Privacy Policy
1. Introduction and Interpretation
1.1 This document applies to the Services provided by Nemvist Pty Ltd (ABN 44 701 765 344), Victoria, Australia ("Foleil", "Nemvist", "we", "us" or "our"). "You" and "your" mean the individual accessing or using the Services.
1.2 "Services" means the Foleil iPhone and Apple Watch applications, widgets, controls, Live Activities, Messages and share extensions, website and connected account, artificial intelligence, usage-counting, product-library and content services, including the Sprout companion. "App" means the relevant Foleil application.
1.3 "Personal Information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, including Health Information. "Health Information" means Personal Information concerning an individual's physical or mental health, health services or related health circumstances, including information derived from those records, to the extent protected by applicable law. "User Content" means records, information, images and other material you submit or save through the Services.
1.4 "Privacy Policy" means the policy at https://foleil.app/privacy, including Foleil's Data Retention Policy and Foleil's Data Use Policy. "Terms" means the Terms of Use at https://foleil.app/terms. References to applicable law include mandatory consumer and privacy protections that apply to the relevant individual and processing.
1.5 This Privacy Policy describes the categories and sources of Personal Information we collect, our purposes for using and disclosing that information, storage and retention arrangements, and your rights and choices. The separate notice for website email registration is available at https://foleil.app/signup-privacy. The Terms address use of the Services; acceptance of the Terms does not itself authorise a separate use of sensitive information.
2. Account Registration and Authentication
2.1 Account registration uses Sign in with Apple. You may add a passkey as an additional sign-in method. We receive the Apple sign-in reference, email Apple supplies, passkey public-key information, registered-iPhone references and session and security information. We do not receive your Apple password or passkey private key.
2.2 The email supplied by Apple, including an Apple relay address, is the principal contact for account, security and data breach notices. If Apple supplies no email when records are restored into a new account, that account's contact email remains empty; we do not populate it from the deleted account's sealed record. A later Apple sign-in may supply it. We retain Apple's first-sign-in name for the health-record deletion note. If no name was supplied, that note uses the profile name or, failing that, the email and account reference.
2.3 Your date of birth is included in your saved profile and synchronises with the account. Age checks use that date and, where available and required, Apple's separate age-range signal on your iPhone. The age-range signal is not transmitted to the account server. An unresolved required age check prevents activation and upload while logs remain on the iPhone. Foleil is intended for individuals aged 18 or over.
3. Agreements, Permissions and Choices
3.1 Account storage is required to use Foleil. In this version, the page headed "Your Foleil account" states "Foleil keeps your account in sync across your iPhones" and requires two initially unselected agreements: "I agree to Foleil's Data Retention Policy" and "I agree to Foleil's Data Use Policy". Each links to its respective section below. The first records agreement to account storage, including permitted Apple Health data and overseas handling. The second records the analysis and research choice described in Foleil's Data Use Policy. That choice may subsequently be turned off in Settings › Privacy and your data without closing the account. This version records the choice but does not conduct the proposed analysis or research.
3.2 Apple Health access is optional and subject to permissions by type. You may use Foleil without granting it. Sprout's cloud AI requires a separate agreement; account-storage agreement does not enable AI. Other system permissions are requested separately. Refusing or withdrawing a permission may prevent the associated feature from operating. Withdrawal does not itself erase information already transmitted or lawfully retained.
3.3 We retain consent choices, recorded text-version and digest fields, time, account-device reference and withdrawal or refusal information needed to apply the current choice. These fields do not constitute a representation that every linked webpage is captured by the existing digest. Restored historical choices are not fresh permission. The retention and use sections below describe the account controls and separate research record.
4. Categories, Sources and Purposes of Personal Information
4.1 We collect information you provide, readings and files you permit us to obtain from devices or services, information generated through use of Foleil and information derived from those records. Account-supported records have server copies and working copies on signed-in devices. Local-only records are identified separately below.
| Category | Information and source | Relevant purposes |
|---|---|---|
| Account and security | Apple references, supplied name/email, passkey public-key details, device/session information and agreement records, from you, Apple and use of the account | Registration, authentication, synchronisation, recovery, permissions, security and required notices |
| Profile and preferences | Chosen name/picture, date of birth, sex, height, weight, units, goals, experience/equipment, injuries/notes, activity/energy settings, food preferences/restrictions, cooking equipment/time, muscle focus and optional Your week availability, from you and permitted records | Personalisation, plans, calculations and the features you use |
| Training and places | Workouts, sets, loads, effort, notes, records, race results, routines/plans, imported workouts/reports, route points/times, places/visits, golf rounds, activity stories, segments, workout music and saved timetable classes/attendance | Training history, planning, progression, maps, reports and selected sharing |
| Food and daily life | Meals, foods, recipes, plans, shopping/pantry records, water, caffeine, alcohol, fasting, nutrition goals/estimates, meal-photo previews, sleep/notes, alarms, check-ins, soreness, stressful moments, habits, journals, reflections and mindful sessions | Logging, reminders, summaries, nutrition and wellbeing features |
| Health Information | Body measurements, typed blood pressure/glucose, blood panels/dates, cycle symptoms/contraception, pregnancy/life stage, self-checks, medicines/doses/schedules you enter and permitted Apple Health readings | Health-related displays, calculations, history and permitted features, with separate AI permission where applicable |
| Files and saved content | Chosen health documents, including lab reports/prescriptions; progress/workout photos and supported media; saved chats, confirmed memory/coaching preferences, AI cards, awards/challenges, update-read state and staged food plates | The requested document, media, coaching, recovery and history features |
| Selected contact | One check-in contact's name and selected telephone number or email, chosen by you | Your check-in feature; we do not obtain your other contacts |
| Operational and derived records | Scores/estimates, revisions, deletion markers, conflict copies, recovery-verification records and the usage/security records described below | Feature operation, synchronisation, correction, recovery, performance and security |
4.2 Permitted Apple Health account copies contain portable readings, dates, types, values, units, sample identifiers and source-recognition information. Another app's readings include its source-app name. Device information includes the model, not your personal iPhone or Watch name. Query anchors, system permissions, transient drafts and maintenance state are not general account content. Some working Health data is refreshed or invalidated rather than preserved as a permanent copy of every sample.
4.3 An unfinished setup draft remains on the iPhone until setup is completed or local data is reset; it is excluded from account transfer and export. Account-supported staged food plates synchronise between your iPhones so interrupted plates can be recovered or logged. A discard marker may remain pending a successful file-deletion retry. Revisions, deletion markers and conflict history support synchronisation; a later offline edit may reinstate an individual record after an earlier deletion. Account closure is a separate process.
4.4 We use Personal Information to provide and personalise the requested features, maintain and secure accounts, respond to support and rights requests, apply your choices, and comply with applicable obligations. Fixed usage statistics and the proposed health-analysis/research choice are distinct activities described below. A general description of improvement does not authorise an unrelated use of Health Information.
5. Apple Health and Health Storage
5.1 Foleil requests supported ordinary Apple Health read types together. Availability depends on the device, permissions and actual runtime capability. An entitlement declared in source, completion of a permission request or an empty read does not establish that access was granted. Vision prescriptions and medications use separate item-selection sheets. Clinical documents are unavailable in this version.
5.2 Subject to those limitations, the read request covers the following information:
- Movement and activity: steps, active and resting energy, exercise and stand time and activity-ring goals; flights climbed; walking, running, cycling, swimming and wheelchair distances and pushes; walking speed, step length, asymmetry, double-support time and steadiness; stair speed, six-minute walking distance, falls, and mobility-aid use; running speed, power, stride length, vertical oscillation and ground-contact time; cycling speed, cadence, power and functional threshold; swimming strokes, physical effort, workout effort and workouts with their routes and associated readings.
- Heart and circulation: heart rate, resting and walking heart rate, variability, recovery, VO2 max, blood pressure, peripheral perfusion, high, low and irregular-rhythm events, low-cardio-fitness events, ECG recordings and heartbeat series.
- Breathing and sleep: respiratory rate, oxygen saturation, lung-function measures, inhaler use, sleep times and stages, breathing disturbances and sleep-apnoea events.
- Body and environment: height, weight, body mass index, body fat, lean mass, waist, body, basal and wrist temperature, time in daylight, UV exposure, underwater depth and water temperature.
- Food, drink and nutrients: energy, protein, carbohydrate, fats, fibre, sugar, cholesterol, vitamins and minerals, water, caffeine and alcohol consumed or measured in blood or breath.
- Mindfulness, mood and assessments: mindful sessions, State of Mind, depression and anxiety assessment results, including PHQ-9 and GAD-7 scores.
- Cycle and reproductive health: menstrual flow, spotting and bleeding (including during or after pregnancy and after menopause), cycle variations, cervical mucus, ovulation and pregnancy tests, progesterone tests, contraception, pregnancy and lactation, sexual activity and related recorded symptoms.
- Hearing and sound: environmental and headphone sound exposure, sound-reduction measures, exposure events and hearing-test thresholds.
- Symptoms and other recorded events: recorded physical symptoms and their severity or presence, including pain, breathing or digestive symptoms, fatigue, sleep changes and movement-disorder measures; toothbrushing and handwashing events.
- Characteristics: date of birth, sex, blood type, skin type, wheelchair use and activity-ring mode.
- Health records: supported clinical record types, including allergies, conditions, immunisations, lab results, medication records, procedures, vital signs and coverage records, only where your device and Foleil's actual runtime capability allow them. An entitlement declared in source does not by itself make these records available.
5.3 With your write permissions, Foleil saves workouts and effort, mindful minutes, water, nutrition including food names, caffeine, vitamin D, alcohol, body measures, blood pressure/glucose, State of Mind and cycle records, and cycling power from your paired meter. Your choices and Apple's permissions govern these paths.
5.4 Protected, installation-bound ownership files record sample/item identifiers, types, versions and pending or deletion state for Foleil's Health copies. They are excluded from device backups, account synchronisation and ordinary exports. They enable recognition and correction of those copies; older unbound evidence is set aside without granting deletion authority and is removed by local reset or account exit. Deleting a typed blood-pressure reading also requests removal of the exact copy Foleil recorded saving on the owning iPhone. It does not remove another app's reading. Apple may refuse or delay removal, and a correction from another iPhone may await the owning iPhone's return.
5.5 Imported workouts retain measured figures, source information and saved reports. Other apps' food, and Foleil's own food after reset or reinstall, may be read into totals and scores without becoming new manual meals. Apple may return an app's own samples despite a Health read setting; Foleil's connection and nutrition controls also govern readback. With AI permission, food names from other apps may be used for AI food-group estimates. Apple Health medication names and dose events displayed on the medications page are excluded from AI, exports and shares. Medicines you enter in Foleil are subject to clause 7 instead. Confirmed lab values may inform permitted features and AI; raw clinical records do not automatically become Blood panels.
5.6 The encrypted on-device Health read cache assists page loading and is distinct from permitted account-reading copies and the ownership files. It is excluded from device backups and ordinary exports, shares and PDFs. Access requires the device protections for which it was created. Disconnecting Health or resetting deletes the cache, with failed deletion retried. Local analysis may refresh when Health changes or Foleil opens, subject to device, battery and coverage limits. Older imported workout history does not generate a bulk paid-analysis or notification burst. Complete historical coverage and immediate system background delivery are not guaranteed.
5.7 Foleil excludes its main health store, encrypted read cache, supported health-content files and protected Health ownership files from new device backups. Non-content permission bookkeeping, settings, counts and dates may remain in those backups. At this version's first launch, the older encrypted copy is also excluded; an existing iPhone copy may remain until account recovery is verified. New recovery uses the account. Earlier iCloud/computer backups, exports and non-health device preferences remain subject to their own controls. We cannot remove earlier external copies through the App.
6. Watch and Other Device Services
6.1 Apple Watch retains workouts, sets, water and commands recorded there and a phone-supplied day/plan summary, and exchanges them with its paired iPhone. Account-owned items wait for that account. Items made while the iPhone is signed out belong to the next account signed in on that iPhone. Sign-out clears phone-supplied account summaries and projections; pending records belonging to another account may remain on the Watch awaiting their owner, without reassignment.
6.2 Widgets and complications use private-marked summaries in the shared container; controls queue taps until saved. Live Activities display workout, heart-rate, rest or fasting information. Separate silent account notifications carry revision signals, not Health records, through Apple's push service. User-visible reminders, including meal-preparation and recipe-step timers, are scheduled locally and may contain your figures, subject to system preview settings and delivery controls.
6.3 Notification anti-repeat history records kind, form, identifier, scheduled time, repeat status and a one-way digest of text, not the text itself. It is a protected local file excluded from new backups and is not sent by Foleil. It retains no more than 2,000 entries per kind and prunes entries older than 14 days when recording new notifications; older entries may therefore remain until a subsequent write. A separate preference records today's date and attempted AI-notification request count and may enter a device backup. Local reset clears these records.
6.4 Location is used for weather, nearby places, workout routes and helpline-country lookup. Always permission also supports background weather refresh and optional place visits. Watch workout recording may continue under its permitted workout-location mode. Apple Maps receives selected, search or route coordinates; Weather receives the relevant location and time. Reverse geocoding supplies Today's forecast place name, retained in memory rather than the account or AI. App Store country for account retention is distinct from GPS location and residence.
6.5 Camera and photo permissions support selected scans, meal estimates, documents, progress/workout images, repetition counting and pulse measurement. Photo pickers provide selected items only; workout-photo matching separately requests library access. Voice input is transcribed on-device without retained audio; sending requires your action. This version provides no spoken workout cues or article narration, apart from Siri's own responses. Siri and Shortcuts may log or display selected records. Saved food/meal names may enter the local search index; App Lock or reset removes the implemented index entries.
6.6 Motion supports activity/repetition detection and the Watch smart alarm. Bluetooth supports equipment you pair and retains its name/identifier and session readings. Calendar busy times assist planning without copying your events. Shopping lists may be added to Reminders. Apple handles alarms, Music favourites, device authentication and Focus filters; Foleil receives no face or fingerprint templates. Apple also delivers exercise pictures and soundscapes as app resources. Revoking permission may disable a feature without deleting previously saved or external records.
7. Artificial Intelligence
7.1 Consent. The separate AI prompt offers Agree or Not now. Agree enables cloud AI under the current agreement. Turning Use Sprout's AI off stops new cloud requests, including pending and automatic requests. Re-enabling it requires agreement again. Information already transmitted remains subject to the relevant recipient's handling.
7.2 Inputs. Requests contain bounded context relevant to the task, which may include age rather than date of birth; sex/body measurements; goals/plans; workouts, sets, effort and relevant notes; food/water; sleep/recovery; vitals; cycle/life stage; mood/journal/check-ins; habits; medicines you enter; saved lab results/document extracts; mindfulness; awards, memory and preferences; your question; and selected meal photos, label text or timetable images. Sensitive summaries may include PHQ-9/GAD-7 results, mood, ECG classifications, hearing and reproductive information. Exact location is included only for a nearby request where location is already permitted. Other contexts use route summaries rather than raw route points. Bounded summaries exclude raw waveforms, Health source/device names and identifiers, FHIR/CDA and raw clinical documents; the strength-classification exception in clause 7.3 uses the other app's source name. Not every category is sent in every request.
7.3 Triggers. Eligible data changes may generate automatic progression, reaction, workout-report wording, summary, notification or analysis-card requests. Opening a past day's analysis may request and save its first card. Cards may include that day's scores, usual bands and permitted contributors; Energy Bank may include steps, goal and planned training. Blood context may include each marker's latest result, range and date even when old. Notification requests use bounded topics, labelled figures, permitted place names, templates and locale. Strength classification may include workout type, another app's source name, duration and available heart-rate/distance figures. Saved AI cards are encrypted. Reset or withdrawal removes active local copies under the implemented controls; account history and retained copies follow the retention section.
7.4 Processing and minimisation. Requests pass over encrypted connections through Foleil's Cloudflare AI service to Anthropic, PBC. Text filtering removes recognised names, birth dates, contact and identifier patterns, and precise locations except permitted nearby coordinates. Filtering cannot identify every personal detail. Prepared images omit file metadata, but visible people, names and other details still reach Anthropic. Timetable reading uses up to four rendered pages; original images/PDFs are not retained as timetable files, while saved classes become records.
7.5 Search and learning. Typed food words may be sent to the shared product library and, with AI permission, Anthropic web search for matching published nutrition. Confirmed Ask search words use that service too. Recipe generation/import and workout requests use the current AI route. Anthropic is the configured recipient; the OpenAI/ChatGPT connection is not configured in this version. Reviewed-learning assistance uses your question and selected article passages, without Health history. Recall-practice answers remain on the practice screen and are not saved or graded by AI. Seed Catch retains enable/offer preferences, without score history or personal measurements.
7.6 Functions and limitations. Foleil calculates scores on-device. Cloud AI generates wording and estimates and may propose workout progression within implemented targets and safety controls, with local fallback and editable targets. Meal estimates are reviewed before saving. With AI off, score cards use templates; eligible on-device features and explicit local-assistance actions follow their settings. If cloud AI is unavailable, supported local assistance or built-in wording may be used; some cloud refusals result in a template rather than another model. Journal reflections may use cloud AI with permission. Generated information may be inaccurate, incomplete or out of date and is not medical advice. The Terms contain the health and safety conditions.
7.7 Provider terms. Anthropic's published Commercial Terms prohibit model training on customer content and incorporate its Data Processing Addendum. Published API retention is normally 30 days, subject to safety review, policy enforcement, law and separately agreed arrangements. Flagged content may be retained for up to two years and classification scores for up to seven years. Its published location notice describes US storage and processing in the US, Europe, Asia, Australia and locations used for internal support or safety work. These are attributed summaries of its retention notice and location notice, not our guarantee of physical deletion or outside-provider performance.
7.8 Relay records. The AI relay does not retain prompt or answer content. It retains a random install code, issuance and last-accepted-request day, per-code quota/cost counts and content-free request logs. Minute, day and month counters become cleanup-eligible after approximately two minutes, 40 days and 400 days respectively; install records after more than 90 days without a recent accepted day. Cleanup depends on later valid requests, so inactive records may remain longer. Logs contain timing, type/model, result and cost and use Cloudflare's configured retention, described as up to seven days, subject to its terms and settings. Network addresses reach the service for delivery and abuse control but are not saved with install records. Saved AI answers may separately form account content.
8. Disclosures, Sharing and Third Parties
8.1 We disclose information to the infrastructure and AI providers identified above and below for their stated functions, to services used for permitted features, and to recipients you select. Relevant third parties handle their copies under their own terms, notices and controls.
| Recipient or destination | Information and purpose |
|---|---|
| Cloudflare and Anthropic | Account hosting/processing and AI respectively, as described in clauses 7 and 11 and the retention section |
| Apple | Permitted Health, Watch, Weather, Maps, Music, app resources, WorkoutKit, Messages, SharePlay, authentication and notification services under Apple's privacy policy |
| Open Food Facts | Barcode or submitted online food-search words, network address and headers identifying Foleil; online search is optional and its privacy notice applies |
| Recipe, source and other linked sites | An ordinary web request when you open a page or link |
| Your selected recipients | The records, files, images and other content you choose to export, send or share |
| Nemvist support | Your email, submitted content and any chosen diagnostics, screenshots or food photos when you send a support or feedback draft |
| Apple developer analytics and TestFlight | Crash/usage reports and submitted feedback/screenshots, sometimes name/email, under Apple's TestFlight notice; we use these to improve Foleil |
8.2 Exports and shares may include health/cycle reports, study/workout spreadsheets, GPX, calendar/routine files, cards/clips, comparisons and partner summaries. Study exports exclude place-visit logs. Ordinary exports exclude cached original Health readings; a proved sealed-record access copy may include retained Health readings. Routes may identify places despite endpoint masking. Shared images/clips use the implemented metadata/sound removals. Workout share cards exclude private notes; workout spreadsheets include random Foleil workout IDs. SharePlay shares a selected catalogue routine and progress, not private loads, notes or history. Messages send only on your action, and the share extension awaits review. Destinations control their received copies.
8.3 Helpline-country lookup sends no mood entries. Apple Maps may resolve the location you choose, and the directory receives the country-page request. Contact, bug, answer-feedback and food-problem actions open email drafts; you choose whether to send them. Screenshots and attachments can reveal private information. Support email is retained while needed for the request and applicable obligations.
8.4 We may retain or disclose the minimum relevant information where required or otherwise permitted by applicable law, including for a properly authorised security investigation, rights request or legal claim. This is not an unrestricted discretion to disclose Health Information. A corporate reorganisation or change of ownership does not itself authorise sale of Health Information, incompatible purposes or removal of required safeguards, information or consent.
9. Usage Statistics, Shared Products and Communications
9.1 Fixed usage records cover screens/time, features, unfinished steps, slow screens, freezes, crashes and AI failure/outcome categories. They carry a random identifier separate from the account, app version/build, iOS major version, locale region, UTC event day and fixed event/outcome categories. They exclude Health data, your answers, typed text, prompts and AI answers. Raw events and installation records have a 400-day retention target. Later uploads trigger bounded cleanup, which may be delayed when uploads stop. Daily summaries, activity totals and retention-cohort figures have no fixed expiry in this version. There is no usage switch or third-party analytics service.
9.2 Confirmed packaging contributes product name/brand, barcode, serving and nutrition to the shared library, without identity, private logs or retained photos. Used AI estimates matched to published products may contribute name, nutrition and source host names, not full page addresses or Health data. Lookups do not create contributions. Abuse controls retain product-scoped codes for seven to eight days, daily counters and one anonymous vote per product for the entry's life. Connection details deliver requests and are not attached to contributions. Independent product facts remain after account deletion.
9.3 We do not sell Personal Information, provide it to data brokers, use advertising or engage in cross-service tracking. Notification controls govern relevant App notifications. Account/security notices and policy-version emails are service communications rather than permission for unrelated marketing. Website email registration is covered by its separate notice. This App policy does not introduce website tracking, advertising vendors or marketing programmes that are not described here.
10. Subscription and Transaction Information
10.1 The current beta's paywall is disabled. This Privacy Policy does not represent that subscription collection is active. Where paid access is offered, the purchase and renewal conditions are governed by the purchase information and clause 9 of the Terms. Apple handles payment confirmation and processing; any collection of transaction or entitlement data for a paid release must be disclosed for that implemented service before activation. We do not represent that purchase code is absent merely because the beta paywall is disabled.
11. Hosting, International Disclosures and Security
11.1 Cloudflare, Inc. (United States) hosts account records, processing and keys. Its worldwide network may handle requests near you or elsewhere. Personal Information may be processed outside Australia; an Oceania location hint is not a guarantee of Australian residency. Cloudflare's Developer Platform subprocessor list identifies Google LLC in Australia, the United States, India and the European Economic Area, and Oracle America, Inc. in Australia, the United States, the United Kingdom, Japan, Canada, Singapore and the European Economic Area. It does not identify the individual EEA countries for those services. Listed Cloudflare affiliates may provide account and engineering support in other countries. This list describes possible processing, not proof that every record reaches every listed recipient or country. Other recipients identified in this Privacy Policy may also process information abroad.
11.2 The overseas warning in Foleil's Data Retention Policy is linked from the required agreement. It concerns an overseas recipient's handling under valid consent, rather than a general waiver of our other obligations or mandatory rights. Overseas laws may provide different protections and require disclosure to authorities. A policy link is not a representation that all jurisdiction-specific transfer safeguards or informed-consent requirements have been satisfied.
11.3 We use device protections, encrypted connections and per-account encrypted server storage. The service decrypts records to operate accounts; encryption does not prevent Nemvist or a sufficiently privileged administrator from reading them. Cloudflare holds the service keys without an independent second-provider lock. Access is restricted to service operation, authorised record requests, legal obligations and security investigation. Sealed records have restricted access and records of authorised access. No system is completely secure.
11.4 We use the available account contact for notices required by applicable breach law. Requirements depend on the affected individuals and law, rather than solely on an Australian serious-harm threshold. A sealed email contact retained after deletion is used only for data breach notices, not ordinary account messages, research or populating a restored account.
12. Access, Correction and Other Rights
12.1 You may view, correct and export applicable records in the App and request access to or correction of Personal Information held by Nemvist, including sealed records, without restoring an account or purchasing a subscription. Appropriate identity verification protects disclosure. An ordinary email request remains available if you cannot use the App's request-code route.
12.2 Subject to applicable law, rights may include confirmation of collection and recipients, a portable copy, deletion, restriction, objection, withdrawal, authorised-agent requests, non-discrimination for exercising rights and review or appeal of refusal. Lawful retention and other applicable exceptions may limit a request. Where a request is refused, reasons and available complaint options are provided subject to applicable law. You may request an associated statement for a disputed record where required. Correction is free of charge; no access fee is imposed by this Privacy Policy.
12.3 Account, AI and research choices may be withdrawn separately through the controls described here. System permissions may be changed in Apple's settings. Foleil derives scores, estimates and other information from the identified inputs; AI may generate explanations when enabled. These functions are not a professional medical assessment. Contact us to exercise any applicable rights concerning automated processing; we do not assert that no such rights can apply.
13. Questions and Complaints
13.1 Send access, correction, deletion or privacy requests and complaints to info@nemvist.com. We aim to reply within 30 days. We assess the request or complaint, review relevant records and respond with the outcome or explain what further information is needed. Shorter applicable statutory limits and required complaint/appeal procedures take precedence over that aim.
13.2 You may also contact the Office of the Australian Information Commissioner, the Victorian Health Complaints Commissioner for relevant health-record matters, or another competent local authority. Use the same contact above to request review or appeal. This Privacy Policy does not waive applicable rights.
14. Age Restrictions
14.1 The Services are intended for individuals aged 18 or over. Contact info@nemvist.com if you believe an individual under 18 has created an account. Uninstalling the App does not delete a server account. The Terms address eligibility; age and account processing are described in clause 2.
15. Changes to this Privacy Policy
15.1 The version and effective date identify this Privacy Policy. Website changes do not alter App behaviour. Material new collection, recipients or purposes apply after in-app information and any consent required before the new processing. Smaller clarifications and corrections take effect on publication. The change statements below do not permit processing prohibited by law, remove accrued rights or authorise new sensitive-data uses retrospectively.
16. Sources and Credits
Foleil offers general wellness information. These are the references and credits used by this version, not a claim that a source’s publisher has reviewed or endorsed Foleil or its estimates. Opening a source link makes an ordinary request to that site. Foleil’s own wording and calculations remain its responsibility.
Health and fitness references
Sprout Age references: Paluch et al., Lancet Public Health (2022); Lee et al., Circulation (2022); Momma et al., British Journal of Sports Medicine (2022); Windred et al., Sleep (2024); Zhang et al., CMAJ (2016); Srikanthan and Karlamangla, American Journal of Medicine (2014); Jha et al., New England Journal of Medicine (2013); Zhao et al., JAMA Network Open (2023); Shan et al., JAMA Internal Medicine (2023); Cerhan et al., Mayo Clinic Proceedings (2014); Kodama et al., JAMA (2009). Cardio-fitness population reference: FRIEND 2015, Table 3. These population references do not establish a diagnosis or an individual outcome.
- Australian Government: Recommendations for pregnancy.
- NHMRC: Water nutrient reference values.
- NHS: Tiredness and sleep problems in pregnancy.
- NHS: Keeping fit and healthy with a baby.
- ACOG: Exercise During Pregnancy FAQ119.
- Apple: Sleep apnea notifications on Apple Watch.
- Australian Government: Recommendations for adults 18 to 64.
- Royal Life Saving Australia: Public pool safety.
- South West Maternal Medicine Network: Palpitations in pregnancy.
- 2025 Canadian Guideline for Physical Activity, Sedentary Behaviour & Sleep Throughout the First Year Postpartum. Primary factual reference: CSEP 2025 postpartum guideline. Original independent Foleil factual synthesis; no publisher permission or endorsement claimed.
- FSANZ Schedule 11, Calculation of values for nutrition information panel. Food Standards Australia New Zealand; numerical facts transcribed from Schedule 11. Source terms.
- Australian Dietary Guidelines, recommended number of serves for adults. Based on material provided by the National Health and Medical Research Council. Source terms.
- Australian Dietary Guidelines, serve sizes. Based on material provided by the National Health and Medical Research Council. Source terms.
- NIDDK, research behind the Body Weight Planner. National Institute of Diabetes and Digestive and Kidney Diseases. Source terms.
- NIDDK, continuous glucose monitoring. National Institute of Diabetes and Digestive and Kidney Diseases. Source terms.
- Nutrient Reference Values, fats: total fat and fatty acids. Based on material provided by the National Health and Medical Research Council. Source terms.
- Chow and Hall, The Dynamics of Human Body Weight Change. Chow CC, Hall KD (2008), PLoS Computational Biology 4(3): e1000045. Original Foleil arithmetic adapter; no publisher code or artwork copied. Source terms.
- NIST Guide to the SI, Appendix B.8. NIST SP 811 (2008), Appendix B.8. Republished courtesy of the National Institute of Standards and Technology. Numerical unit fact used in original arithmetic. Source terms.
- NIDDK Body Weight Planner applicability. National Institute of Diabetes and Digestive and Kidney Diseases. Source terms.
- Hall et al. 2011 equation appendix. Hall et al., Lancet 2011; NIDDK Body Weight Planner. No endorsement or qualified clinical review is implied. Source terms.
- NIDDK Body Weight Planner baseline equations. Hall et al., Lancet 2011; NIDDK Body Weight Planner. No endorsement or qualified clinical review is implied. Source terms.
- NIDDK Body Weight Planner dynamic equations. Hall et al., Lancet 2011; NIDDK Body Weight Planner. No endorsement or qualified clinical review is implied. Source terms.
NHS material is used as a primary factual reference for an independent Foleil synthesis. No NHS review or endorsement of the planner is claimed. CSEP material is a factual reference, not a reproduced guideline, questionnaire or licensed complete plan. Food Standards Australia New Zealand and National Health and Medical Research Council source credits and linked source terms apply as identified above.
Reading library references
The following primary links accompany the topics in this version’s bundled reading library. The reference does not send your reading history or Health record to that publisher.
- Your menstrual cycle, in plain language: source 1.
- A window, not a promise: source 1.
- Notice patterns without judging them: source 1.
- Choose movement for how you feel: source 1.
- Make room for comfort: source 1.
- When your timing changes: source 1.
- Heavy bleeding deserves support: source 1; source 2.
- A missing period is not a failed goal: source 1.
- Why a warm-up is worth a few minutes: source 1; source 2.
- Cooling down and stretching after a session: source 1; source 2.
- How often to train each week: source 1; source 2.
- Why rest days are part of training: source 1; source 2.
- Progressing gradually, not all at once: source 1; source 2.
- Choosing a weight that suits you: source 1; source 2.
- Reps and sets in plain language: source 1; source 2.
- Strength training with just your body: source 1; source 2.
- Walking counts as real exercise: source 1; source 2.
- Coming back after time away: source 1; source 2.
- Training when you have a cold: source 1; source 2.
- Breathing while you lift: source 1.
- Balance is trainable: source 1; source 2.
- What your core actually does: source 1.
- Mobility and flexibility: source 1; source 2.
- Strength training as you get older: source 1; source 2.
- Fitting cardio and strength into one week: source 1; source 2.
- Telling soreness from a warning sign: source 1; source 2; source 3.
- Sleep is part of training: source 1; source 2; source 3; source 4.
- How much sleep adults need: source 1; source 2; source 3; source 4; source 5.
- A wind-down routine that works: source 1; source 2; source 3.
- Screens before bed: source 1; source 2; source 3; source 4.
- Napping without wrecking your night: source 1; source 2; source 3.
- Sleep and appetite: source 1; source 2; source 3.
- What active recovery means: source 1; source 2; source 3.
- Soreness a day or two later: source 1; source 2; source 3.
- When rest is the better choice: source 1; source 2; source 3; source 4.
- Signs you may be doing too much: source 1; source 2; source 3; source 4.
- Ice, heat and a sore body: source 1; source 2; source 3; source 4.
- Stress and recovery: source 1; source 2; source 3.
- Protein, in plain language: source 1; source 2; source 3; source 4.
- Spreading protein across the day: source 1; source 2.
- Fibre and why it helps: source 1; source 2.
- Choosing wholegrains: source 1; source 2; source 3.
- Fruit and vegetables, in serves: source 1; source 2; source 3.
- Fats: the type matters: source 1; source 2; source 3.
- Sugar in drinks: source 1; source 2; source 3.
- Salt and blood pressure: source 1; source 2; source 3.
- Eating before a workout: source 1; source 2.
- Eating after a workout: source 1; source 2; source 3.
- Snacks that help: source 1; source 2; source 3.
- Reading a nutrition label: source 1; source 2; source 3.
- Portion awareness without counting: source 1; source 2; source 3.
- Getting protein from plants: source 1; source 2; source 3.
- Iron in everyday food: source 1; source 2; source 3.
- Calcium and your bones: source 1; source 2; source 3.
- Vitamin D, sunlight and sun protection: source 1; source 2; source 3.
- Caffeine, alertness and sleep: source 1; source 2; source 3.
- Alcohol and your training: source 1; source 2; source 3.
- Meal planning, kept simple: source 1; source 2; source 3.
- Batch cooking, safely: source 1; source 2; source 3.
- Leftovers and the two-hour rule: source 1; source 2; source 3; source 4; source 5.
- Eating well on busy days: source 1; source 2; source 3.
- Telling a craving from hunger: source 1; source 2.
- How much water is enough: source 1; source 2.
- Drinking around a workout: source 1; source 2.
- Early signs you need to drink: source 1; source 2.
- Which drinks count towards fluid: source 1; source 2.
- Staying hydrated on hot days: source 1; source 2.
- When electrolytes matter: source 1; source 2; source 3.
- Iron and heavy periods: source 1; source 2.
- Regular activity and period pain: source 1; source 2.
- Sleep across your cycle: source 1; source 2; source 3.
- Preparing your notes for an appointment: source 1; source 2.
- Training when the weather is hot: source 1; source 2; source 3.
- Training when the weather is cold: source 1; source 2.
- Sun protection for outdoor sessions: source 1; source 2.
- Smoke, air quality and your session: source 1.
- Walking or running after dark: source 1.
- Hills and stairs as free progression: source 1; source 2.
- Training through hay fever season: source 1; source 2; source 3.
- What the UV index means for you: source 1; source 2.
- Movement and how you feel: source 1; source 2.
- Slow breathing to settle down: source 1; source 2.
- Writing things down: source 1; source 2.
- A simple gratitude habit: source 1; source 2.
- Connection is part of health: source 1; source 2.
- Why routines help your mood: source 1; source 2.
- When it is time to talk to someone: source 1; source 2; source 3; source 4.
- Mindfulness, without the mystery: source 1; source 2; source 3.
- Keeping everyday stress in check: source 1; source 2.
- Habits carry you when motivation dips: source 1; source 2.
- Discomfort you can work with, pain you should not: source 1; source 2; source 3; source 4.
- The first days after an ankle sprain: source 1; source 2.
- Knee pain that shows up on stairs: source 1; source 2.
- Caring for a sore lower back: source 1; source 2.
- Shoulders and overhead work: source 1; source 2; source 3.
- Choosing shoes that suit the activity: source 1.
- Coming back after an injury: source 1; source 2.
- If you feel dizzy while exercising: source 1; source 2; source 3.
- Chest pain means stop and call for help: source 1; source 2; source 3; source 4.
- When a physiotherapist can help: source 1; source 2.
- Pacing activity and rest: source 1; source 2; source 3; source 4; source 5.
- What the evidence says about daily steps: source 1; source 2; source 3; source 4.
- Getting to know gym equipment: source 1; source 2; source 3.
- Training words, explained: source 1; source 2; source 3.
- Volume, progression and consistency: source 1; source 2; source 3; source 4.
- Choosing exercises, rest and tempo: source 1; source 2; source 3; source 4; source 5.
- Accumulation and intensification phases: source 1; source 2.
- Undulating progression: source 1; source 2.
- Planned deloads: source 1; source 2; source 3.
- A pause when your head hurts: source 1; source 2.
- A gentler plan when you feel sick: source 1; source 2.
- Finding support when panic feels close: source 1; source 2.
Food data, self-checks and artwork
Contains public sector information licensed under the Open Government Licence v3.0, © Crown copyright 2021: Composition of foods integrated dataset, CoFID 2021. Open Food Facts data is available under the Open Database Licence.
PHQ-4, PHQ-2 and GAD-7 use the PHQ/GAD instruction manual; its page 8 states that reproduction, translation, display and distribution do not require permission. The menopause wellbeing reflection is original Foleil wording, not the MRS or a validated clinical instrument; Healthdirect’s menopause information is topic context.
“A quiet stream” is original Foleil artwork generated with Codex / ChatGPT; generation-service terms. This artwork credit is separate from Sprout’s current AI provider and does not mean your app data is sent to OpenAI.
Soundscapes
- Rain and Distant Thunder — DoKashiteru, CC-BY-3.0. Source preparation: Original downloaded audio, unchanged. Repeats during playback. Display title: Rain and Distant Thunder. Original source title: rain thunder loop. Playback packaging: lossless ALAC; decoded samples and format match the source recording.
- Morning Birdsong — koertes, CC-BY-3.0. Original downloaded audio, unchanged. Repeats during playback. Display title: Morning Birdsong. Original source title: koertes-ccby-birdsongloop16s. Uploaded by qubodup; original recording by koertes, original video.
- Beside the Stream — kurt, CC-BY-3.0. Decoded original into float32 CAF without requested resampling. This does not recover detail lost in the lossy original. Original source title: stream1. Plays once; seamless looping has not been verified.
- Waterfall Mist — kurt, CC-BY-3.0. Decoded original into float32 CAF without requested resampling. This does not recover detail lost in the lossy original. Original source title: waterfall1. Plays once; seamless looping has not been verified.
- The Cascades — kurt, CC-BY-3.0. Decoded original into float32 CAF without requested resampling. This does not recover detail lost in the lossy original. Original source title: waterfall2. Plays once; seamless looping has not been verified.
- Falling Water — kurt, CC-BY-3.0. Decoded original into float32 CAF without requested resampling. This does not recover detail lost in the lossy original. Original source title: waterfall3. Plays once; seamless looping has not been verified.
- Cricket Chorus — dklon, CC-BY-3.0. Source preparation: Decoded original into float32 CAF without requested resampling. This does not recover detail lost in the lossy original. Original source title: crickets. Plays once; seamless looping has not been verified. Playback packaging: lossless ALAC; decoded samples and format match the source recording.
Apple Weather attribution remains with the weather feature as required by that service. This sources list does not change third-party licence terms or grant permission beyond them.
Foleil's Data Retention Policy
Foleil keeps what you log, your settings and the Apple Health data you allow on its servers, so your account is the same on every iPhone and comes back on a new one.
Apple Health data kept: activity and workouts, heart, sleep, body measurements, nutrition, cycle tracking, mindfulness, and any health records you allow.
Cloudflare may handle your data outside Australia. If you agree, Australian Privacy Principle 8.1 won't apply to that. If your data is then mishandled there, Foleil isn't accountable under the Privacy Act, and you can't seek a remedy under that Act. Foleil's contract with Cloudflare still applies.
You can withdraw anytime in Settings › Account › Withdraw consent. That closes and deletes your account.
In the current app, open Manage account within Settings › Account to reach Withdraw consent or Delete account. Closing an account removes active access and starts the process below; it does not erase every retained or external copy immediately. The overseas warning concerns the recipient’s handling under a valid consent, not a waiver of Foleil’s other duties or applicable local rights.
17.1 Account Storage, Closure and Sealed Records
Your account records are kept while your account is open. Signing out stops this iPhone’s access and removes its local account data, including in-app recovery and export staging. It does not delete your server account. Foleil checks that accepted changes have reached the account before completing sign-out; it can refuse while offline or changes are still unsent, and an interrupted erase can need a retry. Some pending Watch records wait for their own account as described above. Files you saved outside Foleil, Photos, Apple Health and earlier device backups stay under their own controls. Settings › Account › Manage account offers Delete account and Withdraw consent; both close the account and run the deletion process across your iPhones. It stops access and sync, removes sign-in methods and deletes live account copies. Deletion is a process with a receipt/status, not instant physical erasure of every copy. D1 and Durable Object customer-accessible recovery can cover 30 days after actual deletion. Apple's revoke token is handled separately and can remain for revocation up to 30 days after the request, with its own later recovery window. Provider-internal physical retention is not established by those recovery features.
For accounts assigned Australia by the service’s retention rules, retained account records are kept sealed until more than seven years after the recorded last use, then put through the purge process, subject to applicable retention law. The server sets that normal deadline at the Melbourne anniversary plus two calendar days. Its sealed record can contain logged records, supported settings and files, media, Health readings, saved cards and consents, rather than only individual Health measurements. If the country is unknown, Foleil uses the same route as a precaution; this is not a statement that Australian law requires that route for every unknown country. The current app uses your App Store country supplied by Apple, rather than a country picker or GPS residence check. The service can still hold an earlier stated-country value, which its retention rules can prefer to the sign-up country. Contact info@nemvist.com if the displayed country is wrong. An App Store country does not establish your physical location or which laws apply. Sealed records include the in-scope health records, consents, linked key-use history and the minimum contact information for breach notices. The health records can be opened for your access or correction request, your expressly chosen restore, a legal requirement or a data breach investigation. The sealed email contact has the narrower breach-notice-only use described above. Accounts assigned another known country use the deletion route, with any applicable legal retention exception, rather than the routine seven-year seal. A minimal deletion note — name, period and deletion date — is kept while Foleil operates. Records subject to a longer applicable minimum, including any relevant childhood-collection rule, require that legal retention to be respected; the country route alone does not determine that legal obligation. Deletion requests and our replies have a separate register without health data. Answered entries are kept for 24 months; unanswered requests stay until answered and any applicable hold is released. Other security audit records have their specified seven-year retention; key-use records follow account/archive retention. A known incident, pending request or legal order can place the relevant minimum records on hold. A recorded hold needs an authorised release or replacement; it does not end automatically.
17.2 Health-Storage Stop. To stop Apple Health storage alone, email info@nemvist.com and confirm from the account email. After the stop, manual logging/account use continues, Health-dependent scores are off, and retained Health readings are deleted or sealed under the applicable route. A stopped Health archive's deadline remains open while the account stays open and is set when it closes. Foleil offers a dismissible prompt on launch/return to turn storage back on. Resuming starts new storage; it does not itself recover earlier readings.
17.3 Access and Express Restore. For retained sealed records, prove identity through Apple sign-in or the kept deletion receipt and obtain a request code to email to info@nemvist.com. A secure-link copy does not restore the account. You can instead expressly restore eligible records into a new account; old settings, sessions, passkeys and sign-in links do not return. Where retained copies overlap, the later account-archive version is current, including a later deletion. Earlier Health-stop copies are kept as conflict history with their original content. The new account uses only an email supplied by its current Apple sign-in, never the sealed contact. Restoring previously stopped Health records requires its additional heads-up and your choice to continue. A new account needs fresh current consent.
17.4 Device Reset and External Copies. Reset local data clears this iPhone's working data and re-downloads the account; it does not delete the account. A protected reset-undo copy can last 24 hours until next cleanup; category erase and repairs have their stated undo handling. Local set-aside recovery files remain until managed, and sign-out/account erasure clears applicable retained local recovery content. Deleting the app does not delete the server account. Apple Health records, older device backups, exported files, Photos and destinations you shared to remain separately managed. Foleil cannot remove those external copies for you through account deletion. Apple Health readback can repopulate eligible totals after reset. Soundscape favourites remain preferences. Temporary chats are not saved; saved chats/memory/documents have deletion controls.
17.5 Earlier Food Entries Retained for Health Corrections
When a live Eat entry’s time, portion or removal changes, the account can keep its earlier entry identifier, logged time and caffeine portion basis, the account device that changed it and the change stamp. It leaves out the photo, description and other figures. This history lets one iPhone correct the old day’s caffeine in Apple Health. Its intended retention is 93 days after the event stamp. This version has a known synchronisation issue that can remove an event early or bring an expired event back; 93 days is not an assured maximum at this release. This iPhone also keeps a separate arrival-time table for these corrections, excluded from device backup and erased at account exit, with a 93-day cleanup rule.
This policy is subject to change without notice. The latest version is always available at foleil.app.
Foleil's Data Use Policy
18.1 Account Operation. Foleil's servers can read this data to run your account. Cloudflare hosts them.
The email Apple shares is your main contact for account, security and data breach notices.
18.2 Analysis and Research Choice
Let Foleil analyse what you log and your Apple Health data to improve its health features.
It also covers research, published only as group statistics that don't identify anyone.
You can turn it off anytime in Settings › Privacy and your data.
18.3 Scope and Withdrawal. Agreeing to this Data Use Policy is required to finish account setup in this version. Turning the research choice off afterwards does not close your account or turn off the separate usage counts described above. Sprout's AI has its own agreement.
Foleil keeps the research choice with its recorded text-version and digest fields, time, account-device reference, server revision and withdrawal or refusal status. An unaccepted or refused attempt does not allow analysis. A choice brought back with restored records is history, not fresh permission. The account server orders the current choice by its revision rather than the iPhone's clock.
18.4 Before New Processing. This version records the choice; it does not carry out that analysis or research. Before that processing starts, Foleil needs to explain its actual fields, purposes, who can access it, where it happens and how long it is kept, with any further permission and research safeguards required. Agreeing to this policy is not permission for advertising, data brokers, sale or an unrelated study.
This policy is subject to change without notice. The latest version is always available at foleil.app.