Privacy Policy

Last updated: 2 October 2026

The short version. There is a line in FOKL, and it is worth knowing exactly where it runs: we keep the tools you make. We never see what you put in them. A tool is a small program — we hold it so you can come back and change it, open it on another device, or share it with your people. What you write into it — the shopping list, the chores, the money — stays on your device and is never sent to us. What we hold is small: what you gave us to join the waitlist, the tools you’ve made, your Sparks record (payments go through Stripe — we never see your card), and — if you’ve left it on — a short tally of the things you do in the app, so we can tell which kinds of tool are worth building more of. Never what you put in them. We don’t sell your data, we don’t run ad-tracking, and you can leave any time.

Who we are

FOKL (“we”, “us”) operates the website at fokl.ai. FOKL is operated by Pando and Lily, LLC, a Delaware company in the United States (1111B S Governors Ave STE 26199, Dover, DE 19904, USA). If you have any privacy question, email contact@fokl.ai — a real person reads it.

What we collect

During this pre-launch waitlist phase we collect only:

Your email address — to confirm your spot and email you about FOKL.
Your first name — optional, only if you give it, to say hello properly.
Proof of consent — the date/time and IP address from when you opted in, so we can show your signup was genuine (required for anti-spam laws).
Referral details — a referral code we generate for you, and (if you arrived from a friend’s link) who referred you, so the “invite a friend” program works.
Where you came from — basic campaign tags (UTM parameters) in the link you clicked, so we know which efforts are working.
Optional survey answers — if you tell us what you’d build or what you’re excited about, we store that to build the right thing.

When you create your FOKL account, we match its email address to the waitlist so your founding and invite Sparks, and your invite link, come with you.

Sparks and payments

Your Sparks record — how many Sparks you have, and each time they arrived or were spent: when, how many, and on what kind of thing (building a tool, changing one, a tool’s AI answer). Never the text of what you asked.
When you buy Sparks, Stripe takes the payment. We never see your card number. Stripe tells us what was bought, the amount, the tax, and the country used to work the tax out, and we keep that as a record of the sale.
Invites — who invited whom, so the right people get their Sparks.
Testimonials — what you write, and whether you’re happy for us to publish it with your first name.

On this website we use Umami, a privacy-friendly, cookieless tool we host ourselves. It records aggregate, anonymous usage (page views, rough location by country, device type) — no cookies, no cross-site tracking, and nothing that identifies you personally.

What we count in the app

Inside the FOKL app it works differently, and it’s worth being exact. There we keep a record of the things you do — coming in, making a tool, opening one, sharing it, taking a copy out — with the date, and for a tool, which shelf it belongs on: recipes, money, lists. It’s attached to your account rather than anonymous, and it’s how we learn which kinds of tool are worth building more of — which we can’t learn by looking inside them, because we can’t.

What we never keep is what’s in them. Not a word you typed, not what you asked FOKL to make, nothing at all from inside a tool. That’s the line, and it doesn’t move — if it ever had to, we’d tell you before it did, not after. The list of actions may grow a little as FOKL grows; you can read the current list, in full, any time in the app under Your settings (your account menu, top of the list), and there’s a switch there to stop your device adding to it.

There’s no page-by-page tracking, no record of what you type, and no third party involved.

Why we use it

Our legal basis is your consent, given when you tick the box and join. We use your details to: send the confirmation email; email you occasional waitlist updates and let you know when early access opens; run the referral program; and understand, in aggregate, what to build. That’s it. We never sell your data or share it with advertisers. Once you have a FOKL account, we also use your details to run it: building and keeping your tools, your Sparks and your purchases. The legal basis for that part is our agreement with you (the terms), and keeping purchase records is also a legal obligation.

Who we share it with

We use a small number of trusted service providers to run FOKL:

An email delivery provider — sends our emails and stores your contact for the mailing list.
A cloud hosting provider — runs the servers where your signup is stored.
AI model providers — receive what you ask FOKL to build or change (with any photo or document you attach to it), and the questions a tool’s AI button asks, only to produce the answer. They do this under business terms that don’t let them train their models on it.
Stripe — takes payments when you buy Sparks.

They only process your data to provide these services to us, under agreements that require them to protect it. We are not in the advertising business — there are no ad networks or data brokers involved. We’re happy to name our providers on request.

Your tools, and what’s in them

This is the part most worth reading, because it is the promise the whole product is built around — and because “we store nothing” would be easier to say and would not be true.

We keep your tools. When you describe something and FOKL builds it, we store the program it wrote and the conversation that shaped it. That is what lets you come back next week and say “make the buttons bigger”, go back to a version you liked better, open the tool on your phone, or hand it to someone in your house. A photo or document you attach goes to the AI for that one request and isn’t kept — the conversation keeps only its name.

We never receive what you put in them. Everything a tool saves once it is running — every item, name, amount and note — is written to storage in your own browser. It is not sent to us, and we have no way to ask for it.

The one exception is a tool’s AI button. Some tools can ask AI for help — a bedtime story, dinner ideas. Those tools are marked, and they only ask when you press the button. When you do, the question the tool asks — which can include some of what’s in it, like the ingredients you listed, or a photo or recording you chose to send with it — passes through our servers to an AI provider and the answer comes back. We pass it on for that one request; we don’t keep the question, the photo, the recording or the answer. Tools without an AI button never send anything.

That is not a policy we promise to follow; it is how the thing is built. Every tool runs in a sealed frame with no access to the internet at all. It cannot send your data anywhere, to us or to anyone else, because it cannot make a network request — even an AI button only hands its question to the FOKL app, which asks on its behalf. You can check this yourself: open a tool, look at your browser’s network panel, and watch the tool stay silent. The one thing you may see there is FOKL itself noting that a tool was opened — that’s the app, not the tool; it carries the date and the tool’s shelf and nothing more, and you can switch it off under Your settings.

When you share a tool with someone, we pass on the tool itself. If you both use it, what you write travels between your devices locked with a key only the people in the tool hold — we store it, but cannot read it. (The names of the fields a tool uses, like “item” or “date”, are not locked; what you write in them is.) Photos you add to a tool you use together are locked on your device the same way before they leave it, and kept in the cloud in that locked form so the people in the tool can see them — we can’t. They are deleted when they’re removed from the tool or the tool is deleted. Photos in a tool only you use stay on your device. Export is always available: your data comes out as plain, readable text you can open without FOKL.

Cookies

We don’t use tracking cookies, and the website’s analytics are cookieless. In the app, your browser also holds your light/dark theme preference, your answer to the counting switch above, and — briefly — any moments waiting to be sent from a time you were offline. The first two never leave your device. Signing in uses a session cookie, which keeps you signed in and does nothing else.

How long we keep it

We keep your waitlist details until launch and for as long as you want to hear from us. If you unsubscribe or ask us to delete your data, we remove it promptly.

The app’s tally is kept in full for 90 days and then deleted. What survives is the day-by-day count it was added to, which has no detail left in it beyond the date, the action and the shelf — that’s what lets us see whether a kind of tool is still being used a month later. Ask us and we’ll delete that too.

Your Sparks record is kept while you have an account. Records of what you bought are kept for as long as tax and accounting law requires (usually up to 7 years), even after you close your account.

Your choices & rights

You’re always in control. You can:

Unsubscribe — every email has a one-click unsubscribe link.
Access, correct, or delete your data — just email us.
Turn off counting — in the app, under Your settings in your account menu. It takes effect immediately, and throws away anything still waiting to be sent.
Withdraw consent at any time. Depending on where you live (e.g. the EU/UK under GDPR), you may have additional rights, including to a copy of your data.

To exercise any of these, email contact@fokl.ai.

Security

We use reputable providers, encrypt data in transit (HTTPS), and limit access to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your details.

Children and family profiles

Children never create their own FOKL account. Accounts are for adults. A child can use FOKL only through a family profile that their parent or guardian creates inside their own household — and the parent stays in control of it. Family profiles are coming soon; this section describes how they will work from the day they’re available.

What we hold for a family profile — as little as it takes to work:

A display name the parent chooses (a nickname is fine) and a picture from FOKL’s own set. No email address, no birthday, no photo of the child.
The tools the profile makes and the conversations that shaped them — exactly as for anyone, so they can be changed later. What goes into the tools stays on the device, as it does for everyone.
Its Sparks record, so the parent can see what it spent.

The action tally described above is switched off for family profiles. We don’t show ads to anyone, we don’t build profiles of children, and we never sell or rent what we hold.

Who else sees it. When a family profile asks FOKL to build a tool, or presses a tool’s AI button, the request goes to an AI model provider only to produce the result, as described above — nothing more is shared. Requests from family profiles also pass through extra content-safety checks.

A parent’s consent and rights. Creating a family profile is how a parent gives consent, and we may ask the parent to verify they are the child’s parent or guardian before the profile can be used. At any time, a parent can see what we hold for the profile, stop us collecting more, and delete the profile and everything we hold for it — in the app, or by emailing contact@fokl.ai. A deleted profile is gone from our systems within 30 days.

If you think a child has given us personal information without a parent setting up a family profile, email us and we’ll delete it.

Changes to this policy

If we make a material change, we’ll update the date above and let you know by email before it takes effect.

Contact

Questions or requests? Email contact@fokl.ai.