Privacy Policy

Last updated: June 14, 2026

Fond ("the app", "we", "us") is operated by Marar Inc. Fond is a personal voice journal: you record voice and text notes, optionally attach photos, and the app transcribes them and organizes the people, places, and moments they mention so you can look back and ask questions. This policy explains what we collect, why, who processes it, and the choices you have. We designed the app to keep your journal private to you.

Information we collect

• Account information — your email address, optional display name, and the identifier from your sign-in provider (Apple or Google) when you use social sign-in. Passwords for email accounts are stored only as a salted PBKDF2 hash, never in plain text.
• Your content — the voice recordings, text notes, and photos you create, and the transcripts and derived information produced from them (for example the people, places, activities, and tags the app extracts to build your personal knowledge graph).
• Usage analytics — anonymous, behaviour-only product analytics (which actions you take, counts, and durations). We deliberately never send your note content, transcripts, names, search text, or questions to analytics, and session replay is off. Analytics events are tied only to an opaque account identifier, not your name or email.
• Technical data — standard request information (such as device time zone for resolving "today") needed to operate the service.

How we use your information

• To transcribe your recordings and provide the core journaling, search, and "ask" features.
• To extract and organize entities (people, places, activities) and generate summaries, reflections, and answers grounded in your own notes.
• To operate, secure, debug, and improve the service.

We do not sell your personal information, and we do not use your content to serve advertising.

Service providers who process your data

We share data only with the processors needed to run the app:

• Cloudflare — hosting, storage of your audio and images, the database that holds your notes and knowledge graph, and Workers AI, which performs on-platform speech-to-text transcription and generates the embeddings used for search.
• Anthropic (Claude) — your transcript and note text are sent to Anthropic's API to extract entities and to generate the answers, summaries, and reflections you request. Anthropic processes this content to return results to the app.
• PostHog — anonymous, content-free product analytics as described above.
• Apple and Google — only to verify your identity token when you choose "Sign in with Apple" or Google sign-in.

Data security and retention

All data is encrypted in transit (HTTPS/TLS). Session tokens are stored on your device in the system keychain and only as a hash on our servers. We retain your account and content until you delete them or delete your account. You can delete an individual note at any time, or delete your entire account and all associated data as described below.

Your rights and choices

• Access & portability — your content is always visible to you in the app. Contact us for an export.
• Deletion — delete your account at any time in the app under Profile → Delete account, which permanently removes your account, recordings, images, transcripts, and derived entities. You can also request deletion on the web at keepfond.com/delete-account.
• Depending on where you live (for example the EEA, UK, or California) you may have additional rights to access, correct, or restrict processing of your data. Contact us to exercise them.

Children

Fond is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their data.

International transfers

Our providers may process data in the United States and other countries. We rely on their contractual safeguards for any cross-border transfers.

Changes to this policy

We will update this page and revise the "Last updated" date when this policy changes.

Contact

Questions or privacy requests: support@keepfond.com.