rec.006 doc: privacy policy scope: website accounts: none analytics: none
Legal · Privacy Policy

The website Privacy Policy, stated plainly.

This policy covers the ilfirin.com website — what the site collects when you ask for beta access, and what we do with it. It is deliberately short, because the site does very little. How the Ilfirin product handles your health data is described on the Privacy page and summarized at the bottom here.

No accounts. No analytics or tracking cookies. The only thing this site collects is what you type into the Request Access form, and we use it for one purpose: to reply to you about the invite-only beta. Last updated: June 7, 2026.

01 What this policy covers

This is about the website.

This Privacy Policy applies to the public website at ilfirin.com — the marketing pages you are reading now and the Request Access form. It does not govern the Ilfirin product itself, which runs on your own computer; the product's data handling is documented on the Privacy page, with the essentials repeated in section 07 below.

The site is a static site hosted on Cloudflare Pages. Aside from the Request Access form, it has no backend, no user accounts, and no login.

02 What we collect

Only what you put in one form.

The only personal information this website collects is what you choose to submit through the Request Access form:

  • Your name — so we know what to call you.
  • Your email address — so we can reply.
  • An optional message — anything you want to tell us about your devices, goals, or setup.

We also collect the technical fields the form needs to screen spam — a hidden honeypot field and a page-load timestamp — neither of which identifies you.

No analytics · no tracking cookies

This site ships no analytics, no tracking pixels, and no advertising or tracking cookies — no Google Analytics, no Plausible, no Fathom, nothing of that kind. We do not build a profile of your visit, and there is no consent banner because there is nothing to consent to.

03 How we use it

To reply to you. That's it.

We use what you submit solely to contact you about the invite-only beta — to read your request, decide whether it fits, and write back by email. We do not add you to a newsletter, and we do not use it for advertising.

Mechanically, your submission is handled entirely within Cloudflare: the form posts to a Cloudflare Pages Function (/api/request-access), which relays it to the founder's inbox through Cloudflare Email Routing. There is no database — the message lands in an inbox, the same as if you had emailed us directly.

We do not sell, rent, or share your information with third parties for their own use. The only parties that touch it are the infrastructure providers named in the next section, who process it on our behalf to deliver the message.

04 Hosting & processors

Who else touches it.

To run the site and deliver your message, we rely on the following service providers, which act as data processors:

  • Cloudflare — hosts the website (Cloudflare Pages), runs the form handler (Pages Functions), and delivers the submission to our inbox (Cloudflare Email Routing). Standard server-side request logs are handled by Cloudflare as part of providing the service.

These providers process the data only to provide their services to us; we do not authorize them to use it for their own purposes.

05 Retention

Kept only while it's useful.

We keep your request only as long as we need it to manage the beta — to follow up, set up your instance if it's a fit, or keep a short record of who asked. If you'd like it removed sooner, email us and we'll delete it.

06 Your rights

Access or delete, just by asking.

Depending on where you live, you may have rights under laws such as the GDPR or the CCPA — to access the personal information we hold about you, to correct it, or to have it deleted. Because the only thing we hold is the contents of your Request Access submission, honoring these is simple.

Email hello@ilfirin.com and we'll show you what we have or delete it. We don't sell personal information, so there is nothing to opt out of on that front.

07 The product, separately

The product runs on your computer.

Separate from this website: the Ilfirin product installs on your own machine and reads your wearable, food, and bloodwork data from files you own. Ilfirin keeps no cloud, account, or database of your health data on our side. During a Claude chat, the specific readings Claude needs to coach you pass through Anthropic — a model can't reason over data it never receives. See Anthropic's privacy policy.

We describe the full picture — the three privacy modes, field-level redaction, the local audit log, and the fact that the chat connection is standard TLS terminated at Cloudflare's edge (not end-to-end encrypted) — on the Privacy page. We say it there the way a careful person would want it worded to them.

Honest about what this is.
beta — an early, invite-based beta; this is a website Privacy Policy, not a finished legal product.
counsel — this is an early beta; we'll review this policy with counsel before general availability.
contact — questions, access, or deletion: hello@ilfirin.com.

Last updated: June 7, 2026. This is an early beta; we'll review this policy with counsel before general availability.