Learnfold
Home Support Terms

Privacy Policy

Last updated: November 2, 2026

On this page

  1. Overview
  2. Information Stored on Your Device
  3. Photos, Files, Links, Camera, and Clipboard
  4. iCloud and CloudKit Sync
  5. Learning Agents and Model Providers
  6. Learnfold Hosted
  7. Subscriptions: Plus, Cloud, and Studio
  8. Website Mac Purchases
  9. Build in motion
  10. Voice and Audio
  11. Hermes Pairing
  12. Network and Device Permissions
  13. Service Metadata
  14. Analytics, Advertising, and Tracking
  15. App usage analytics
  16. Error reports
  17. In-app feedback
  18. Support tickets
  19. Former early-access waitlist
  20. Website measurement
  21. Children's Privacy
  22. Retention, Deletion, and Your Choices
  23. Changes to This Policy
  24. Contact

Overview

Learnfold is a native learning workspace that turns topics and sources into personal courses. This policy explains what the app stores on your device, what it may sync through Apple, and what it sends when you choose a connected learning agent, model provider, voice feature, pairing service, or notification feature.

Learnfold does not contain advertising or cross-app tracking SDKs, and we do not sell personal information. The app includes one third-party SDK, RevenueCat, for managing subscriptions (see "Subscriptions: Plus, Cloud, and Studio"). Builds before 1.5.0 (build 202607252256) also included PostHog for optional usage analytics (see "App usage analytics"). Processing described below is used to provide app functionality.

Information Stored on Your Device

Learnfold stores the information needed to keep your learning workspace available between sessions. Depending on the features you use, this can include:

  • Course content: course plans, generated pages, progress, discussion history, revision state, and recovery information.
  • Sources you choose: copied documents, selected photos, link addresses, filenames, and source metadata used to build or discuss a course.
  • Preferences: appearance, model and agent choices, accessibility preferences, recent workspaces, and other app settings.
  • Connection information: saved server descriptions and cryptographic credentials. Secrets such as agent tokens and API keys are stored in the Apple Keychain where the feature supports it.
  • Operational logs: Apple unified logs and local recovery journals used to diagnose failures and restore interrupted work. Error reports waiting to be sent are also kept here (see "Error reports"). Learnfold does not include a third-party crash-reporting SDK.

Photos, Files, Links, Camera, and Clipboard

Learnfold only receives photos and files that you select, capture, paste, or otherwise explicitly add. Selected items may be copied into the app's private storage so the course can continue to use them. A photo or video selected for visual customization is also stored locally.

When you choose Paste Link or paste an image into a composer, Learnfold reads the clipboard for that action. On the first screen after you install the app, Learnfold may show a Paste button for a course link copied from learnfold.app; to decide whether to show it, the app asks iOS only whether the clipboard probably holds a web link, without reading it, and it reads the clipboard only if you tap Paste. When you open a learnfold.app course link, Learnfold uses it on your device to open that course and does not send it anywhere. The camera is used only for a feature you start, such as scanning a pairing code or capturing supported content. Connected agents or websites may receive a link or source content when you ask Learnfold to use it, as described below.

iCloud and CloudKit Sync

If course cloud sync is enabled and you are signed in to iCloud, Learnfold stores course catalog records and checksummed course workspace data in the app's private CloudKit database. Synced workspace data can include course pages, progress and discussion state, and copies of imported sources stored inside that workspace.

CloudKit is operated by Apple and associated with your Apple Account. Apple processes this data under its privacy policy. Turning off sync stops future synchronization but does not itself delete data already stored in iCloud.

Learning Agents and Model Providers

The destination of course requests depends on the learning agent you choose:

  • Learnfold Hosted (default): prompts, your messages, course context, tool results, and any sources or images you ask the agent to use are sent to Learnfold's cloud service and on to an AI model provider. See "Learnfold Hosted" and "Subscriptions: Plus, Cloud, and Studio" below.
  • Apple Private Cloud Compute: when available and selected, prompts and relevant course context are processed by Apple's Private Cloud Compute service.
  • Hermes or another connected server: learner messages, link addresses, course context, tool results, and supported attachments are sent to the server you connect. That server may in turn use a model provider configured by its owner.
  • Other authenticated providers: if a build exposes an additional provider and you enable it, requests are sent using the account or API key you supply.

Learnfold does not control the storage, logging, training, or deletion practices of a user-operated server or its configured model provider. Review those services' policies and do not submit material you are not authorized to share.

Learnfold Hosted

Learnfold Hosted is the default course agent. It needs no account or login, and is included in the Learnfold Cloud and Studio plans. When you use it, the content of your course conversation leaves your device and is processed as follows:

  • What is sent: your messages, the course context and instructions, results returned by the app's course tools, and any text or images from sources you ask the agent to use. Generated course pages are returned to your device.
  • Who processes it: a Learnfold service running on Cloudflare, which forwards requests to Anthropic, whose Claude model generates replies. Anthropic handles the request under its own terms and privacy policy.
  • How you are identified: the app creates a random installation secret stored in your Apple Keychain. It is used to open a short-lived session with the service and to keep your conversation available across reconnects. It is not linked to your name, email, or Apple Account.
  • What we keep: the service keeps the conversation transcript for your installation so a course can resume, and keeps per-day usage counters and an IP-based abuse limit. Operational logs contain timings, protocol milestones, and opaque identifiers; we do not log your message text, tool arguments or results, or credentials.
  • Limits and use: daily usage limits apply. We do not use your content for advertising or sell it, and we do not use it to train models.

Do not submit material you are not authorized to share or that contains sensitive personal information you do not want processed in the cloud. To request deletion of Hosted conversation data for your installation, email support@learnfold.app. Because Hosted does not use accounts, include the approximate dates you used it; we will delete what we can identify.

Subscriptions: Plus, Cloud, and Studio

Learnfold Plus, Learnfold Cloud (which includes the Hosted agent), and Learnfold Studio are auto-renewing subscriptions sold through the App Store. Apple processes payment, billing and renewals. We do not receive your Apple Account name, email address, or payment details. Mac licenses and Learnfold AI bought on this website are sold by Paddle, as described in Website Mac Purchases.

Subscription management with RevenueCat. The app includes the RevenueCat SDK, and RevenueCat, Inc. acts as our service provider to manage subscriptions: it validates App Store purchases, keeps the record of what you subscribe to, and tells the app which plan is active. RevenueCat receives a pseudonymous app user ID, your purchase and subscription status (products, dates, renewal state), the app version, device model and operating-system version, and your IP address as network metadata. The app user ID is a one-way hash derived from a random installation identifier that the app keeps in your Keychain; the identifier itself is never sent to RevenueCat. We do not give RevenueCat your name, email address or Apple Account, and RevenueCat does not receive them from us. This data is used only to provide and manage your subscription, not for advertising or tracking, and the app does not send RevenueCat an advertising identifier or the vendor identifier. If you have never been offered or bought a plan, the app still registers this pseudonymous ID with RevenueCat when it starts. RevenueCat handles it under its own privacy policy.

Learnfold Plus covers Apple's models on supported devices and using your own runtime. It is checked on your device using the plan information the RevenueCat SDK keeps there, and nothing about it is sent to our own servers.

Learnfold Cloud and Studio are checked by a service we operate, because they include the Hosted agent. To confirm your subscription, our service calculates the same one-way app user ID from the random installation identifier the app already presents to open a Hosted session, and asks RevenueCat whether that user has an active Cloud or Studio subscription. It then stores, for a short time, a one-way hash of the installation identifier, the RevenueCat customer ID, whether the plan is active and until when, and daily usage counters used to enforce fair-use limits and prevent one subscription from being shared widely. RevenueCat may also notify our service when a subscription starts, renews, is cancelled, expires or is refunded. This links your subscription to that installation, not to your name or Apple Account. Because the identifier syncs through iCloud Keychain, it can follow you to your other devices; a subscription can be used on a limited number of installations.

Hosted conversation history is stored by the Hosted service so you can resume a course, and course content you send in Hosted requests is sent to a third-party model provider to generate replies. Our infrastructure providers process network metadata such as IP address and request time to operate and protect the service. When a subscription ends or is refunded, Hosted access stops; we may keep the hashed identifier and usage counters for a limited period for abuse prevention. To ask us to delete Hosted data associated with your installation, contact support@learnfold.app. To ask RevenueCat to delete subscription data for your installation, contact us and include the approximate dates you subscribed, and we will make the request.

Website Mac Purchases

When you buy a Mac license or Learnfold AI through this website, Paddle.com (Paddle) sells it to you as our reseller and Merchant of Record: Paddle runs the checkout, processes the payment, charges any applicable sales tax or VAT, sends receipts, and handles billing, cancellations and refunds. RevenueCat records the purchase and the access it grants. Checkout may ask for your billing email, name, billing address, and payment details. Payment details are entered in Paddle's checkout, not collected by the Learnfold app. We can access billing contact information, invoices, and payment status through Paddle and RevenueCat to support purchases, refunds, and subscriptions.

RevenueCat associates the purchase with a pseudonymous Learnfold app user ID, either supplied when you open checkout from the app or linked when you redeem a purchase activation link. The app's random installation secret is not included in checkout URLs. Billing information is used to process and support purchases, deliver activation and billing emails, and manage access. Paddle handles your billing information under the Paddle privacy policy; see also the RevenueCat privacy policy. Contact support@learnfold.app about billing data or purchase activation.

Build in motion

Build in motion turns a lesson page into a narrated whiteboard explainer that you can pause to ask a tutor. It is part of the Learnfold Studio plan (see the pricing): it needs an active Studio subscription and is offered only on courses that use the Hosted agent. Nothing is sent until you tap Build in motion on a page.

  • Writing the explainer: the page's title and text are sent to our service on Cloudflare, which sends them to Anthropic (Claude) to write the scenes. The text of each narration line is sent to OpenAI's text-to-speech service to be read aloud; if OpenAI is unavailable, the line is sent to Google's Gemini text-to-speech through OpenRouter instead.
  • Typed questions and pointing: when you pause and type a question, or the voice tutor passes on a request, our service sends Anthropic your question, the conversation so far (typed and spoken, as text), the page text, and the explainer's script. If you draw on the board to point at something, a picture of the board with your marks goes with the question.
  • Talking to the tutor: the microphone is used only after you tap the voice button while the explainer is paused. It stops when you press play, end the tutor, or stay silent for 25 seconds. Your voice streams directly from your device to OpenAI's realtime voice service over an encrypted connection and does not pass through our service. Our service only sets up the connection, and tells OpenAI the course, lesson and scene titles and the line the narrator last said. OpenAI receives your device's IP address as part of the connection. Short text notes about your typed questions, the tutor's answers, and that you marked the board are also sent to the voice tutor. OpenAI returns text transcripts of what you and the tutor say, which appear in the conversation.
  • What stays on your device: the explainer's script, its narration audio, the conversation with the tutor (up to its last 60 messages, including board pictures you sent), and where you stopped watching are saved in the app's storage on your device. They are not part of course sync.
  • What we keep: our service does not store your page text, questions, board pictures, or audio. It keeps daily usage counters keyed by a one-way hash of your subscription identity to enforce fair-use limits. Its logs record errors and status codes, not your content.

Anthropic, OpenAI, OpenRouter and Google handle these requests under their own terms and privacy policies. We do not use this content for advertising, sell it, or use it to train models.

Voice and Audio

Learnfold accesses the microphone only after you start a voice feature and grant permission.

  • Voice transcription: recorded audio is held in memory and uploaded to the transcription endpoint selected by your authentication method, currently an OpenAI API or ChatGPT transcription endpoint. Learnfold does not save the raw recording as a user file after the request.
  • Realtime voice: microphone audio and voice-session events are sent over a realtime connection to the selected connected agent or model service. Transcripts and handoff results can become part of the associated thread history.
  • Build in motion tutor: microphone audio streams directly to OpenAI while you talk to the tutor, as described in "Build in motion" above. Learnfold does not record or save the audio; text transcripts are saved with the explainer's conversation on your device.

Provider-side retention and account linkage are governed by the selected provider. For OpenAI-operated endpoints, see the OpenAI Privacy Policy.

Hermes Pairing

If you use the assisted Hermes connection flow, Learnfold contacts our pairing broker. The broker receives a random Learnfold installation identifier, a temporary request identifier and claim credential, and the computer name, node identifier, relay address, and one-time connection payload submitted by the computer. This information is used only to match and complete the pairing request. The request is removed when claimed or canceled, or expires if it is not completed.

After pairing, the long-lived connection credential is stored on your device. Normal agent traffic travels through the connected server path rather than through the pairing broker.

Network and Device Permissions

Learnfold may request local-network, Bluetooth, Nearby Interaction, camera, microphone, notification, photo-picker, or document-picker access when a related feature needs it. Local-network and nearby-device access are used to discover or confirm a server you choose to connect. Learnfold does not request location or contacts access.

Service Metadata

Our pairing broker, and the infrastructure providers that operate it, necessarily process network metadata such as IP address, request time, response status, and security or error information. We use this information to operate, protect, and troubleshoot that service, not for advertising or cross-app tracking.

Analytics, Advertising, and Tracking

Learnfold does not include third-party advertising or cross-app tracking SDKs, and it does not track you across other companies' apps and websites. RevenueCat manages subscriptions, and PostHog provides the optional anonymous usage analytics described below. We do not use course content, imported sources, microphone audio, or device identifiers for advertising, and we do not sell them.

App usage analytics

Learnfold sends anonymous usage analytics by default, and you can turn them off at any time with Share anonymous usage analytics in Settings. The app uses PostHog, Inc. for this. Each event is a fixed name with a few fixed labels: the app was opened; a course was started, its plan approved, or the course finished; a question was asked (and whether it was about a selection or the whole course); a page, exploration or understanding check was opened or submitted; which kind of tutor a course uses (Hosted, Apple, Codex, Hermes or other); which plan a subscription screen showed and whether a purchase was started or completed; that a link to one of Learnfold’s public courses was opened, and whether it asked to open, add or personalize the course, or to start a course on a question from one of our articles (not which course or question); and that building a course failed, with a general reason. Every event includes the app version and build, and whether the app came from the App Store or TestFlight.

Events never include your course content, questions, topics, sources, titles, email address or credentials. The app identifies an installation with a random identifier generated on the device. It creates no person profile, does not send your IP address, and asks PostHog not to estimate location. Development builds and automated tests send nothing. Turning the setting off stops collection and discards events waiting on the device. Events already sent are kept by PostHog for up to one year; because they carry only a random identifier that you cannot see, we cannot match them to you. PostHog handles them under its own privacy policy.

Learnfold 1.5.0 builds from 202607252256 until the release that added this setting did not include PostHog or send feature-use analytics. Earlier TestFlight builds sent optional feature-use analytics, and removing it did not delete events those builds had already sent.

Error reports

Starting with build 202607252256, error reporting is off until you explicitly enable Share error reports in Settings. Reports contain technical error descriptions, scrubbed recent log lines, app and operating-system versions, device model, and crash or hang stack frames. Course titles, quoted text, email addresses, URLs, credentials, and workspace or user identifiers are removed from report text or fields before sending. Raw crash payloads are not uploaded. No persistent error-report installation identifier is sent.

Our diagnostic database does not retain installation IDs, launch-session IDs, locale, or raw crash payloads, including when an older client sends them. Support feedback is not linked to automatic error reports. Reports are retained for up to 90 days and grouped by the technical issue rather than the person. A random report ID prevents duplicates. Temporary hourly keyed hashes are used for abuse limits. Turning reporting off deletes reports waiting on the device. Local development and automated tests do not send production reports. Infrastructure providers process network metadata needed to deliver and secure requests.

In-app feedback

When you send feedback from Learnfold, we receive the kind of feedback you chose, the message you wrote and, only if you enter one, your email address so we can reply. If you enable Include app & device info (off by default starting with build 202607252256), we also receive the app version, operating system version, device model, the type of learning agent you use (such as Apple, Hosted or Hermes) and, when you report a problem from an error screen, the error message shown. The course title is sent only if you turn on Include course title. We never send course contents, conversations, files, server addresses or credentials with feedback.

Feedback is stored in Cloudflare D1 and forwarded to us by email through Amazon Simple Email Service (SES). If you are offline, the report is kept on your device until it can be sent. To limit abuse, we use the same hourly, secret-keyed IP hash described below. To request deletion of feedback you sent, contact support@learnfold.app with the approximate date you sent it.

Support tickets

Support email is received in iCloud Mail. A server-side rule forwards messages addressed to support@learnfold.app to a dedicated Cloudflare Email Routing intake. We store a ticket number, sender address, subject, message text (up to 32,000 characters), attachment names and types, and delivery status in Cloudflare D1. Email attachments remain in the original iCloud message; the ticket system does not store their contents. In-app feedback also receives a ticket number. If you provide an email address, we may send a transactional acknowledgement through Amazon SES, with a copy to the Learnfold owner. Replies can be linked to the same ticket using its number and the sender address. This does not subscribe you to marketing. Ticket records are deleted after 180 days without activity; the original feedback and mailbox copies follow their own retention settings. Contact support@learnfold.app to request deletion.

Former early-access waitlist

Learnfold is now on the App Store, and the website no longer has a waitlist signup form. If you joined the waitlist before launch, we still hold your email address, signup time and your agreement to receive Learnfold early-access updates in Cloudflare D1. We use your email for Learnfold updates, not advertising lists.

Signup rate limits use an hourly, secret-keyed hash of your IP address and an attempt count, never the raw IP address, and these records are temporary. We retain waitlist entries until launch outreach is complete or you ask to be removed. Emails are sent through Amazon Simple Email Service (SES), which processes your address and delivery information. Emails include an unsubscribe link; unsubscribing stops future emails and cancels queued messages. We retain a suppression record to respect your choice. To request deletion of your email, contact support@learnfold.app.

Website measurement

The learnfold.app website uses PostHog, Inc. for product analytics so we can see how people find the site and improve it. When you visit, the site records the pages you view, the site or campaign link that brought you (for example, a link from our Instagram account), the buttons and links you click or tap, how far you scroll, which App Store button you use, which example-course questions and FAQ entries you open, which course page you are on and whether you choose to open, add or personalize it in the app, whether you open a question from one of our articles in the app (not the question itself), page load performance, and JavaScript errors. When you tap the App Store button on a course page, or on the page that starts a course on a question, the site writes that course’s public link, or the link with your question, to your device’s clipboard so you can paste it into the app after installing. The site never reads what is already on your clipboard. Website analytics records the course page and that a link was copied, as described above. It also makes a session recording of the page as you use it, including mouse movement, taps and scrolling, so we can find confusing parts of the page. Recordings mask what you type into form fields.

PostHog stores a random identifier in your browser's cookies and local storage so it can tell repeat visits from the same browser apart. PostHog receives your IP address, which it uses to estimate approximate location, along with your browser, operating system, device type and screen size. Requests pass through our Cloudflare service at learnfold.app/ingest, which forwards them to PostHog in the United States without the site's own cookies. We do not link website analytics to your Learnfold app, your email address or your purchases, we do not use it for advertising, and we do not sell it. PostHog handles it under its own privacy policy. Session recordings are deleted after 30 days and other website analytics after one year.

If your browser sends a Global Privacy Control or Do Not Track signal, the site does not load analytics at all. You can also block or clear the site's cookies and local storage in your browser settings. To ask us to delete analytics about your browser, contact support@learnfold.app. The former landing-page copy experiment remains disabled, and its historical data follows its existing retention settings.

Children's Privacy

Learnfold is not directed to children under 13, and we do not knowingly collect personal information from children. A parent, guardian, school, or organization using Learnfold with a minor is responsible for selecting appropriate connected services and obtaining any required consent.

Retention, Deletion, and Your Choices

  • Local app data remains on the device until Learnfold replaces or removes it as part of an available feature, you remove an individual item where a deletion control is provided, or you uninstall the app.
  • Uninstalling Learnfold removes its local app container but does not automatically remove data already synchronized to iCloud. You can manage Learnfold's iCloud storage through Apple's system settings.
  • Credentials stored in Apple Keychain may persist after uninstalling the app. Remove a saved connection in Learnfold before uninstalling when possible; erasing the device also removes Keychain data.
  • Removing a connected server deletes the saved connection from Learnfold; it does not delete conversations, provider records, or logs held by that server.
  • To delete data held by a connected server or model provider, use that service's controls or contact its operator.
  • Temporary pairing requests are deleted on claim, cancellation, or expiry as described above.
  • Error reports are deleted after 90 days. Turning off Share error reports deletes reports still waiting on the device. The diagnostic store does not keep persistent installation or launch-session identifiers.

Changes to This Policy

We may update this policy as Learnfold changes. We will post revisions here and update the date above.

Contact

For privacy questions or requests, contact support@learnfold.app.

© 2026 Learnfold
Home Pricing Refunds Support Privacy Terms