Privacy

Filament keeps your fragments private, uses your data only to run Filament, never sells it and never tracks you. Last updated: 10 November 2026.

Who we are

Filament is made and run by Anabel Hafstad, Oslo, Norway, who is responsible for your data. Questions or requests: the contact form.

What we store, and why

  • Your email address and password (the password only in scrambled, hashed form): to create your account and let you sign in.
  • Your fragments, notes, tags, sources, authors, collections, links and reading lists: to keep and show your library.
  • Photos of book pages: sent to an AI service to read the text. Filament doesn't keep the photo.
  • Feedback you send from the app: to improve Filament.
  • Technical logs kept by our hosting providers (such as IP address and time of a request): to keep the service secure and working.

We store this to provide the service you signed up for, and, for feedback and security logs, because we have a legitimate interest in improving and protecting it. We don't use your data for advertising, we don't sell it, and the insights on your Read my mind page are made for you alone.

Who helps us run Filament

A few companies process data on our behalf, only to run the service: Lovable Cloud, which hosts the database and sign-in; Cloudflare, which hosts the app; Google (Gemini), which reads text from photos and writes your Read my mind letter and daily Spark; and OpenAI, which makes it possible to find fragments by meaning. AI services receive only the text or image each task needs, and we don't use your content to train AI. Some of these companies may process data outside the EU/EEA; where they do, the transfer relies on safeguards such as the EU's standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

As long as you have an account. When you delete your account (Account → Delete account), your account and everything in it are deleted from the database straight away. Copies in our providers' backups are removed on their regular schedule.

Your rights

  • See and take your data: export your whole library at any time as Word, PDF, Excel or one complete backup file.
  • Correct it: edit anything in your library yourself.
  • Delete it: delete your account yourself, or ask us to.
  • Ask or object: write to the contact form. We answer within 30 days.
  • Complain: to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or the authority where you live.

Cookies

Filament only uses what is strictly needed to keep you signed in and to remember a small layout setting. No analytics, no advertising cookies, no tracking, so there is no cookie banner.

Age

Filament is for people aged 16 and over.

Changes

If this policy changes in a way that matters, we'll tell you in the app or by email before it takes effect.