DRAFT. Fill every [BRACKET] and remove this line before the page goes live.

Privacy policy

Effective [DATE]. Last updated [DATE].

This policy covers Fennoc Phone, the Android app, and the Fennoc server that the app talks to. It says what Fennoc collects, why, who else receives it, and how you can delete it.

The short version

Your phone turns your speech into text. Your voice recordings never leave your phone.
Your contacts, your list of apps and your app-time minutes stay on your phone.
When the phone cannot handle a request by itself, it sends the text of your request to Fennoc's server. The server uses AI model providers to write the answer.
Fennoc has no ads. We do not sell your data. We do not let our AI providers train on it.
One person runs Fennoc. That person can see what is stored on the server. "Who can see your data" says when we look.

Who we are

Fennoc is made by [DEVELOPER NAME, exactly as shown on Google Play] ("Fennoc", "we", "us"), in Texas, United States. You can reach us at [privacy@fennoc.com].

Fennoc is offered in the United States only, to people 18 and older.

What we collect

When you sign in

Your email address and your Google account ID, from Sign in with Google. We do not receive your name, photo or contacts from Google. Fennoc Phone does not ask for access to your Gmail, Google Calendar or Google Tasks.
Your phone's time zone, once, at your first sign-in. Fennoc uses it to plan your day on your clock.
A waiting list entry, if we have not let you in yet: your email address, the time, and how many times you tried.

When you use Fennoc

What you say or type to Fennoc, when the phone sends it to the server, and Fennoc's replies. The server keeps your recent conversation so Fennoc can follow along.
Your tasks, plans and notes, and anything you ask Fennoc to remember.
Web pages you ask about. In Fennoc's browser, when you ask the fox about a page, the phone sends the page's address and title. It removes the part of the address after "?" first. When you ask Fennoc to guide you through a page, the phone also sends the page's headings, buttons, link text and form labels. It sends what you typed into plain text fields. It never sends what is in password, one-time code, card number or similar fields.
The results of actions. After a call, a text or another action, the phone tells the server whether it worked. This can include a contact's name, for example "The text to Sam did not go out." It never includes the phone number.
How many requests you make, so we can apply your plan's weekly limit.

To keep Fennoc working

Turn reports. The time, whether the phone or the server answered, a result code such as "timeout", and how long it took. A turn report holds no words.
Crash reports. The app version, the Android version, your phone model, the type of error and where in Fennoc's code it happened. A crash report holds no message text, names or web addresses. The phone keeps an unsent report for up to 7 days.
Server logs. Your IP address and the time of each request. Some log lines also hold short pieces of text, for example the first 60 characters of a task title.
A sign-in token. The server keeps only a scrambled form of it (a hash). The phone keeps it encrypted.

What stays on your phone

These never go to Fennoc's server:

Voice audio. Fennoc uses only your phone's on-device speech recognizer, which Android provides. If your phone has no on-device recognizer, voice input does not start.
Your contacts. Fennoc reads names and numbers on your phone to find the person you mean. Your contact list and phone numbers are never sent. The name you say is part of your request, like the rest of your words.
Your apps. The list of apps on your phone, the apps you open, and the apps and sites you block or limit.
App-time minutes. If you turn on "Your app time", Fennoc counts minutes in the apps you pick. This is optional.
Your recent requests list and your reminders.
Your location. Fennoc does not collect your location.

If Android backup is on, Android can copy some of Fennoc's data on your phone, such as your recent requests, to your Google account. Google runs that backup, not Fennoc.

Why Fennoc asks for each permission

Fennoc asks for a permission when you reach a step that needs it. You can say no and still use the rest of the app.

Permission	What Fennoc does with it
Microphone	Lets your phone turn your speech into text. Also lets a website in Fennoc's browser use the microphone, if you allow that site.
Contacts	Finds the person you name, on your phone, for a call or a text.
Phone and SMS	Starts a call or sends a text when you ask. The words of a text come from your request, so they can reach the server and our AI providers.
See all apps	A home screen must show and open your apps. The list stays on your phone.
Usage access	Optional. Shows how long you spend in apps you pick. The minutes stay on your phone.
Location and camera	Only for websites in Fennoc's browser, after you allow that site. The site receives the data. Fennoc does not.
Notifications	Shows the reminders you set.
Alarms	Sets the alarms and timers you ask for.
Home, assistant and browser roles	Lets Fennoc be your home screen, your voice assistant and your web browser.

We do not use any of these to build an advertising profile. We do not sell or share the list of your apps.

Fennoc's browser

Pages load straight from the website to your phone. Websites can see your IP address and set cookies, under their own privacy policies. Fennoc keeps cookies on your phone so you stay signed in to sites. Files you download go to your phone's Downloads folder.

Fennoc sends a page to its server only when you ask about it, as described in "Web pages you ask about".

Who else receives your data

We use these service providers to run Fennoc. They process data for us. We do not sell data to them.

Provider	What it receives	Why
Fireworks AI	The text of your request, your recent conversation, the tasks, notes and memories that matter for that request, and any page you asked about	Writes Fennoc's answers
OpenRouter	The text of each request that reaches the server. [CONFIRM: if the backup model is on, also what Fireworks receives, when Fireworks is down.]	Decides how to handle each request
Jina AI	Your search words, or the address of a page you asked Fennoc to read	Web search and page reading, only when a request needs it
Hostinger	Everything stored on Fennoc's server	Hosts the server and its backups
Google	Your sign-in	Sign in with Google

We chose AI providers whose terms say they do not train models on data sent through their service. On OpenRouter, we turn on settings that allow only providers that keep no data. [CONFIRM: read the current Fireworks and OpenRouter terms before publishing.]

We may also disclose data when the law requires it, or to protect a person's safety.

If Fennoc moves to a company that we own, or if Fennoc is sold, your data moves with it. This policy keeps applying to it, and we tell you before anything changes.

Who can see your data

Each person's data is kept in a separate database on the server. Other Fennoc users cannot reach it.

The person who runs Fennoc has full access to the server. That person can read your requests, replies and tasks. Your data is not encrypted in a way that stops this. We look at your content only:

to answer a support request that you send us;
to fix a problem that you report, with your permission;
to protect Fennoc and its users from abuse or a security attack; or
when the law requires it.

Day to day, we look at counts and times that hold no words, such as turn reports and crash reports. Fennoc has few users today, so these counts can still show what one person did.

How we protect your data

The app talks to the server over an encrypted connection (HTTPS). The server keeps sign-in tokens only as hashes. Only the person who runs Fennoc can sign in to the server.

No system is perfectly secure. If a breach exposes your data, we will tell you as the law requires.

How long we keep your data

Your account and your content: until you delete your account.
A waiting list entry: until we let you in, or until you ask us to delete it.
Server logs: up to [30] days.
Backups: a deleted item can stay in a server backup for up to [14] days, until that backup is replaced. We use backups only to recover the server after a fault.

How to delete your account

Email [privacy@fennoc.com] from the address you signed in with, or follow the steps at fennoc.com/delete-account. We delete your account and its data within 30 days and tell you when it is done.

Signing out does not delete your data. Uninstalling the app removes Fennoc's data from your phone, but not from the server.

Your choices and rights

You can ask us to tell you what we hold about you, to give you a copy, to correct it, or to delete it. Email [privacy@fennoc.com]. We answer within 45 days. We do not treat you worse for asking.

If we say no to a request, you can appeal by replying to our answer. If you live in Texas and you disagree with the result of your appeal, you can contact the Texas Attorney General.

Children

Fennoc is not for anyone under 18. We do not knowingly collect data from children. If we learn that someone under 18 has an account, we delete it. If you think a child has given us data, email [privacy@fennoc.com].

Changes to this policy

When this policy changes, we change the date at the top. Before an important change applies, we also tell you in the app or by email.

Contact

[DEVELOPER NAME] [privacy@fennoc.com]