Privacy

Fally listens so it can be useful to you. That is the whole reason it hears anything at all, and it shapes every decision below.

Listening, and recording online meetings on your Mac, are things you can switch off. Audio is turned into text, and the audio itself is deleted within 30 days. What we keep, we keep because the product cannot work without it, and you can delete all of it whenever you want.

• We keep the audio of your conversations for up to 30 days, and the audio of online meetings for 7 days, then delete it. Transcripts and notes stay until you delete them.
• Fally never hears the other person on a phone call. If you record an online meeting on your Mac, telling the other people in it is up to you, where the law requires it. Fally does not tell them.
• Text and selected context go to a model only when Fally needs to understand a moment.
• You can revoke any permission, and you can delete everything.
• Questions and deletion requests: aaditya@fally.online.

This policy covers the Fally app and this website, including the early-access waitlist. It applies to anyone who uses either.

Fally is in early access. Where something is not built yet, this policy says so rather than describing an intention as though it were already true.

Fally is designed around ambient listening with clear user control. When listening is on, short chunks of microphone audio are sent over an encrypted connection to Fally's own transcription service.

Those chunks are turned into text and the audio itself is kept for up to 30 days, then deleted, so a mistake in the text can be checked against what was said. We do not build an archive of recordings of your life. The text is what persists, because the text is what makes Fally useful later.

Listening is something you switch on, and something you can switch off: in the app, and at the operating system level by withdrawing the microphone permission entirely.

Fally decides how to reach you from the situation it can see: in your earphones, out loud, or as a notification. It uses the place your phone reports, whether you are moving, whether you are on a call, your calendar, and whether the only voice it has heard lately is yours.

It speaks out loud only when all of that says you are at home and alone, and you can switch this off in Settings. It never assumes you are alone: silence, or a voice it does not recognise, means it stays quiet.

Places are learned from your visits and from the Wi-Fi network your devices use. Fally works out which place is home and which is work from when you are there; you can rename or delete any place in Settings, and your choice is final. A network that shows up far from its usual place is treated as a hotspot you carry and is forgotten.

These signals, and your health totals, are also given to Fally's models as context, so an answer or a reminder can suit where you are and how your day is going. They are not used for anything else and are not shared with anyone.

When Fally needs to understand a moment, text and selected context are sent through Fally's server to a language model. Context means the parts of what it already knows that are relevant to the thing you asked for, or the thing it is about to do for you. It does not mean everything it has ever heard.

Model calls happen because you asked for something, or because Fally is acting on something you asked for earlier. Nothing is sent for a model to look at without your yes.

Every permission Fally asks for maps to a specific thing it does. If you refuse one, the feature that needs it stops working and the rest continues.

• Microphone: ambient listening. The audio is transcribed and kept for up to 30 days, then deleted.
• Notifications: so Fally can tell you it noticed something or finished something.
• Any account you connect: used only for the task you connected it for.
• Motion (Motion & Fitness on iPhone, Physical activity on Android): whether you are still, walking, running, cycling or in a vehicle, and whether the phone seems to be in a hand, a pocket, a bag or on a table. Used only while Fally is listening, so it knows when it may speak and when it can't hear well.
• Location: the places you stay, never a trail. When you arrive somewhere and when you leave, the phone reports that visit, rounded to about a hundred metres, so Fally can learn home and work and tell them from anywhere else. It never records a continuous GPS route.
• Wi-Fi network: while Places is on, the identifier of the Wi-Fi network your phone or Mac is connected to (its BSSID, not its name, your password or anything you send over it). It helps recognise a place and tells Fally when your phone and Mac are together, so only one of them records.
• Calls: while Places is on, whether a phone call is in progress on your phone, never who you are talking to or what is said on the other end. Fally stays quiet during a call, and if you turn it on in the Mac app, your Mac listens to your side of the room while your phone is busy with the call. Recording a meeting on the Mac is separate, below.
• Online meetings (Mac): when a Zoom, Meet, Teams or similar meeting is on your Mac, Fally records your microphone so it can take notes and answer questions about it. This is on by default, and you can turn it off in Settings › Meetings ("Record my calls and meetings on this Mac"), for all apps or one app at a time. Hearing the other people in the meeting needs a separate, one-time "Allow call recording" (macOS calls it System Audio Recording); until you allow it, Fally records only your side. The audio of a meeting, both sides, is kept for 7 days, then deleted; the transcript and the notes stay until you delete them. Fally does not tell the other people in the meeting that it is recording, so telling them is up to you where the law requires it. Their voices are never matched to yours, and no voice clips of unnamed people in a meeting are kept. A phone call is different: Fally only ever hears your side of it.
• Screen (Mac): Fally reads the text on your screen to understand what you are working on, and writes a summary of each half hour. The screen text is kept for 7 days; the summaries stay until you delete them. Pictures of your screen never leave your Mac: short clips of important moments stay on the Mac for 30 days and are then deleted. Fally never reads a locked screen, password fields, private browser windows, or banking and password-manager apps.
• Health (Apple Health, Health Connect): read only, and only the kinds you allow: steps, distance, active energy, heart rate, resting heart rate, heart-rate variability, sleep, workouts and mindful minutes. We keep hourly and daily totals, and sleep and workouts with their start and end times. We never keep a heart-rate stream, and Fally never writes to your health data.

Fally can do things on your behalf: fill in a form, place an order, file a complaint, email a company to book a repair. It has its own computer to do this on, separate from yours.

Where a task needs your credentials, those credentials are used for that task and nothing else. When Fally hits something it cannot finish alone, it may use another tool to finish it, and anything sent to that tool is limited to what the task requires.

Acting on your behalf is the part of the product with the most at stake, so it is the part most tightly bound to an explicit instruction from you.

Data is encrypted in transit. Access to stored data is limited to the people who need it to run and fix the service, and that access is logged.

Backups exist so an outage does not lose your data, and they are kept no longer than 30 days. A deletion you request is applied to live data immediately and works through the backups as they roll over.

Transcribed text and the understanding Fally builds from it. The record of things it has done for you. The account details you gave us. Basic technical logs needed to keep the service up and to investigate abuse.

Audio for a short while only: the audio of your conversations is kept for up to 30 days, then deleted, and the audio of online meetings is kept for 7 days, then deleted.

From your Mac: the text read from your screen for 7 days, and the half-hour summaries made from it until you delete them. Never pictures of the screen.

When you pair a Mac with a code from your phone, we keep for 30 days which phone made the code, which Mac used it and its name, and the internet address it was used from.

The places you visit, rounded, with arrival and departure times; what your phone reports about motion, its position and calls in its regular check-in; and the health totals you allowed. All of it belongs to your account and is deleted with it.

You can stop listening at any time. You can disconnect any account you have connected. You can revoke any operating system permission.

You can turn Places, Health and speaking out loud off in Settings at any time, and turning a permission off in your phone's settings does the same. Signing out removes all of it from the phone.

You can ask us to delete everything, and we will confirm in writing when it is done. Write from the address connected to your account so we can be sure the request is yours: aaditya@fally.online.

Depending on where you live you may also have the right to a copy of your data, to correct it, or to object to some processing. Ask, and we will do it.

Fally uses a small number of companies to run the service: hosting, transcription, language models, and error monitoring. Each one only receives what its job requires, and none of them are permitted to use your data for their own purposes.

We will name the current list to anyone who asks. Write to aaditya@fally.online and we will send it.

If you join the early-access waitlist, we store the name, email and phone number you give us, and which link you arrived through so we know where people are finding us. We also keep the IP address and browser the signup came from, so that one network cannot flood the list. We keep all of it until you ask us to remove it.

We do not sell it, and we do not use it for anything except telling you when your place opens up.

When you join, the site sets a cookie holding a random token tied to your signup, so this browser can show you your place in the queue and your invite link when you come back. Your invite link carries a random code, not your name or email. When a friend joins through it we record that they came through yours, which moves your place up; that is all the code is used for.

Counting visits is separate, and lighter. The site sets one cookie, a random number that says which browser you are so that you are not counted twice in a day. It says nothing about who you are, no other site can read it, and no profile is built from it. What we keep is not even that number but a hash of it made with a secret that changes every day and is deleted two days later, so nothing in our records ties one day to the next.

A thing that listens to your day will sometimes hear other people. We treat what it hears about them with the same care as what it hears about you: transcribed, used to be useful to you, never sold, and deleted when you delete.

Fally is for your life. If someone near you would rather not be heard, turn listening off. That is what the switch is for.

Fally is not for children. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe we have, write to us and we will delete it.

When what we do with your data changes in a way that matters, this page changes with it and the date at the top moves. We would rather tell you than let you discover it.

Questions, corrections, deletion: anything about your data goes to aaditya@fally.online. Email keeps the request and the answer in writing, which is exactly what you want for this.