Skip to main content

Privacy Policy

Your content belongs to you. Here's how each product handles data.

Last updated: October 1, 2026

Who We Are

Folding Sky Co. is a company based in Nevada, United States of America. This policy applies to Folding Sky and our digital products. The specific data handling and privacy practices vary by product, with details provided in this policy.

What This Policy Covers

This policy explains what information we process, how data flows, and your choices when using our digital products, websites, and related services. It also applies to future Folding Sky products that link to it. If a product provides an additional privacy notice, that notice controls for the product where it differs from this policy. We will describe materially different data collection before or when it begins. For information about usage rules and restrictions, see our Terms of Service (https://folding-sky.com/terms (opens in new tab)).

Product-Specific Privacy

Each of our products has different data handling practices. This section covers the privacy details for each product.

Alarmist

Architecture: Alarmist operates with no Folding Sky backend. All LiDAR motion detection processing happens entirely on your device. LiDAR frames and detection history never pass through Folding Sky's servers. We do not create or manage user accounts.

Data Storage: Settings are stored locally on your device. Detection events (timestamps, detection metrics, and captured photos) are stored on your device using SwiftData. iCloud sync is enabled by default and syncs detection history across your devices through CloudKit using your personal iCloud account. Folding Sky does not operate a backend that reads this data. You can disable iCloud sync at any time in the product's settings to keep new detection history local only. Alarmist also offers configurable auto-retention that deletes old detection events after 30, 60, or 90 days. Uninstalling the product removes local data. Synced data remains in your iCloud container until you remove it through your device's iCloud storage settings.

Silent Detection and Photo Capture: Sound, flashlight, and photo capture are separate settings. Turning off the sound or flashlight does not turn off motion logging or photo capture. If photo capture is enabled, a detection can produce a still photo without an audible alarm or flashlight. Alarmist does not record audio or video. These photos and event records follow the storage and iCloud sync settings described above.

Other People's Privacy: Photos and detection history can contain information about other people. You are responsible for having the legal right to monitor the area, providing any required notices, obtaining any required consent, and handling those records lawfully. Owning or occupying a property does not remove other people's privacy rights. Unlawful surveillance and use that violates another person's reasonable expectation of privacy are prohibited under our Alarmist lawful-use terms (https://folding-sky.com/terms#alarmist-lawful-use (opens in new tab)).

Permissions: Requires camera/LiDAR access for motion detection. Photos are captured locally; you can optionally save them to your Photos library. Alarmist also requests App Tracking Transparency (ATT) consent on first launch to support ad conversion measurement. You can decline this prompt with no effect on product functionality.

Ad Conversion Tracking: Alarmist uses third-party SDKs to measure the effectiveness of advertising campaigns. These SDKs are used solely for attribution: understanding whether someone who saw an ad went on to install or purchase Alarmist Pro. The SDKs integrated are:

Data collected by these SDKs: Device identifiers (IDFA when you grant ATT consent and a provider can access it, plus pseudonymous app-instance or vendor identifiers), product install events, purchase events (product ID, price, and currency for the Alarmist Pro in-app purchase), and basic engagement data (session starts and user engagement duration).

What we do not do: We do not build user profiles from this data. We do not sell data to third parties. Alarmist does not collect account information such as your name or email, and it does not record audio or video. Product functionality is identical regardless of tracking consent.

Other Third-Party Services: All LiDAR motion detection processing uses native iOS capabilities. Alarmist does not use any AI services.

Your Choices: Manage camera and LiDAR permissions in Settings → Privacy & Security → Camera. Choose whether to save captured photos to your Photos library. Enable or disable iCloud sync for detection history in Alarmist's settings. Configure auto-retention to control how long detection events are kept. You can decline the App Tracking Transparency prompt at first launch. If declined, the SDKs cannot access your device's advertising identifier, but they may still process the limited non-IDFA information described above. The product works identically either way.

Busybody

Architecture: Busybody operates with no Folding Sky backend. Website screenshots are captured and stored locally on your device. Your URLs and screenshots never pass through Folding Sky's servers. We do not create or manage user accounts.

Data Storage: URLs, screenshots, captured HTML, site configurations, and most settings are stored locally on your device. Captures of signed-in pages can contain private account information and appear in widgets and screenshot history. Limited preferences, such as appearance settings, may sync across your devices through Apple's iCloud Key-Value Store. Saved website sessions do not sync through iCloud. Uninstalling removes the product's local container, but saved Keychain values and synced preferences can remain. Use the session and site deletion controls described below before uninstalling.

Optional Website Sign-In: You can sign in to compatible HTTPS websites in Busybody's embedded browser. Credentials you enter go directly to the website or its identity provider, not to Folding Sky. When you choose to save a website session, Busybody stores reusable cookies in the device's Keychain so the product and widget can make signed-in captures automatically. These cookies can grant access to your account. Busybody does not save your password as a separate credential. Only cookies reusable by the monitored URL are saved for capture; other browser storage, such as local storage or IndexedDB, is not transferred to captures. Sessions are separate from Safari and must be set up separately on each device. Folding Sky does not receive the cookies or send them to analytics services.

Session and Capture Deletion: Clear Session removes the saved cookies for a monitored site and makes future captures use its signed-out view. It does not delete earlier screenshots or captured HTML, sign you out of Safari, or revoke the session at the website. Deleting the monitored site removes its saved session and capture history. Cookies can expire or be invalidated by a website; this can require signing in again. Keychain records remain until removed through Busybody or applicable device controls, even if the cookies are no longer usable.

Permissions: No special device permissions required. Screenshots are captured using a standard embedded web browser.

Third-Party Services: Busybody does not use any AI services. It loads third-party websites that you specify directly from your device using an embedded web browser. Websites and sign-in providers receive ordinary web-request information, such as your IP address, browser request headers, and the requested page, along with information you enter into their pages and applicable session cookies, under their own privacy policies. Capture requests use a nonpersistent browser data store, with saved session cookies restored when you enable website sign-in. Using a nonpersistent browser does not mean a saved session is discarded after each capture. We do not control the sites or their privacy practices.

Cumbersome and Endemic

Cumbersome and Endemic are Folding Sky's AI-powered products. Neither product has a Folding Sky backend for AI processing. Folding Sky does not see, store, or process your prompts or AI outputs through either product. We do not create or manage user accounts for either product.

Cumbersome (Cloud AI Client): Cumbersome's core chat function connects your device directly to a third-party AI provider (OpenAI, Anthropic, Google AI Studio, or another provider you choose). You provide your own API keys or other authentication values. When you send a message, your prompt text, conversation history, any attached images or files (including filename and file type), model settings, built-in instructions, enabled tool definitions, and relevant tool calls or results are transmitted directly from your device to the AI provider using your credentials. That conversation content does not pass through Folding Sky servers. Turning off optional tools does not stop these provider requests; Cumbersome needs a provider connection to answer your chats.

Project Search (Cumbersome Pro and Endemic Pro): With Pro access, AI can search saved documents in the active Project. It can also search other conversations in that Project when Let AI search Project conversations is on. Adding a document doesn't turn on conversation search, and turning conversation search off doesn't block document search. Both products extract searchable text on your device and keep it in a private, disposable cache. Search and read results enter the active chat as tool results. In Cumbersome, returned passages can be sent to the selected AI provider, including document text and passages from conversations that used a different provider. In Endemic, the local model processes those passages on your device. Deleting a document after confirmation removes it and its saved versions from the Project library and stops future searches of it. Failed file cleanup is retried. Turning off conversation search stops future access to other chats; losing Pro access stops AI file access and Project search. These actions don't remove tool results already saved in chat history or retract content already sent to a provider. Deletion doesn't remove copies you've exported or shared elsewhere.

Project Files (Cumbersome Pro and Endemic Pro): With Pro access, you can create and edit text files manually or ask AI to work with files in the active Project. New AI files save automatically, as do refinements during the response that creates them. Later AI edits, replacements, and deletion require your review before changing saved files. File contents read by AI follow the provider or local processing rules above.

For more detail on Cumbersome's credentials, conversation storage, browser tools, and usage analytics, see Cumbersome Data, API Keys, and Prompt Transparency (https://folding-sky.com/cumbersome/transparency (opens in new tab)).

Camera Attachments (Cumbersome): When you choose to capture a photo inside Cumbersome, the product requests camera access and adds the captured image to your pending message. The image is sent to the selected AI provider only if you send that message. If the conversation is saved, the attachment can sync through your personal iCloud account with the rest of the conversation.

Question Cards (Cumbersome): Cumbersome includes a local Question Cards tool. The selected model can call it once per user turn to ask up to three structured questions before answering. The provider receives the tool definition, and the model supplies the question text, choices, and control types. Cumbersome returns your answers, or your decision to skip, to the provider as the tool result. That result can be stored with the conversation. A synced setting controls whether the tool is available. Its instructions say not to request secrets or use the questions to confirm an external action, but model instructions cannot guarantee appropriate questions. Do not enter credentials or other secrets into a Question Card.

Browser and Tool Data (Cumbersome and Endemic): On iOS 26, iPadOS 26, and macOS 26 or later, both products can provide three local web tools. Local Web Search sends an AI-generated query to a search engine and returns result links and snippets. Local Web Browser loads one page, can run AI-generated JavaScript once, extracts readable content, and then discards that page. Web Agent is a visible browser that keeps page and navigation state for multi-step work in the active chat, including sites you choose to sign into. Some optional tools may be enabled by default, and an enabled tool can be invoked by the model during a chat. Defaults, saved choices, and feature availability may differ by product version and device. Review and change available tools in Settings > Tools. Search and single-page reading can run without displaying a browser window.

In Cumbersome, the selected AI provider receives enabled tool descriptions and may generate search terms, URLs, JavaScript, and other action arguments. Browser results can be sent back to that provider. In Endemic, the local model receives tool descriptions and browser results; its ordinary chat and model inference do not send your conversation to an external AI provider. In either product, a model-generated request to a search engine or website can include information from your prompt or conversation. Cumbersome may also offer Provider Web Search, which runs on the selected AI provider's systems when enabled. You can manage it in Settings > Tools.

Provider-Side Tools (Cumbersome): A provider or gateway may run its own tools, such as web search, page retrieval, or code execution, after receiving your request. Those tools may contact websites or other services and may use information from your prompt or the provider's generated queries. Cumbersome's Settings control the tool features the product exposes or requests, but they do not cover every provider-side capability or guarantee how a provider handles your data. A provider may offer similar features independently of a product setting and may change its tools, data practices, or terms. Review the provider's current terms and privacy policy before choosing it or sending sensitive content. Folding Sky does not control or verify provider-side tool activity.

Each Local Web Browser call uses a fresh page and does not preserve an open page or navigation sequence for the next call. WebKit may still retain ordinary website data, such as cookies or cached resources, outside that page's lifetime. Stateless browsing does not mean anonymous or private browsing.

Search engines and websites receive requests directly from your device. They can receive information ordinarily exposed by web requests, such as your IP address, browser request data, cookies or temporary session state, search terms, URLs, and any content included in a submission or other request. Page content, JavaScript results, and other tool results can be returned to Cumbersome's selected AI provider or processed by Endemic's local model so the response can continue.

All three tools can process untrusted webpage content. A webpage can contain instructions intended to influence an AI system. In unusual or unintended cases, the model could generate a browser action that sends information from your prompt, conversation, or the current page to another website or service.

If you sign into a site within Web Agent, the AI may be able to inspect information available to that signed-in browser session and run JavaScript in the page. Both products instruct their models not to inspect password, payment, passkey, or authentication fields, but these instructions and model safeguards cannot guarantee that sensitive information will never be accessed or transmitted.

Web Agent uses a nonpersistent WebKit data store, which keeps its browser data in memory instead of writing it to the persistent browser store. The Web Agent browser session and its temporary state are destroyed when you close it, disable it, or leave the chat. Nonpersistent storage does not prevent a website or the selected AI provider from receiving information while the browser session is open, and closing it cannot retract information already sent.

Remote MCP Servers (Cumbersome and Endemic): Both products may let you configure remote Model Context Protocol (MCP) servers or similar tool services. You can add a server, choose its available tools, and disable or remove it in Settings > Tools. When you enable and invoke a remote tool, the product sends tool requests and arguments directly to the server you configured. Those arguments may include information from your prompt, conversation, attachments, or model-generated content when needed for the requested tool. Server results may be added to your conversation and, in Cumbersome, returned to your selected AI provider as tool results. Server configurations may sync through iCloud Key-Value Store, while saved authorization values are stored in Keychain and may sync through iCloud Keychain. Each server's privacy policy governs its processing. Folding Sky does not receive this traffic or control a user-configured server unless we specifically identify it as a Folding Sky service.

Endemic (On-Device Local LLM): Endemic's core chat function runs large language model inference entirely on your device using local model weights (GGUF format). Ordinary chat does not send your prompts to an external AI provider. You may download models from third-party hosts (for example HuggingFace). Network access is required to download models; inference does not require network access after models are downloaded. The download host receives ordinary network-request information, such as your IP address and request metadata. Optional web and remote tools can contact external services as described above. Model files are stored locally on your device and are not synced to iCloud.

Incognito Chats (Cumbersome and Endemic): Incognito keeps conversation records in memory, outside saved history, Projects, search, and iCloud sync. Ending the chat, opening another chat in the same window, starting a new chat, or closing its window discards it immediately without confirmation. Quitting the product or operating system termination also loses it. Opening Settings or switching away preserves the session while the process continues running. An ended session can't be recovered from the product or iCloud.

You can choose Save to Timeline to keep the conversation and its attachments in normal saved history, where they follow the usual storage, search, and iCloud sync rules. Saving can also trigger automatic title generation when enabled. Before your first message, Turn Off Incognito keeps your unsent text and attachments for a normal chat.

Incognito doesn't hide your IP address or account from services you contact, change their retention or training policies, or retract content already sent. Saved credentials and settings still apply, including any analytics choice; enabled analytics can record Incognito starts and completed replies without chat content. Ending a session doesn't delete original files, exported or copied content, or browser data held outside the session, and doesn't undo tool actions. Some workflows use temporary files, so Incognito doesn't guarantee zero disk writes or secure erasure. The provider, browser, tool, and analytics disclosures in this policy still apply.

Data Storage: Saved data in both products can sync via iCloud when available on your device, using separate iCloud containers. Unsaved Incognito conversations are excluded:

  • Credentials: Cumbersome API keys, values for custom-provider authentication headers, and saved remote-tool authorization values are stored in Keychain and may sync through iCloud Keychain when enabled in device settings
  • Settings: Provider, model, and eligible tool preferences may sync through iCloud Key-Value Store
  • Conversations: Conversation records and message metadata may sync through each product's private CloudKit database when iCloud is enabled
  • Conversation Attachments and Large Content: Eligible files attached to chats and oversized content may sync as sidecar files through iCloud Drive. New attachment records have an encrypted filename field, but saved paths and file URLs can also include the filename in ordinary CloudKit fields.
  • Project Documents: Imported and created documents are separate from conversation attachments. Their originals and saved versions sync through each product's iCloud Drive container under generated filenames. Document and version metadata sync through its private CloudKit database; titles and stored paths use CloudKit encrypted fields. Extracted text stays in a private, rebuildable cache on each device; it doesn't sync or back up.
  • Project File Drafts: Unfinished edits stay in local recovery drafts that survive restarts but don't sync through iCloud. Discarding a draft leaves any saved file intact.
  • Model Files (Endemic only): Stored locally on your device, excluded from iCloud sync. Uninstalling Endemic removes local model files.

Apple protects iCloud data in transit and at rest. iCloud Keychain is end-to-end encrypted by default. The protection available for other iCloud categories depends on the data category, your region, and whether Advanced Data Protection is enabled for your Apple Account. Folding Sky does not operate a backend that reads your personal iCloud data. Sync happens automatically when the relevant iCloud features are enabled; turn them off in device settings to stop future sync.

Third-Party AI Services (Cumbersome): Each AI provider has its own terms and privacy policy governing how it handles your data. You are responsible for reviewing its current policies and deciding what to send. Provider privacy policies include:

Cumbersome also supports adding custom OpenAI-compatible endpoints. If you connect to services beyond those listed above, your data is subject to the privacy policies of those respective services. Folding Sky does not control and is not responsible for third-party services you choose to connect.

Third-Party Services (Endemic): Model downloads are retrieved directly from third-party hosts. Folding Sky does not control those providers. When you download a model, you are subject to the host's terms and privacy policies.

Consent (Cumbersome): Cumbersome asks for your explicit permission before sending data to each AI provider. This consent is requested when you first add a credential for a provider. You can review the data sharing disclosure and the provider's privacy policy at that time.

Folding Sky does not create accounts for these products or receive names, email addresses, prompts, AI output, API keys, or other product content. We do not build advertising profiles or sell data. Both products use Firebase Analytics for limited technical and feature-usage data when collection is enabled, as described in the Analytics and Technical Data section below.

Security (Cumbersome): API keys and other saved authentication values are stored in device Keychain and may sync through iCloud Keychain when that feature is enabled. Other synced data receives the iCloud protections described above.

Your Choices: In Cumbersome, add or remove provider credentials to control which external AI providers can answer your chats. In Endemic, download or delete local models through the model management screen. In both products, review optional tool settings under Settings > Tools: turn off available web or data tools, and disable or remove MCP servers you configured. These controls affect future tool availability; they do not retract information already sent to an external service. You can turn off Cumbersome's Share Usage Analytics setting as described below. Manage camera access in your device's Privacy & Security settings. When using Web Agent, review the current site and browser actions, enter credentials yourself, avoid highly sensitive accounts or pages, and close the browser session when you are done. Control iCloud sync via your device's iCloud settings. Turn off iCloud Keychain, iCloud Drive, or sign out of iCloud to keep data local only.

Dense

Architecture: Dense displays pre-generated news digests. Our Google Cloud backend periodically fetches and summarizes public news articles using Google's Gemini AI, then caches the results. The product retrieves these cached digests. It does not send user-created prompts or user information to Gemini. We do not create or manage user accounts, and we do not use Dense requests to build user profiles.

No User Data Sent to AI: Dense's AI processing is server-side and operates only on public news content. Dense sends our backend the fixed topic or filter needed to retrieve a cached digest. It does not intentionally send account information, user-created content, advertising identifiers, or precise location. Google Cloud and API Gateway process ordinary network and request metadata needed to serve and protect the API, such as IP address, user agent, request path, topic, time, response status, and request identifier. We use this operational data for delivery, security, reliability, and troubleshooting, not to personalize digests or build profiles. This request metadata is not sent to Gemini as model input.

Data Storage: Topic preferences, widget settings, and digest history are stored locally on your device. Limited preferences, such as appearance settings, may sync through Apple's iCloud Key-Value Store. Uninstalling the product removes local product data. Cached digests on the backend are generic, not personalized, and are not linked to accounts.

Permissions: No special permissions required beyond network access for digest updates.

Third-Party Services: Dense uses Google Cloud to host its backend and Google's Gemini AI to generate news digests from public news sources. Scheduled AI processing involves only publicly available news content, not user data. The product itself does not communicate with Gemini directly. Google processes backend and AI-service data under its Privacy Policy (opens in new tab) (https://policies.google.com/privacy (opens in new tab)) and applicable service terms.

Information You Provide Directly

Support and Feedback: If you email us or send support, feedback, or a privacy request, we receive the contact information, message, attachments, and technical details you choose to provide. We use them to respond, troubleshoot, improve the Services, keep appropriate business records, and protect our rights.

Purchases: Current paid features use Apple's StoreKit. Apple handles your Apple Account and full billing details. Our products receive purchase information needed to provide and restore access, such as product and transaction identifiers, purchase or expiration dates, entitlement or subscription status, storefront, and price or currency when available. Folding Sky does not receive your full payment-card number.

Analytics and Technical Data

Alarmist, Busybody, Cumbersome, and Endemic currently use Firebase Analytics for product usage or attribution. Dense does not currently include Firebase Analytics. Future products that use analytics will be covered by this section or an additional product notice. We do not use analytics to build advertising profiles or sell analytics data.

Firebase Analytics (Google): Depending on the product, device, SDK configuration, and permission settings, Firebase Analytics may process:

  • Pseudonymous app-instance and device or vendor identifiers.
  • Product version, device model and category, operating system and version, and device language.
  • IP address at collection time and approximate geographic information derived from it.
  • Product opens, session and engagement data, feature interactions, feature outcomes, performance measurements, and purchase metadata where applicable.

Folding Sky does not send names, email addresses, prompts, conversation text, AI responses, API keys, attached-file contents, website content, screenshots, or iCloud data to Firebase Analytics. We do not assign a Firebase user ID tied to a Folding Sky account and do not attempt to identify individual users from analytics data. Google processes this data under its Privacy Policy (opens in new tab) (https://policies.google.com/privacy (opens in new tab)).

Firebase Analytics retains user-level and event-level data under Google's retention controls for up to 14 months. Aggregated reports may remain available longer.

Product Analytics Controls: Some Folding Sky products may offer an analytics opt-out. Cumbersome offers Share Usage Analytics in Settings. Collection is on by default. Turning this setting off stops new Firebase Analytics collection by Cumbersome and resets the SDK's local analytics data on that device. The choice syncs through iCloud when available, but it can take time to reach another device. It does not erase events already sent to Google or remove them from existing reports. A product without this control may continue to collect the limited analytics described above. Each product's control applies only to that product.

External Content and Services: This product analytics setting does not control tracking by websites loaded inside a product, including embedded web content, browser tools, and Web Agent. Those sites and their third-party scripts, pixels, or cookies may collect information when a page loads or you interact with it, even in a nonpersistent browser session. Search engines, AI providers, model hosts, remote MCP servers, and other external tools or services may also receive request data and collect their own usage information when you use them. Their practices are governed by their own policies. The setting also does not stop necessary requests to those services, Apple's processing, or analytics on Folding Sky's website described below.

Why We Process Information

We process information to provide requested product and website functions, complete and restore purchases, answer support requests, secure and troubleshoot our Services, measure reliability and feature use, comply with law, and enforce our Terms. Where applicable law requires a legal basis, we rely on performance of a contract or steps you request, our legitimate interests in operating and securing the Services, consent where requested (including ATT), and compliance with legal obligations. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

Data Sharing

We do not sell or rent personal information. We disclose information only as described in this policy: to Apple for StoreKit and iCloud features; to Google for Firebase Analytics, website Google Analytics 4, and Dense's Google Cloud and Gemini services; to Vercel for website hosting and Web Analytics; to TikTok for Alarmist attribution; to providers, websites, model hosts, search engines, or remote tool servers that you direct a product to contact; to professional advisers and authorities when legally necessary; and in a business change described below. Each recipient processes information under its own terms or our applicable service agreement.

Data Retention

Saved local and iCloud data remains until you delete it, a product's configured retention rule removes it, or Apple removes it under your settings and its policies. Unsaved Incognito conversation records are discarded when the session ends as described above; this doesn't delete copies or records held by external services. Firebase user-level and event-level data is retained for up to 14 months, while aggregate reports may remain longer. Dense API logs, website hosting logs, and other operational records are kept only as long as reasonably needed for security, reliability, troubleshooting, legal obligations, or the provider's configured retention period. We retain support and privacy-request correspondence as long as reasonably needed to respond, keep necessary business records, resolve disputes, and comply with law. Apple controls retention of App Store billing records.

Legal Requests and Safety

We may preserve and disclose information if we believe it is reasonably necessary to comply with law, regulation, legal process, or governmental request; to enforce our terms; or to protect the rights, property, or safety of Folding Sky Co., our users, or the public. For products without backend servers (Alarmist, Busybody, Cumbersome, Endemic), we do not possess or have access to user content stored locally on devices or in users' personal iCloud accounts.

Business Changes

If we are involved in a merger, acquisition, reorganization, financing, bankruptcy, or sale of assets, information we hold may be transferred as part of that transaction. We will continue to protect it consistent with this policy and provide notice where required.

Third-Party Providers

Some of our products integrate with or facilitate access to third-party providers and services. When you use such providers, your use is governed by their terms and privacy policies. We do not control those services. Review each provider's policies to understand how they handle your data.

Cookies and Website Hosting

Our website and public Folding Sky content endpoints run on Vercel. Vercel Web Analytics (opens in new tab) (https://vercel.com/docs/analytics/privacy-policy (opens in new tab)) records page views and related route, referrer, approximate geography, browser, operating system, and device-category information for aggregate reports without third-party tracking cookies. Vercel derives a temporary session hash from the incoming request and says it discards that session information after 24 hours. Vercel's hosting infrastructure may separately process standard request logs, including IP address, user agent, time, and requested path, for delivery, security, and operations.

Our website also uses Google Analytics 4 (opens in new tab) (https://support.google.com/analytics/answer/11593727 (opens in new tab)). Google's tag loads on our pages and can use a first-party _ga cookie to distinguish browsers and sessions. Google may receive page and referral information, browser and device details, approximate location, and events such as clicks from our pages to a product's App Store listing. Our product-listing click event includes the product, button placement, source page, and destination URL. Google processes this information under its Privacy Policy (opens in new tab) (https://policies.google.com/privacy (opens in new tab)). The product's Share Usage Analytics setting does not affect either website analytics service. Products may also request public Folding Sky information or open links to our site, which creates an ordinary web request. Folding Sky does not use this information to build advertising profiles.

Children's Privacy

Folding Sky products are intended for adult audiences. Cumbersome and Endemic require users to be at least 18 years old. Other current Folding Sky products (Alarmist, Busybody, Dense) do not impose a specific minimum age beyond applicable law and App Store requirements, but are not designed for, marketed to, or intended for use by children. A future product intended for children will provide any additional notice and consent process required by law.

We do not knowingly collect personal information from anyone under 18 through Cumbersome or Endemic, or from anyone under 13 (or the applicable minimum age in your jurisdiction) through any Folding Sky product. If we learn that we have collected information from a user under the applicable minimum age, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at the address below.

Your Choices

  • Use each product's deletion and reset controls before uninstalling when available. Uninstalling removes the product's local container, but Keychain values and data or preferences synced to iCloud may remain. Delete those through the product before uninstalling or through your device's Keychain and iCloud controls where available.
  • Manage product settings and permissions on your device. Alarmist lets you disable detection-history sync and configure auto-retention.
  • Where a product offers an analytics control, turn it off in that product's Settings to stop its future Firebase Analytics collection. Cumbersome's Share Usage Analytics choice syncs through iCloud when available; allow time for the choice to reach your other devices. It does not control tracking by external content or services you use through the product.
  • Decline or revoke Alarmist's App Tracking Transparency permission in Settings → Privacy & Security → Tracking to prevent access to your device's advertising identifier. Limited non-IDFA analytics or attribution data may still be processed.
  • Manage subscriptions and request eligible refunds through Apple. Deleting a product does not cancel its subscription.
  • Dense's backend caches generic news digests that are not linked to accounts. There is no personalized digest profile to delete.

Security

We implement security measures appropriate to each product. Where applicable, we design products to minimize data exposure and use secure storage mechanisms. You are responsible for protecting access to your devices and any credentials you use with our products. No method of transmission or storage is 100% secure. Use our products at your own risk.

Your Rights

Depending on where you live and the information at issue, you may have rights to access, correct, delete, or receive a portable copy of personal data; object to or restrict processing; withdraw consent; appeal a refusal; and complain to a data-protection authority. These rights are not absolute and may require identity verification. Contact us to exercise a right regarding information Folding Sky or a provider acting for us holds. For content stored only on your device or in your personal iCloud account, use the product and Apple controls described above because Folding Sky cannot retrieve that content for you.

California Privacy Rights (CCPA/CPRA)

Where the CCPA applies, California residents may have rights to know, access, delete, and correct personal information; opt out of its sale or sharing for cross-context behavioral advertising; limit certain uses of sensitive personal information; use an authorized agent; and receive equal service when exercising those rights. We do not sell personal information.

Alarmist sends device identifiers and purchase events to Google and TikTok for ad conversion measurement. Applicable law may treat some of this activity as "sharing" for cross-context behavioral advertising. Declining ATT prevents access to your device's advertising identifier and reduces attribution, but limited non-IDFA information may still be processed. Contact us to submit an applicable sale or sharing opt-out request or another California privacy request. We may need information to verify your identity or an agent's authority.

Folding Sky does not maintain user accounts or receive product content from Alarmist, Busybody, Cumbersome, or Endemic on Folding Sky servers. Contact us about information that Folding Sky or a provider acting for us holds, and use the product, device, and iCloud controls described above for local or personal iCloud data.

International Data Transfers

Folding Sky and our providers may process website, analytics, support, purchase, attribution, and Dense backend information in the United States and other countries where they operate. Those locations may have different data-protection laws. Where required, we use an applicable legal transfer mechanism or rely on a provider's mechanism.

Do Not Track Signals

Our website and products do not currently respond to browser "Do Not Track" (DNT) signals. Vercel Web Analytics does not use third-party tracking cookies; website Google Analytics 4 may use a first-party cookie as described above. For Alarmist on iOS, Apple's App Tracking Transparency framework controls access to the advertising identifier.

Links to Other Sites

Our site and products may include links to third-party websites or services. We do not control those sites and are not responsible for their privacy or security practices. Review each site's policies before sharing information.

Changes to This Policy

We may update this policy to reflect product or legal changes. Material updates will be noted by changing the effective date and, where reasonable, providing notice on our website.

Contact

For privacy questions or requests, contact us at: caldron.mounts-4s@icloud.com