FilsOnly ("we," "our," or "the app") provides an email assistant and a website for beta access and feedback. This policy explains these separate data flows, what the app accesses, and what the website collects when you submit a form.
When you submit a beta request on filsonly.com, we collect the name and email address you provide and whether you selected the current beta or the V2 interest list. When you submit the optional beta feedback form, we collect the answers you provide and any optional contact details. These submissions are processed and stored by our website form provider, Netlify, and are accessible to the FilsOnly team for beta access, product updates related to your request, and responding to feedback. Website forms do not give us access to your inbox, AI key, or app data.
To ask about a website submission or request its deletion, email hello@filsonly.com. A request to remove website form data is separate from disconnecting the app.
Microsoft Outlook / Microsoft 365 (via Microsoft Graph API)
With your explicit consent through Microsoft's OAuth sign-in flow, the app accesses:
This access is governed by Microsoft's own authentication system. We never see or store your Microsoft account password. You can revoke this access at any time through your Microsoft account security settings, or by disconnecting within the app.
Google Gmail (via Gmail API)
With your explicit consent through Google's OAuth sign-in flow, the app accesses:
This access is governed by Google's own authentication system. We never see or store your Google account password. The app does not access your Gmail calendar, contacts, or any other Google service beyond the two Gmail scopes described above. You can revoke this access at any time through your Google Account's third-party access settings, or by disconnecting within the app.
You connect either Outlook or Gmail (not both simultaneously in the current version), depending on which email provider you choose during sign-in.
Your AI provider (Anthropic or OpenAI)
You provide your own API key for an AI provider of your choice. When the app triages emails or drafts replies, it sends relevant email content directly from your device to your chosen AI provider's servers, using your own API key and billed to your own account. We do not proxy, log, or have visibility into these requests.
Memory and search features (embeddings)
To power features that let you ask about past emails or receive proactive reminders about conversations that need follow-up, the app converts email text into numerical representations called "embeddings." This is the one part of FilsOnly that is not entirely peer-to-peer: generating an embedding requires a small server-side function that we operate, which calls OpenAI's embedding API on your behalf using our own API key, not yours.
Specifics of how this works:
If you'd prefer not to use this feature, you can decline to use memory/search features within the app; core triage and reply functionality does not depend on it.
Data used by the current app is stored locally on your device using on-device storage (SQLite) and secure encrypted storage (for your API key). This includes:
The app does not use a general FilsOnly backend to store your inbox. The AI and embedding transfers described above are exceptions to purely local processing. Website form submissions are a separate data set stored through Netlify Forms.
If you enable background sync, the app periodically checks your inbox in the background (even when closed) and may show you a local notification for urgent items. It uses the app connections and processing services described above; we do not store a copy of your inbox for background sync.
We do not sell your submitted website information or app inbox data. Website form submissions are processed by Netlify so we can receive and manage them. App features may send selected content to your chosen AI provider or to the embedding service described above; those services process the text needed for the feature. We do not have direct access to your full inbox through the website.
Because your data is stored locally on your device, uninstalling the app removes all locally stored data. Disconnecting your Microsoft or Google account within the app (or from that account's own security settings) revokes the app's access to your email and calendar.
The current app does not create a general FilsOnly account that stores your inbox. Its local data can be removed from your device using the steps below. If you also submitted a website beta request or feedback, contact us separately to request deletion of that form submission.
To remove local app data and revoke access:
These steps remove local app data from your device; they do not remove a website form submission. For help with the app or a website data request, contact hello@filsonly.com.
What's deleted: all synced email content, triage labels, tracked threads, and your API key, all stored locally on your device.
What's not affected: your actual Gmail/Outlook account and its emails, your AI provider account (Anthropic/OpenAI), and any beta or feedback submission you sent through this website. Request deletion of a website submission using the contact address above.
FilsOnly is not directed at children under 13, and we do not knowingly collect data from children.
If this policy changes, we'll update the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.
Questions about this policy or the app's data practices can be sent to hello@filsonly.com.