launch; relaunching can reset that local budget, and the service's own limits also apply. A better duplicate workout copy can receive regenerated wording for its better data without a second initial alert. Report refreshes alone do not start another wording request or announcement. Reactions may appear in the app or a local notification, depending on your notification and reaction choices.

Daily summary. When your Strain, Recovery or Sleep score changes meaningfully, for example when last night's sleep arrives, Foleil can ask Sprout's AI to write the short summary at the top of Today, at most three times a day. The request carries today's Strain, Recovery and Sleep scores, yesterday's Recovery, your suggested Strain range and Foleil's own next-step suggestion, which can include a planned bedtime or sleep duration. Opening Today or the summary sends nothing. It runs only while Use Sprout's AI is on and your agreement is current. When it's off, you see a summary written on your iPhone instead.

Nightly sleep observation. When a new night's main sleep arrives, or that night's sleep stages or length arrive later, Foleil can ask Sprout's AI to write a short observation about it for that night's page, at most twice a calendar day. This is separate from the daily summary's three. The request carries only figures recorded for that night: its time asleep, the sleep target that night's page shows and how far above or below it the night was, and, where recorded, its deep and REM sleep, time awake, wakings longer than five minutes, the share of your time in bed spent asleep and the time it took to fall asleep. A figure that wasn't recorded is left out, never sent as zero. Opening the night, the observation or Ask from it sends nothing. It runs only while Use Sprout's AI is on and your agreement is current. When it's off, you see an observation written on your iPhone instead, and wording Sprout's AI wrote earlier is no longer shown.

Class timetable images you choose

When you choose AI reading of a class timetable, Foleil sends small metadata-free images through its server to Anthropic. These may be a photo, screenshot, scan or pages rendered from a PDF on your iPhone; at most the first four pages are read. Anything visible in the image, including a person's name, coach, venue or contact information, can reach the provider. Removing file metadata does not remove visible text. Foleil does not keep the original timetable image or PDF, or the prepared image copies, as a stored timetable file. Your original remains wherever you selected it. The classes and attendance choices are saved locally only when you save the timetable, and are included in Foleil's backup, export and reset with your training records. Manual class entry is available when AI is off, declined or unavailable.

What it is used for

Only to provide Foleil's features to you: answers, analysis, insights, suggestions, reactions and plans. It is never used for advertising or marketing, never sold, and never used to build a profile of you for anyone else. Scores and totals are worked out by Foleil's own rules on your iPhone, and the AI explains them in words. Meal estimates from the AI are checked for plausibility, and you review them before they are saved.

How it is sent

Your iPhone sends each request, encrypted, to Foleil's own server, which runs on Cloudflare. The server checks the request, passes it on, encrypted, to Anthropic, PBC, which runs the Claude models, and returns the answer to your iPhone. Requests reach Anthropic from Foleil's account: Anthropic does not receive your name, your Apple Account or any identifier of your device.

What Foleil's server keeps

Foleil's server does not store what is in a request or an answer. To keep the service running and to stop misuse, it keeps:

• a random install code that it gives your copy of Foleil the first time it uses Sprout's AI. The code is not your name, your Apple Account or an identifier of your device. With it, the server keeps when it was issued and the most recent day it accepted a request for that code;
• counts of requests and their cost for each install code, by minute, day and month, to apply limits. Minute counts become eligible for cleanup after about 2 minutes, daily counts after about 40 days and monthly counts after about 400 days (about 13 months). Cleanup is triggered by later AI requests using a valid install code, rather than by a scheduled timer, so counts may be kept longer while the service is inactive;
• one short log line for each request: the time, the kind of request, the model, the result, how long it took and its cost. It holds no install code and nothing from the request or the answer. Cloudflare keeps these logs for up to 7 days.

Your device's internet address reaches Foleil's server, as with any internet request. The server uses it only to limit how many new install codes one address can ask for in a minute, and does not store it. Cloudflare's own handling of network traffic is described in its privacy policy at https://www.cloudflare.com/privacypolicy/.

What Anthropic does with it

Anthropic processes these requests for us, as our service provider, under its Commercial Terms of Service and Data Processing Addendum:

The statements in this section summarise Anthropic's published commercial terms and data-handling information. This Foleil policy is not a substitute for Anthropic's applicable terms and should not be relied on as the authoritative source for them. For the latest published terms and data-handling details, read Anthropic's Commercial Terms of Service, Data Processing Addendum and Privacy Center. Foleil's handling of your information remains governed by this policy and applicable law.

• Training. Anthropic's Commercial Terms of Service restrict model training on customer content, meaning what we send and what the models return (https://www.anthropic.com/legal/commercial-terms). Anthropic's privacy centre adds that it does not use inputs or outputs from its commercial products to train its models unless the customer reports feedback or opts in; Foleil does neither (https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training).
• Keeping. For the API requests described here, Anthropic says it normally deletes inputs and outputs within 30 days of receiving or generating them. Its notice also describes limited safety retention and review for covered models, retention to enforce its Usage Policy (flagged inputs and outputs for up to 2 years and safety classification scores for up to 7 years), and legal or separately agreed exceptions. Foleil has no separately agreed retention arrangement (https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data).
• Where. Anthropic stores this data in the United States. It may process requests in the United States, Europe, Asia or Australia (https://privacy.claude.com/en/articles/7996890-where-are-your-servers-located-do-you-host-your-models-on-eu-servers). It uses cloud providers and other sub-processors, listed at https://trust.anthropic.com/subprocessors.

Anthropic's own privacy policy (https://www.anthropic.com/legal/privacy) covers people who use Anthropic's products directly; it does not govern what Anthropic processes for us.

Taken out first

Before a request leaves your iPhone, Foleil applies a text filter for your recorded name and birth date and for recognisable email addresses, phone numbers, web addresses, street addresses, postcodes, account and card numbers, and locations more precise than about 100 metres, except for the tagged current-location item sent when you ask about somewhere nearby and location access is already allowed, as described above. Precise coordinates in other text, notes and documents are still removed. Images are sent as small copies without their location or camera metadata, for meal estimates and class-timetable reading you choose. PDF timetables are rendered to images on your iPhone first. Visible words and identifying details in an image are not removed by this step. Foleil recognises these details by their form, so words you write in your own way (for example, a person's name in a journal entry) and anything visible in a photo are sent as they are.

Accuracy

Answers written by AI can be wrong, incomplete or out of date. Check anything important before relying on it. Sprout gives general wellbeing information, not medical advice.

When it isn't available

If you turn Sprout's AI off, Foleil's server or Anthropic can't be reached, or a limit is reached for that request kind, Foleil uses Apple's on-device model where your iPhone supports it and on-device assistance is on, and otherwise its own built-in wording. On-device requests stay on your iPhone. Journal reflections are always written on your iPhone. A pause for one request kind does not turn off every kind of AI assistance. Manual timetable entry and Foleil's deterministic progression rules remain available.

Your choices

You can choose Not now at setup or on a later consent screen to leave "Use Sprout's AI" off and use Foleil's on-device features, as described under "When it isn't available". If you choose Agree at setup, "Use Sprout's AI" is on by default. You can turn it off near the bottom of Settings to withdraw your consent and stop new requests to Anthropic, including requests waiting to be sent and requests for automatic reactions. Foleil then uses its on-device features instead, as described under "When it isn't available". Turning the switch on shows the consent screen and requires a new Agree before requests start or resume. While it is on, there are no general AI per-category opt-out switches in this version. Apple Health permissions, separate item-by-item choices, source visibility, hidden intake figures and request-specific exclusions still limit the data that the implemented paths can use. Turning Reactions off stops automatic reaction and saved-workout wording requests, not Ask or automatic progression; automatic progression has its own control. You can still delete any record, chat, memory or document you don't want it to use, and Reset local data removes them all. Information already sent stays with Anthropic only for the time described above. While it is off, a small "Sprout's AI is off — Turn on" card appears on selected AI feature screens and results, and on in-app reactions to logged activity. Those reactions can also appear automatically when Apple Health data arrives. Automatic wording elsewhere, such as Today and tab insights, workout titles and food groups, uses available on-device features or built-in wording without this card. Foleil sends no reminder notifications to turn Sprout's AI back on, and the Turn on card is not included in notifications.

Features that use your devices' sensors and permissions

• Location. With "While Using" permission, Foleil uses your location to show the weather on Today, find places near you, record a route during a workout you start, and find helplines for your country. With "Always" permission, it also keeps recording your route in the background while a workout is under way, keeps Today's weather up to date when you have moved a few kilometres (using the precise location as supplied by iOS, subject to the accuracy you allow, which it does not keep), and, only if you turn on place visits for your stress journal, notes the places iOS reports you visited. Routes you record are kept with their full points. On Apple Watch, Foleil uses your location and heading during outdoor workouts, when following a saved route and for directions to a saved place. Each feature that needs location requests a precise fix. If you allowed only Approximate Location in iOS, Foleil may ask iOS for temporary access to Precise Location when a feature needs it; otherwise it uses the accuracy iOS allows.
• Camera. For meal photos, class timetables, food labels, barcodes, menus, recipes, receipts, pantry and workout-plan scans, health documents and lab reports, progress photos, workout photos, counting your repetitions and measuring your pulse with a fingertip over the camera. Text and barcodes are read on your iPhone. Repetition counting looks at your body's position on your iPhone and saves no images; a pulse measurement keeps only the reading.
• Photos. Most features use Apple's photo picker, which gives Foleil only the photos you choose and needs no permission. If you turn on matching photos to your workouts, Foleil asks for access to your library and looks only at photos taken on your iPhone around each workout, for you to review before adding them. To save a share card, a progress photo or a route video to your library, Foleil asks for permission to add photos only.
• Microphone and speech recognition. For voice entry in Ask, food logging, recipes, your journal and other notes. Your speech is turned into text on your iPhone only (Foleil does not use it where your iPhone can't do this on the device), and no recording is kept. Spoken workout cues and read-aloud articles are spoken by your device.
• Motion and fitness. Your iPhone's motion activity is used during workouts and heart-rate strap checks, and, if you turn on activity suggestions, from about the last week to suggest activities to add to your log; the activity types themselves are not stored. On Apple Watch, motion sensors estimate repetitions and run the smart alarm, as above.
• Bluetooth. To connect a heart-rate strap, cycling power meter or gym machine you choose, and show its readings during workouts you start. Foleil keeps the device's name and identifier, and a strap's heart-rate series with the session; power and gym-machine readings are shown, not stored.
• Calendars. With your permission, Foleil reads the busy times in your calendars on your iPhone to suggest when planned sessions fit. It does not store or change your events; it keeps only which calendars you left out.
• Reminders. If you choose to save a shopping list to Reminders, Foleil adds its items to your default list.
• Alarms. The sleep alarms you set are system alarms on your iPhone; Foleil sets each one's time, title and sound.
• Music. If you choose music for a workout, Foleil reads your music library's songs and playlists. If you heart a song, Apple Music adds it to your favourites.
• Face ID, Touch ID or passcode. If you turn on App Lock, Foleil asks your iPhone to confirm it's you each time you open Foleil. Foleil never sees your face or fingerprint data.
• Notifications. Foleil sends notifications from your iPhone only (it uses no push service): reminders you set, workout and rest timers, celebrations when you reach a goal (which can show figures such as steps, hours of sleep or kilometres), Sprout's reactions to what you log, an overnight run-down suggestion, and a daily reminder about a permission you haven't given, until you give it or turn the reminder off. The overnight run-down notice is on by default, uses the same local overnight, symptom and cycle inputs as the in-app Set Resting suggestion, has no measured numbers in its wording and does not itself send a cloud AI request. It uses notification permission already granted and does not ask for that permission. Foleil keeps a local switch and recent episode/day delivery ledger. You can turn it off under Features and permissions, Apple Health. Your iPhone's notification settings decide what shows on the Lock Screen.
• Focus. Foleil's Focus filter, if you add it, quiets non-training badges during a workout Focus.

What leaves your devices, and when

Besides Sprout's AI, information leaves your devices only for these features, and each sends only what it needs:

• Food lookups. When you look a product up by barcode, Open Food Facts receives the barcode, your device's internet address and request headers naming Foleil, its version and our contact address. If you turn on online food search (it is off until you do), each search you submit sends the words you typed in the same way. Open Food Facts' privacy policy is at https://world.openfoodfacts.org/privacy.
• Recipe links. If you import a recipe from a web address, Foleil fetches that page, and the website receives an ordinary request with your device's internet address.
• Weather. Today's weather is on by default. Each forecast sends your current location to Apple Weather. A place's forecast sends that place's coordinates and the times you chose, and an outdoor workout with no weather saved sends its route's starting point and start time.
• Places and journeys. Apple Maps receives the area you search, the area around you when you look for places nearby, the start and end of a journey when you ask how long it takes or plan a route, a route point when you open Look Around, the area of a map Foleil shows, and, in Mood support, your location when you tap "Use current location" to find helplines for your country. Opening a place in Apple Maps leaves Foleil.
• Apple Music. Hearting a song sends Apple Music the song's identifier and your country.
• Pictures and sounds. After you install Foleil, your iPhone downloads its exercise pictures and soundscapes from Apple, as part of the app.
• Your Apple Watch and Apple Health, as described above. A workout you schedule in Apple's Workout app is handed to Apple's WorkoutKit with its activity, time, steps, goals and alerts.
• Messages. Foleil Together, in Messages, puts a short summary (such as "3 sessions · 95 min · 24,000 steps · 2,000 ml water") into the message you are writing; it goes only if you send it. Its stickers are pictures only.
• SharePlay. Training together with SharePlay shares the routine you chose from Foleil's catalogue (exercise names, measures and targets) and your place in it with the people in the session. Your notes, loads, history and health data are not shared.
• Things you share or export. A full export (all your records, including health information, photos, chats, what Sprout remembers and your documents), study and workout spreadsheets, a route file (GPX, with route names and accuracy removed and timestamps only if you include them), calendar files, a routine file (without your results or notes), share cards and clips (clips without their sound or metadata), reports, your food diary, a friend comparison (training totals only) and a cycle summary for a partner each go where you send them. The share extension lets you send text into Foleil, which waits for you to review it.
• Email you send us. Contact Foleil, Report a bug, feedback on an answer and Report a food problem open an email draft to info@nemvist.com in your mail app. A bug report lists the app version, build, iOS version and iPhone model; feedback holds your rating, note and, if you include it, Sprout's answer; a food report holds the food, its values, what you mark as wrong, your note and up to three photos you add. It goes only when you send it.
• Links you open, such as a helpline (findahelpline.com, with your country), an article's source or a link you saved with an exercise, open in your browser or another app, which receives an ordinary request.
• Rating Foleil. If you choose to rate Foleil, Apple shows its rating prompt.

Apple's handling of Apple Weather, Apple Maps, Apple Music, downloads, WorkoutKit, SharePlay and Messages is covered by Apple's privacy policy (https://www.apple.com/legal/privacy/).

What we receive

• Sprout's AI requests pass through Foleil's server, which keeps only the records described in "What Foleil's server keeps".
• Email: if you write to us, including a bug report, feedback or a food report, we receive what you send and your email address. We use it to reply to you and to look into what you report, and keep it while we need it for that. You can ask us to delete it at any time.
• From Apple: if you choose to share analytics with app developers in your iPhone's settings, Apple may give us crash reports and usage statistics. If you test Foleil through TestFlight, Apple shares with us crash reports, usage information and any feedback or screenshots you send, which may include your name and email address, as Apple's TestFlight privacy notice describes (https://www.apple.com/legal/privacy/data/en/test-flight/). We use these only to fix and improve Foleil.
• Purchases: this version of Foleil has no in-app purchases.

We don't use analytics, crash-reporting or advertising tools in Foleil. The AI content described above passes through our server when an eligible request runs; we do not provide a remote account dashboard to browse your device's records.

Information that goes outside Australia

We are in Australia. Some services described in this policy run in other countries:

• Anthropic (Sprout's AI) stores requests in the United States and may process them in the United States, Europe, Asia or Australia.
• Cloudflare runs Foleil's server on its worldwide network, so a request can be handled in a data centre near you or elsewhere; the server's small records (install codes and counts) are held by Cloudflare.
• Apple runs Apple Weather, Apple Maps, Apple Music, app downloads, iCloud and TestFlight, and may process these requests outside Australia.
• Open Food Facts answers food lookups and searches from outside Australia.

We use these services only for the purposes in this policy. Anthropic processes what Foleil sends under its Commercial Terms of Service and Data Processing Addendum, which do not allow it to train models on that content and set out how it protects and deletes it. The laws of these countries may protect your information differently from Australian law.

Keeping and deleting your data

Foleil's saved records stay on your iPhone and Apple Watch until removed through their record controls, reset or applicable import/deletion handling. Saved workout reports and local import state are durable records; current topic-analysis readings and summaries are working state that can be invalidated and reread after source or connection changes, rather than a permanent archive of every Health sample. Copies in backups, Apple Health, exports and the places you shared them are managed separately.

• Reset local data (Settings) removes Foleil's records, including saved chats, what Sprout remembers, your photos and the health documents you keep, saved timetables, imported workout records, saved workout reports and confirmed lab panels, the encrypted copy, the widgets' summary and the quick-log queue from your iPhone, turns online food search off again, and asks your Apple Watch to forget its summary of your day. For 24 hours a protected copy is kept so you can undo the reset; after that it is removed the next time Foleil checks. A second reset replaces the earlier undo copy. Your soundscape favourites are a preference, and a reset keeps them.
• Erase by category and Check data (Settings) remove one kind of record, or repair duplicate check-ins and sleep records, each with a 24-hour undo.
• Chats, memory and documents: you can delete a chat, something Sprout remembers or a kept document at any time. Its words or its file are removed from your iPhone, and only a note that it was deleted stays.
• Sprout's AI: Foleil's server keeps no request content. Anthropic keeps requests for up to 30 days, or longer only in the cases described in "Sprout's AI". Install records become eligible for cleanup once the code is more than 90 days old and either no accepted-request day was recorded or its last recorded accepted-request day is over 90 days old. They are removed by the request-triggered cleanup described under "What Foleil's server keeps", so they may remain longer while the service is inactive. Turning Sprout's AI off or deleting Foleil does not immediately remove these server records. Request counts follow the cleanup periods and conditions described there.
• Earlier backups: a backup of your iPhone made before a reset, or before you turned the encrypted copy off, can still hold an older encrypted copy until that backup is replaced or deleted.
• Deleting the app deletes its store and files from your iPhone. iPhone backups you already made still hold the encrypted copy until they are replaced or deleted.
• Exports are copies you choose to make and send somewhere, so deleting them is up to you. An export can hold sensitive information, including your progress photos, meal photos, chats, what Sprout remembers and your health documents.
• Apple Health: records Foleil wrote to the Health app stay there after you delete Foleil's data; manage them in the Health app.
• Permissions: you can change Apple Health permissions in the Health app, and camera, photos, microphone, speech recognition, location, calendars, reminders, music, Bluetooth, motion, Face ID, notifications and alarms in the Settings app on your iPhone or Apple Watch. Foleil's own settings let you turn off Sprout's AI, the encrypted backup copy, Today's weather, online food search, place visits, chat history, cycle sync, celebrations, Sprout's reactions, reminders and on-device assistance.

Starting afresh with Beta 4. The first time Beta 4 of Foleil opens, it clears once everything earlier test versions kept: its records, settings, photos, chats and documents on your iPhone, the widgets' data, scheduled notifications and alarms, Live Activities, Siri and search items, and Foleil's data on your Apple Watch. You then set Foleil up again from the start. Your Apple Health data and your iOS permission answers stay as they are. Encrypted copies made by earlier versions are not deleted from your iPhone or its backups, but Foleil no longer offers to restore them.

Children

Foleil is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe someone under 18 is using Foleil, write to us; as most of their information is on their own iPhone, deleting the app removes it.

Security

Your records are protected by your iPhone's and Apple Watch's own security, including your passcode and their encryption. The copy in your backup is encrypted with AES-GCM using a key kept in your iPhone's keychain, and health documents you keep can be opened only while your iPhone is unlocked. App Lock, if you turn it on, hides Foleil until your iPhone confirms it's you. Requests to Foleil's server, and from it to Anthropic, are encrypted in transit, and the server's keys for Anthropic are kept as encrypted secrets that never reach the app. No system is perfectly secure. If we learn of a data breach that is likely to cause you serious harm, we will tell you and, where the law requires, the Office of the Australian Information Commissioner.

Your rights and choices

• See, change and delete your information. Almost everything Foleil holds about you is on your own iPhone and Apple Watch, where you can see, change, export or delete it at any time. Foleil's server holds the random install code and usage records described above. They are tied to an installation, even though they do not contain your name or Apple Account. We do not have an account-to-person lookup for those records. If you have written to us, you can ask for a copy of what we hold, or for it to be corrected or deleted.
• Permissions. You can change any permission at any time, as described above.
• Consent. You give consent to Sprout's AI by tapping Agree. Choosing Not now at setup or on the later consent prompt leaves Sprout's AI off. You can withdraw consent after agreeing by turning off "Use Sprout's AI" near the bottom of Settings. This stops new requests to Anthropic, including pending requests and requests for automatic reactions. Turning it on requires a new Agree before requests start or resume. Information already sent stays with Anthropic only for the time described in "Sprout's AI".
• Questions and complaints. Write to info@nemvist.com. We aim to reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au.

Changes to this policy

We may update this policy at any time. The current version, its number and its effective date are always at https://foleil.app/privacy. Foleil shows and checks the policy version bundled with your installed build and links to the current web policy from Settings, Privacy and your data. A website-only policy update does not by itself update that local agreement check; a build carrying a material update is needed before that build can apply the changed use after your new agreement.

• Smaller updates, such as clearer wording, or corrections that don't change what we collect, who receives it or why, take effect when we publish them.
• Material changes, such as collecting a new kind of information, sending it to a new recipient (for example another AI provider) or using health or other sensitive information in a new way, apply to you only after we have told you in the app and you have agreed again.

Contact

Nemvist Pty Ltd (ABN 44 701 765 344), Victoria, Australia
Email: info@nemvist.com