Privacy
Einfall's App Store privacy label reads Data Not Collected. This page explains exactly what that means, in plain language, and exactly how your data moves.
The short version
Einfall has no account system, no servers, and no analytics. Your thoughts are stored on your own devices and synced between them through your own private iCloud account. Nothing about your captured thoughts, your tags, or your actions is ever sent to us, because there's nowhere for it to go — we don't run any infrastructure that could receive it.
How your data actually moves
- Storage and sync. Each captured thought is stored locally on your device and synced to your other Apple devices through iCloud's private database — the same mechanism Apple provides to any app, scoped to your own iCloud account. Apple, not Einfall, operates this sync. We never see it.
- Voice capture. Dictation runs on-device using Apple's on-device speech transcription (with a system dictation fallback where on-device transcription isn't available for your language). Your voice audio is not sent to Einfall or, in the on-device path, to Apple's servers either.
- AI clean-up ("Apple Intelligence" action). When you ask Einfall to clean up phrasing, fix grammar, or summarise a thought, that runs on Apple's on-device FoundationModels framework, directly on your device. The text you're processing does not leave your device for this feature.
- Routing actions. When you send a thought to Reminders, Calendar, Mail, iMessage, Files, or the share sheet, Einfall hands it to Apple's own system frameworks (EventKit, MailKit, MessageUI, FileManager, and so on) — the same APIs any Apple-platform app uses to write to those apps. The thought goes directly from your device into the destination app; it does not pass through any server operated by Einfall.
- External Agents (MCP server). If you choose to turn this on (Settings · External Agents, off by default), Einfall's Mac app runs a small local server that only accepts connections from
127.0.0.1— your own Mac, not the open network — and only from a request carrying a private access token that's generated on your device and never leaves it unless you copy it yourself. An AI agent you configure (for example, Claude Code) connects to this local server to read and act on your stream, on your behalf, exactly as if you'd used the app yourself. This connection happens entirely on your Mac; nothing about it touches Einfall's infrastructure, because none exists. You can regenerate or revoke the access token at any time from the same settings page, and the server is off by default on every install. - Feedback. The "Provide Feedback…" action opens a pre-filled email in your own Mail app, addressed to
feedback@einfall.co. It rides your own mail account — Einfall doesn't operate a mail server or a feedback database. If you write to us, a person reads it. Our commitment: we will not add your address to any mailing list, share it with anyone else, or use it for anything beyond replying to what you wrote. This is a commitment we're making to you, not a technical guarantee enforced by the software — the honest way to describe an email inbox we read, not a system we've built controls around. - Purchases. The one-time $29.99 unlock is handled entirely by Apple's App Store / StoreKit. Einfall never sees your payment details; Apple manages the transaction, the receipt, and any refund.
- What we don't have: no user accounts, no analytics SDKs, no crash-reporting service, no advertising identifiers, no third-party trackers of any kind.
Your choices
- Turning off sync. iCloud sync for Einfall can be disabled in the system's iCloud settings like any other app; your stream then stays local to that one device.
- Turning off External Agents. Off by default; if you've turned it on, you can turn it back off, or regenerate the access token, at any time in Settings · External Agents.
- Exporting and deleting your data. Einfall can export your entire stream as a single plain-text file you keep yourself (see /support). Deleting the app removes the local copy on that device; deleting your thoughts from the stream (or from iCloud.com's data management tools) removes them from sync going forward.
Children's privacy
Einfall is not directed at children and does not knowingly collect data from anyone, of any age — the app doesn't collect data at all.
Changes to this policy
If this policy changes, the updated version will be posted here with a new effective date.
Contact
Questions about privacy: hello@einfall.co.