Privacy Policy

Effective October 20, 2026

Foyer is operated by Engineering Pixels LLC and is offered in the United States. Privacy questions and requests: [email protected].

1. Information collected and why

Information	Purpose
Identifiers and account records: name, email address, account identifiers, your Google profile photo if you sign in with Google, the ZIP code or city you enter, your verified phone number, your Foyer number, the numbers you ask Foyer to ring, and settings.	Account access, choosing a local Foyer number, call handling, and support. Signing in with Google gives us your name, email address, account identifier, and profile photo. Sign in with Apple gives us an account identifier and, if you choose to share them, your name and email address; Apple does not provide a photo. We never receive your Google or Apple password and do not request access to your email, files, or calendar.
Contacts you sync or add: each contact’s name, company, and phone numbers.	Recognize callers and handle calls from people you know. Contact sync uploads only with your permission and separate consent. Contact photos, email addresses, postal addresses, notes, and birthdays stay on your iPhone and are never uploaded; contact photos are displayed on your device only.
Commercial and billing records: subscription, purchase, referral, and usage history.	Subscriptions, referral benefits, accounting, and fraud prevention. Subscriptions are purchased only in the iPhone app through Apple, which processes payment; we receive transaction and subscription status, not your card number. Historical web-payment records may remain.
Audio and communications: live call audio, retained voicemail or recordings, transcripts, summaries, feedback and support messages, and call-handling instructions.	Screen, connect, transcribe, and summarize calls; provide voicemail, live decision help, notifications, account and opted-in product email, and support.
Call metadata: caller-ID name and number, approximate caller city and state where available, carrier verification signals, call time, and duration.	Identify and route calls, maintain call history, and prevent abuse. Foyer does not use your device’s location services or collect precise geolocation, and does not create voiceprints or biometric identifiers.
Inferences: screening outcomes, learned relationship or organization facts, screening preferences, and their history.	Screen calls and personalize screening through Call learning when enabled.
Network, device, and usage information: IP address, browser or app type and version, sign-in activity, push-notification tokens and paired Apple Watch identifiers, permission status (microphone, notifications, contacts), contact-sync status, in-app feature use, notification delivery records, website events, and referral attribution.	Operate, secure, and improve Foyer; deliver notifications; troubleshoot; measure website use and attribute referrals. In-app product analytics are first-party and exclude call content, caller identities, contacts, and health details. We do not use advertising identifiers or track you across other companies’ apps or websites.

Sources are you, your callers, Google or Apple when you sign in with them, Apple for in-app purchases, carrier and caller-ID services, and information generated while operating Foyer. Call content may include volunteered sensitive, health, protected-classification, employment, or education information. We use it to provide the service, not for advertising or to infer protected characteristics.

On our website, we use Google Analytics and analytics cookies only with your consent; analytics is off by default. If your browser sends Global Privacy Control before you make a choice, we treat it as a decline. To change your choice, clear this site’s cookies and stored data in your browser and the notice will appear again. We do not separately respond to browser Do Not Track signals. Referral and signup attribution do not require analytics. We use no advertising cookies. How Google uses information from sites or apps that use its services.

2. Calls and Call learning

Screening calls are recorded and transcribed. The opening tells callers before screening questions begin. Audio is processed live. Playable audio is kept only for the call types you choose to record; by default these are voicemails, calls held for your review, and suspected spam calls, and you can change them in Settings. Transcripts and summaries are retained separately. Live decision help may let the member listen and privately instruct Foyer. Recording and transcription laws vary; members must ensure lawful use where they and their callers are located. Callers who do not wish to continue may end the call.

Call learning is enabled by default where available for eligible connected calls whose transcription has separately been enabled. It uses best-effort-redacted transcript text, call outcomes, and your handling choices to learn relationship and organization facts and update screening preferences. Redaction can miss sensitive information, which may then be processed by our AI model provider. Learned details can influence screening automatically; ambiguous, conflicting, or sensitive details may wait for review.

You can turn Call learning off: this stops future extraction and removes automatically managed learned details and preferences from active screening while retaining their private history. Details you entered yourself remain active unless you change them. Turning learning off does not itself change recording or transcription settings.

If you are a tester and choose Improve Foyer on a call, we use the copy of that call you send, and its audio if you include it, to evaluate and improve Foyer’s screening.

Public demo calls are recorded and used for product improvement. Do not share sensitive information on them.

3. Disclosures

We disclose information only as needed to service providers for calls, phone numbers, and verification texts; speech and AI processing; hosting, security, databases, and storage; sign-in; ZIP code and city lookup; notifications and email; app distribution and in-app payments; and consent-gated website analytics. We also send information to apps you connect, only at your direction (section 3A). Our service provider categories explain the data involved. Service providers may use information only to provide services to Foyer, and we require them to protect it with protections the same as or equal to those described in this policy. The Foyer member receives the relevant call records and notifications. Notifications and emails may contain call details; privacy settings can limit notification previews.

We do not sell personal information, share it for cross-context behavioral advertising, or disclose it for third parties’ own purposes; we have not done so in the preceding 12 months. We do not authorize providers to use call content for advertising or to train general-purpose models. If you sign in with Google, our use of information received from Google adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Community spam protection may share caller phone-number flags across Foyer users, but not account content or transcripts. Automatic spam reporting is on by default and, where your Foyer settings still show the auto-report switch, can be turned off there; Terms section 6A says what a report contains and who receives it. AI screening routes calls; it does not make decisions with legal or similarly significant effects.

Health-related call content is covered by our Consumer Health Data Privacy Policy. Businesses subject to HIPAA must not use Foyer for protected health information without a written agreement expressly permitting it. Invite benefits and related disclosures appear in our Invite terms. Aggregated or de-identified data is kept de-identified; we and our providers do not attempt to re-identify it.

3A. Apps you connect

Where Foyer offers it on your account, you can connect your own AI assistant, app or script, with a personal API key or by adding Foyer as a connector in an AI assistant such as Claude or ChatGPT. Foyer then sends that app the information you allow: calls and summaries; screening conversations, transcripts and voicemail text; contacts and settings; and recordings only if you separately allow audio. If you allow changes, the app can also change your settings and how Foyer treats callers.

You choose where this data goes; Foyer sends it only at your direction. Once the app has it, the app's own terms and privacy policy apply to what it does with it, not this policy. Foyer doesn't sell this data or use it to train AI models. You can revoke a key or an app at any time in Settings › Connected apps; that stops new access but doesn't delete copies the app already has. Foyer logs each app's requests, such as when it asked, what kind of data and how many items, but never the content.

Your callers' phone numbers and what they said may reach the apps you connect. Members are responsible for using that information lawfully, including recording-consent laws. Health-related call content remains covered by our Consumer Health Data Privacy Policy, and businesses subject to HIPAA must not send protected health information to a connected app without a written agreement with us that expressly permits it.

4. Retention

Data	Retention
Voicemail, call recordings, and enabled connected-call audio	Retained without an automatic expiration date until the account is deleted or a verified request to delete the call record is completed.
Account, contacts, settings, call history, transcripts, and summaries	While your account is active; you may request deletion of individual call records.
Call-learning profile and history	While your account is active. Archiving or turning learning off removes learned details from active screening but retains their history. Deleting or rejecting an item erases its readable learned value; limited decision metadata may remain to honor your choice. Account deletion removes the profile and history.
Calls you submit with Improve Foyer	While your account is active, unless you ask us to delete them sooner.
Public demo calls, including recordings	While we operate and analyze the demonstration; callers may request access or deletion. Historical demo messaging compliance records, if any, are kept as needed for compliance and audit.
Billing and referral records	As needed for subscriptions, tax, accounting, disputes, fraud prevention, and referral benefits.
Connected-app keys and their activity log	While your account is active; deleted with your account.
Community spam flags	While the number remains flagged; flags do not expire automatically, and you may dispute one.
Support messages	As needed to handle and retain a record of your request.
In-app product analytics, sign-in activity, and diagnostics	While your account is active; deleted with your account.
Website analytics (with consent)	Up to 14 months.

A few records remain after account deletion: your verified phone number, to prevent repeat trial or referral abuse; mailing-list or waitlist entries with your email address, which you can unsubscribe from or ask us to delete; and feedback you sent. Deleted data is removed from live systems and expires from backups through normal rotation. For verified consumer-health deletion requests, archived and backup deletion is completed within six months of authentication, as applicable law requires.

5. Your choices and rights

Use the app or dashboard, or email [email protected], to request access, a portable copy, correction, or deletion of your information. You can withdraw consent at any time: turn off contact sync, recording, Call learning, or optional notifications in the app, or remove Contacts, microphone, or notification access in iOS Settings. Optional marketing messages include unsubscribe controls. Callers may also request access or deletion or dispute a spam flag. We verify identity and accept authorized agents where applicable law allows.

We honor these rights for all users, respond within 45 days, and provide up to two requests per year free of charge without discrimination. Where law permits an extension, we will notify you and respond within an additional 45 days. Fees or refusals apply only where legally permitted. If we decline a request, reply to appeal; a different reviewer will respond within 45 days. You may also contact your state attorney general.

Account deletion does not cancel an Apple subscription; manage your subscription with Apple separately. Subscription cancellation is not required to delete your Foyer account.

6. Security, children, and changes

We use encryption, restricted access, and other safeguards to protect information. We provide breach notices as required by law.

Foyer is for adults 18 and older. We do not knowingly collect children’s personal information; contact us if a child has provided it so we can delete it.

We update the effective date when this policy changes and communicate material changes through the app or email.