Privacy Policy
Last updated: 24 July 2026 · Filed (yom.filed)
Filed is a notes app that sorts your notes into your own projects. This page explains exactly what happens to the text you write. Short version: your notes are yours, they are never sold, and they are never used to train anyone's AI model.
What we store
- Your notes and projects. Note text, project names, descriptions, emoji and colours, and the timestamps needed to sync them between your devices.
- Your account. The identifier supplied by Sign in with Apple, plus your email address if you choose to share it. We never see your Apple password.
- Filing decisions. Which project the AI suggested, how confident it was, and whether you accepted or corrected it. This is what makes the filing get better over time.
- Photos of handwritten notes. If you photograph a page, the image is stored in a private bucket alongside the note, so you can always check what the page actually said. Only you can read it; the storage policy keys on your user id.
- Access tokens. Only a SHA-256 hash of each MCP token — never the token itself.
Data is stored on Supabase (Postgres, EU region) with row-level security: every query is restricted to your own user id.
How the automatic filing works
On your device first. On iPhones with Apple Intelligence (iOS 26 and later), filing runs entirely on the device using Apple's on-device model. In that case the note text never leaves your phone.
Otherwise on our server. On older devices, and for cross-platform use, the note text is sent to the Google Gemini API on the paid tier, which we operate under our own API key. Google contractually does not use paid-tier prompts or responses to improve or train its products. Google retains request logs for up to 55 days solely for abuse monitoring. We do not store the text anywhere beyond your own notes.
If we ever switch providers, the fallback is the Anthropic API (Claude), which likewise does not train on API data. This page will be updated before any such switch takes effect.
You can turn automatic filing off entirely in Settings → Einsortieren.
Dictation
The audio never leaves your device. Speech is turned into text by Apple's on-device recogniser (iOS 26 and later) or, on older systems, by Apple's speech recognition — in which case Apple's own privacy policy applies to that step. Filed neither records nor stores audio files.
The resulting text is then sent to the Google Gemini API (paid tier) to be tidied up: punctuation, filler words, discarded half-sentences. You see the result before anything is saved.
Handwriting recognition
When you photograph a page, the image is sent to the Google Gemini API (paid tier) to be read, under the same paid-tier terms as above: no training on your data, request logs kept for up to 55 days for abuse monitoring only. The recognised text appears in the editor for you to correct before the note is saved. The original photo is then stored in your own private bucket and is deleted when you delete the note.
Search
Full-text search runs locally on your device. Semantic search (a Pro feature) computes a numeric embedding of your note text on our Supabase infrastructure. The embedding model runs on Supabase's own edge runtime — the text is not sent to a third party for this.
Agent access (MCP)
If you create a personal access token in Settings → MCP-Zugang, any agent holding that token can read (and, with a write token, create and file) your notes through our MCP server. Tokens are yours to create and revoke at any time; revoking takes effect immediately.
Processors we use
- Supabase — database, authentication and hosting (EU region).
- Google (Gemini API, paid tier) — automatic filing, tidying up dictated text, and reading photographed handwriting. No training on your data.
- Anthropic (Claude API) — documented fallback for automatic filing. No training on your data.
- RevenueCat / Apple — subscription status. We never see your payment details.
- Fly.io — hosting for the MCP server.
What we do not do
- No advertising, no ad identifiers, no third-party analytics or tracking SDKs.
- No selling or sharing of your notes with anyone.
- No training of AI models on your notes — not by us, not by our processors.
Your rights
You can export or delete your data at any time. Deleting your account removes your notes, projects, filing history and tokens from our database. Write to privacy@filed.ink and we will action it within 30 days. Under the GDPR you also have the right to access, rectify, restrict and port your data, and to complain to your local supervisory authority.
Children
Filed is not directed at children under 13 and we do not knowingly collect their data.
Changes
Material changes will be announced in the app before they take effect.