Privacy Policy

Almost nothing about you ever reaches us. Here's exactly what does.

Last updated: 10 August 2026

1. Who we are

Filloom ("we", "us") is a macOS desktop application and website operated from Sydney, Australia. This policy covers both the website (filloom.ai) and the desktop app. Where the two differ, we say so explicitly.

2. What the website collects

Downloading the app

Filloom is free, and downloading it doesn't require an email address, an account or any signup. Clicking Download takes you straight to the installer. The only thing we record is an anonymous running count of downloads, kept in our hosting provider's key-value store — a single number, not tied to your identity, IP address, or any other visitor data.

Contact form

If you write to us through the contact form, we collect the email address and message you submit, and use them only to reply to you. Your message is sent via Resend, our email delivery provider. You can ask us to delete it at any time (see section 8).

Bot protection — Cloudflare Turnstile

The contact form uses Cloudflare Turnstile to prevent automated abuse. Turnstile runs an invisible verification check when you submit the form. As part of this check, Cloudflare may collect your IP address and browser signals. No visible CAPTCHA is shown to most users. This service is operated by Cloudflare, Inc. and governed by the Cloudflare Turnstile Privacy Addendum, which forms part of Cloudflare's Privacy Policy.

Fonts

The site loads typefaces from Google Fonts. When your browser fetches those font files, Google receives your IP address as part of the standard web request. See Google's privacy policy.

What the website doesn't do

No advertising trackers, no analytics cookies, no fingerprinting, no third-party ad pixels. The interactive demos on the homepage run entirely in your browser and send nothing anywhere.

3. What the desktop app collects

Nothing about your content or activity is sent to us. Filloom has no backend server for its core functionality. The app's design means the data you create stays under your control:

  • API keys are encrypted on disk using Electron's safeStorage, which is backed by the macOS Keychain on your machine. They are transmitted only to the AI provider they belong to (Anthropic, OpenAI, Google, Mistral, or xAI) when you send a message.
  • Chat history, system prompts and knowledge documents are stored locally on your Mac. They are included in requests to your chosen AI provider so the model can respond — that is their only transmission.
  • Files you download through embedded tools are caught automatically and filed into a project folder on your Mac (~/WorkflowConsole). They never pass through us.
  • Embedded web tools (e.g. Midjourney, ElevenLabs, Google Flow, Figma) load inside the app exactly as they would in a browser. Your relationship with those services — including cookies, logins and their handling of your content — is governed by their own privacy policies, not this one.

Automatic update checks

The app periodically checks a server we operate (releases.filloom.ai) to see if a newer version is available — roughly once every 24 hours, plus once shortly after each launch. This is the only outbound connection the app makes to infrastructure we control. It's a standard HTTPS request; we don't attach any personal identifiers to it, though as with any web request, standard technical metadata such as your IP address is visible to our hosting provider as part of normal server operation. If a newer version is available, the app downloads and installs it in the background.

4. Third parties you interact with through the app

Because you bring your own API keys and tools, your data flows directly between your device and the services you choose. The main ones and their policies:

We encourage you to review the policies of the providers you use, since your prompts and content are processed on their infrastructure.

5. Filloom is free

There is no purchase, subscription, license key or trial. We don't collect payment information, and no payment processor is involved in using Filloom.

6. Legal bases and where data lives

For contact-form emails, our legal basis is your consent (you're reaching out to us) and our legitimate interest in responding. The website is hosted on Cloudflare Pages; infrastructure may be located outside Australia. Email delivery for the contact form uses Resend. App data lives entirely on your own device and never reaches our infrastructure.

7. Data retention

Contact-form messages are retained only as long as needed to respond to you and for a reasonable period afterward for our records, or until you ask us to remove them. The anonymous download counter is a single aggregate number with no per-visitor data to retain or delete. App data is retained entirely by you — deleting the app's local data or the app itself removes it.

8. Your rights and contact

You can request access to, correction of, or deletion of any personal information we hold (for most people, that's just a contact-form email). Contact us at privacy@filloom.ai and we'll act on the request within 30 days. If you're in Australia, you can also complain to the Office of the Australian Information Commissioner (OAIC); if you're in the EU/UK, to your local data protection authority.

9. Children

Filloom is not directed at children under 16, and we do not knowingly collect their information.

10. Changes to this policy

If we change this policy in a way that matters, we'll update this page and the "last updated" date, and note significant changes on the website or in the app.