Philo is built to keep your notes local by default. This policy explains what information may be processed when you use the landing site at philo.so, download the app, contact us, or use optional integrations inside the app.

What this policy covers

This policy covers the Philo website, the downloadable Philo desktop app, and direct support communications about Philo. It does not cover third-party services you connect on your own, except to describe when Philo sends data to them at your direction.

Information we receive

Depending on how you use Philo, we may receive:

How the website works

The landing site is a mostly static Astro site. It does not include its own account system or in-site note storage. The homepage makes a client-side request to GitHub to resolve the latest release download links, and the site loads Google Fonts. Those third parties may receive your IP address, browser details, and related request metadata as part of serving those resources.

How the desktop app works

Philo is local-first. Notes, images, widget files, and related content are stored on your device or in an Obsidian vault you choose. Philo does not operate a first-party cloud sync service for your notes through this site.

Some app settings are also stored locally on your device. That can include configured paths, onboarding state, selected providers, API keys you enter, and Google OAuth tokens if you connect Google features. Those values are stored locally so the app can function.

Optional third-party services

If you enable AI or Google features, Philo sends the relevant request data to the provider you selected so the feature can run. That may include prompts, note excerpts, tool inputs, or authentication data needed for the request. Providers currently supported in the app include Anthropic, OpenAI, Google, and OpenRouter.

Your use of those services is also governed by their own terms and privacy policies. Philo does not control how those providers retain or use data once a request reaches them.

Google account connections

If you connect a Google account, Philo may request permission to access your basic account profile, your Google Calendar data, and your Gmail data. The current planned Google Workspace access is read-only for Calendar and Gmail.

Philo uses that access only to provide the Google-powered features you choose to use inside the app, such as reading calendar or email information into your planning workflow. Google OAuth tokens and granted-scope records are stored locally on your device so the app can refresh access and reconnect to Google services.

Philo does not sell Google Workspace data and does not use it for advertising. The use of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google in the app settings or revoke Philo's access from your Google account permissions page. If Google access is removed, related features in Philo may stop working until you reconnect.

How we use information

We use information to:

Sharing

We do not sell your information. We may share information with service providers involved in hosting, email, fonts, source code hosting, releases, or the third-party integrations you choose to use. We may also disclose information if reasonably necessary to comply with law, protect rights, or address abuse or security issues.

Retention

Website and communication records are kept only as long as reasonably needed for operations, support, legal compliance, and security. Content stored by the desktop app remains under your control on your device or chosen storage location unless you delete it.

Your choices

Children

Philo is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy from time to time. If we make a material change, we will update the effective date on this page.

Contact

Privacy questions can be sent to john@hyprnote.com.