Planned change to this Privacy Policy

On November 8, 2026, Section 3.5 will add one use of telemetry: aggregated statistics derived from it, in which every figure covers at least five installations and no installation or user can be identified, may also be used within the Company to plan and improve its other products. Nothing else in Section 3.5 changes — telemetry, reports and feedback are still not used to train or fine-tune AI models, not used for advertising, not sold, and not shared with third parties for their own purposes, and no aggregated statistics are used this way before that date.

On the same date, Section 2.4 will no longer say that the report service records the network address a report or feedback is received from: since October 13, 2026 the service does not store it. Reports and feedback received before October 13, 2026 still include that address and are deleted on the same schedule as the rest of them.

Sections 2.4 and 3.5 are affected.

Last Updated: October 1, 2026

This Privacy Policy describes how Filer, a desktop application for Windows published by iyulab, inc. (the "Company"), handles information. In this document, "Filer" and "the Service" refer to the same product.

Purpose and Scope

1.1. This Privacy Policy complies with the personal information protection laws and regulations of the Republic of Korea, including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection, and aims to protect users' rights.

1.2. Filer is a standalone desktop application. It runs on the user's own device, and its core functions — browsing files, indexing them for search, and running AI agents scoped to a folder — operate locally. The Company does not host user accounts and does not operate a server that stores user content.

Information the Company Collects

2.1. Filer sends diagnostic and usage telemetry to Microsoft Azure Application Insights, a service operated by Microsoft on the Company's behalf. The telemetry consists of:

- A pseudonymous installation identifier — a random value generated on the device at first run and stored locally. It is not derived from any account, hardware identifier, or personal detail, and it cannot be used to identify an individual.
- A per-run session identifier.
- The application version, operating system platform and version, and CPU architecture.
- Feature-usage events (for example: application start and stop, chat interactions, agent runs, settings changes) and performance timings.
- Error and crash reports, including exception messages and stack traces.

2.2. Telemetry is designed not to carry user content. Filer does not attach file names, file paths, file contents, folder contents, or the text of AI conversations to telemetry. The one exception is a report the user composes and sends about a specific AI reply (Section 2.4). Before transmission, error messages and stack traces are automatically filtered to remove the user's home directory path, account name, and computer name.

2.3. The following are stored exclusively in the user's local environment and are never collected or transmitted to the Company:

- User files, documents, and folder contents
- Search indexes and file embedding data
- AI conversation histories
- Agent instructions and per-folder settings
- API keys and other credentials the user supplies
- All other user-generated data

2.4. Reports and feedback the user sends. Reports and feedback are information the user chooses to send, voluntarily, to ask the Company to fix a problem or improve Filer. When the user chooses to report an AI reply, Filer sends the reported reply, the message that led to it, the user's note and category, the model and provider that produced the reply, the names of the tools used for it, whether the reply came from a folder chat and that folder's trust level, the language of the reply, the application version, operating system, time, and the pseudonymous installation identifier to the Company's report service (api.iyulab.com). When the user sends feedback through the in-app form, Filer sends the kind of feedback the user selected, the message, the application version and operating system, and — only if the user enters it — an email address used solely to reply. Both are sent only when the user presses Send on content shown in full beforehand, and regardless of the "Send Usage Data" setting. The report service also records the network address the request is received from.

Purpose of Collection and Use

Collected telemetry is used only for the following purposes:

3.1. Finding and fixing crashes and defects. Error and crash reports are used for this purpose only.

3.2. Measuring performance and reliability in order to improve them.

3.3. Understanding which features are used, in aggregate, to guide product decisions.

3.4. Reviewing reports and feedback the user sends (Section 2.4) to find the cause of the problem they describe and fix it. Reports are read by people.

3.5. Telemetry, reports and feedback are not used to train or fine-tune AI models, or for any purpose other than those listed above. They are not used for advertising, are not sold, and are not shared with third parties for their own purposes.

Storage and Protection

4.1. All user data is stored and processed only on the user's own device.

4.2. API keys and other credentials the user supplies are stored encrypted on the local system, and the Company has no access to them.

4.3. Telemetry is transmitted over an encrypted connection and retained by the Company's analytics provider for a limited period for the purposes described in Section 3. Reports and feedback (Section 2.4) are transmitted over an encrypted connection and deleted as soon as the Company has looked into the cause of the problem they describe, and in any case no later than 30 days after submission. The Company keeps no copy of what the user sent.

4.4. The Company complies with the technical and administrative protection measures required by personal information protection laws.

Third-Party Services the User Chooses to Enable

Filer's core functions — browsing and organizing files, indexing and searching them, and AI answers from a local model already on the device — work without an internet connection. The optional features below connect to services outside the user's device. Each is initiated by the user, and data sent through them is governed by the receiving service's own privacy policy, not by this one.

5.1. Local AI model downloads. When the user chooses to download a local AI model, Filer requests it from a public model registry (such as Hugging Face). Once downloaded, the model runs entirely on the device.

5.2. External AI providers. If the user configures an external AI service, the prompts, conversation content, and any file content the user submits to that feature are transmitted to that provider in order to produce a response.

5.3. Plugin connections. Filer can connect to messaging and productivity services (such as Telegram, Discord, Slack, email, Notion, or a user-specified webhook) through plugins. When the user enables and authorizes a plugin, data flows between Filer and that service as the user directs.

5.4. Update checks. Filer periodically contacts the Company's software distribution endpoint to check for and download application updates.

User Rights and Choices

6.1. Users may turn off usage telemetry at any time in the Service's settings, under the "Send Usage Data" option. Turning it off stops the collection of feature-usage events and performance timings across all Filer components.

6.2. Error and crash reports described in Section 2.1 continue to be sent even when usage telemetry is turned off, so that defects affecting users can be found and fixed. These reports remain subject to the filtering described in Section 2.2.

6.3. Users have complete control over their local data and may delete it at any time, including by uninstalling the Service.

6.4. Users may contact the Company at the address below to exercise rights available to them under applicable law.

6.5. Users may ask the Company to delete a report or feedback they sent (Section 2.4) by contacting the address below.

Legal Compliance and Responsibility

7.1. The Company complies with the personal information protection laws of the Republic of Korea.

7.2. This Privacy Policy complies with relevant laws including the Personal Information Protection Act and the Act on Promotion of Information and Communications Network Utilization and Information Protection.

7.3. The Company fulfills its responsibilities and obligations under relevant laws for protecting users' personal information.

Changes to This Privacy Policy

8.1. This Privacy Policy may be modified in accordance with changes in laws, policies, or security.

8.2. Any changes will be announced on the Company's website at least 7 days prior.

8.3. For significant changes affecting user rights, notice will be provided at least 30 days in advance.

Contact: hello@filer-ai.com