Terms of Service

Short version. Inkfold is a multi-vendor AI chat application. For each request you send, Inkfold picks an appropriate AI model across multiple vendors, retrieves relevant context from your personal memory, and returns the answer. You choose how your conversations are stored: in Smart mode (the default) we store them on our servers so we can build a richer context graph for you; in Private mode they are encrypted on your device with a key only you hold; in Incognito mode nothing is persisted. None of these modes is a paid upsell — privacy is not behind a paywall. These terms explain the rest.

1. The agreement

This agreement is between you ("you", "user") and Inkfold ("we", "us", "our"), operated from Israel. By creating an Inkfold account or using any part of the service — the web dashboard at app.inkfold.app, the fl command-line interface, the sync daemon, the mobile application, or the application programming interface at api.inkfold.app — you accept these terms and the Privacy Policy, which is incorporated by reference.

If you do not agree to these terms, do not use Inkfold.

2. Eligibility and your account

• Minimum age. You must be at least 13 years old to register. In jurisdictions where the minimum age of digital consent is higher than 13 — for example 16 in Germany, the Netherlands, and several other European Union member states — you must meet that higher age. We do not knowingly collect personal data from users below the applicable age without verifiable parental consent. See Privacy Policy §8.
• Under 13. Users under 13 may not register without verifiable parental consent obtained through our consent flow (Privacy Policy §8.1). If a parent or legal guardian provides consent, the child account is activated under a Family plan with parental oversight. The parent or legal guardian is the responsible account holder for any child sub-account and accepts these terms on the child's behalf.
• Family plan — child sub-accounts. When a parent creates a child sub-account, the parent assumes responsibility for all activity on it and may review, suspend, or delete the child's account at any time through the parent dashboard.
• Account hygiene. You must provide an accurate email address and keep your account credentials confidential. You are responsible for activity under your account. Tell us promptly at [email protected] if you suspect a compromise.
• One personal account. You may hold one personal account. Family and Team plans allow additional seats under the same billing entity, as described in the plan you select.
• Suspension and termination. We may suspend or terminate your account for material violation of these terms, fraud, abuse, or non-payment. Where feasible we will notify you first and give you an opportunity to cure.

3. What Inkfold is

Inkfold is an intelligent routing layer for AI tools. For each request you send, Inkfold selects an appropriate AI model across multiple vendors (Anthropic, DeepSeek, Google, Mistral, OpenAI, xAI, and others — listed alphabetically; Inkfold does not prefer any single vendor), injects relevant context from your personal memory, and returns the answer. The selection engine is continuously improved by aggregate, fixed-shape, content-free signals describing how routed requests perform — a mechanism we call crowd-wisdom routing.

The routing engine, not the individual vendors, is what you are paying for and what you are using.

4. Crowd-wisdom routing and how you control it

Inkfold's routing engine is improved by anonymized, fixed-shape execution-path metadata generated when you use the service. The exact schema is defined in the Privacy Policy — Crowd-wisdom routing. In summary it includes: a task-type label produced by a classifier running on your device, token counts, the vendor and model selected, estimated cost, latency, your implicit reaction (thumbs up/down, retry, edit, abandon), and policy flags raised by on-device redaction. The schema is enforced by a server-side allowlist — any record carrying a field outside the allowlist is rejected at ingestion. It does not include the text of your prompts or answers, your user identifier, your IP address, or the content of any document.

Default state and your control. Crowd-wisdom contribution is enabled by default because the routing engine only delivers value if every user contributes the same minimal metadata. You can disable contribution at any time at no cost and with no service penalty:

• In the web application: Settings → AI → "Help improve Inkfold routing for everyone" (toggle off).
• From the command line: fl telemetry opt-out.
• To delete previously contributed events: fl telemetry clear (this removes pre-aggregation records tied to your account; post-aggregation statistics that by construction identify no individual are retained).

For users in the European Union, the United Kingdom, and other jurisdictions whose data-protection law recognizes a right to object to processing based on legitimate interests, this opt-out is also your exercise of that right (see Privacy Policy §7). We do not offer a discount for contributing and we do not offer a higher-priced "no-telemetry" tier; privacy is not a paid feature.

5. Your content and how it is encrypted

Your AI conversations, saved memory, notes, and context are your content. We claim no ownership, no analytic rights beyond what is described in the Privacy Policy, and no rights to use your content to train machine-learning models — not our own, and not anyone else's.

How your content is encrypted depends on the storage mode you choose:

• Smart mode (default). Your content is transmitted to our servers over TLS 1.3, encrypted at rest using AES-256-GCM with a server-managed key, and indexed so that Inkfold can build a context graph and improve answer quality for you. Inkfold staff do not read individual conversations; access is gated by role and audited. Smart mode is not zero-knowledge — we operate the key.
• Private mode. Your content is encrypted on your device with AES-256-GCM before it is sent to our servers. The key is derived from your passphrase via Argon2id and never leaves your device. Only you can decrypt Private-mode content. During a request your content passes through our servers briefly in memory (for routing and vendor dispatch) but is never written to disk in plaintext — only the ciphertext is persisted. If you lose your passphrase and have no locally saved recovery key, your Private-mode content is unrecoverable by you or by us. That is the intended design.
• Incognito mode. Nothing is written to any persistent store. The session ends and the data is gone.

You grant us a narrow, operational license to store, transmit, back up, and synchronize your content for the sole purpose of providing the service. The license terminates when you delete the content or the account.

6. Third-party AI vendors

Inkfold routes requests to third-party AI vendors. When your request reaches a vendor, that vendor's terms and privacy policy apply to how they handle the request they receive. Inkfold minimizes what each vendor sees via its two-tier routing architecture (see Privacy Policy §3a), but we do not control a vendor's own logging, retention, or model behavior.

Inkfold is not responsible for the correctness, safety, or policy-compliance of model outputs returned by third-party vendors. You are responsible for how you use those outputs and, in particular, for not relying on AI output without human review in high-stakes domains (medical, legal, financial, safety-critical).

7. Billing, plans, renewals, and refunds

• Plans. Free, Pro, Family, and Team plans are self-serve. Enterprise is quote-only. Current pricing is shown in the dashboard and at www.inkfold.app/pricing.html. Payment is handled by our payment processor; we never see your card number.
• Renewals. Paid plans renew automatically at the end of each billing period (monthly or annual) unless you cancel before renewal.
• Cancellation. You can cancel at any time from the dashboard. Your plan stays active until the end of the current billing period; you will not be charged again after that.
• Refunds — general. Outside the European Union cooling-off period described below, we offer a prorated refund within 14 days of an initial purchase or upgrade, on request, for any reason. After 14 days, refunds are at our discretion.
• Refunds — European Union cooling-off period. European Union consumers have a 14-day right of withdrawal under Directive 2011/83/EU (Consumer Rights Directive). By starting to use a paid plan you expressly request that performance begin immediately, and you acknowledge that your right of withdrawal under Article 16(m) of the Consumer Rights Directive expires once performance has fully begun, to the extent of services consumed. You retain your right of withdrawal for any unconsumed portion of the period for 14 days from purchase; we will refund the unconsumed portion on request.
• Price changes. We may change prices. Existing paid customers receive at least 30 days' notice by email before a price change takes effect at their next renewal. You may cancel without penalty before the new price applies.
• Taxes. Prices are exclusive of applicable taxes; we add and remit taxes where legally required (including European Union value-added tax, Israeli value-added tax, and applicable United States state sales tax).

8. Acceptable use

You agree not to:

• Use Inkfold to violate any law or infringe anyone's rights.
• Attempt to break, circumvent, or weaken the client-side encryption in Private mode, the server-side telemetry allowlist, or the two-tier vendor routing.
• Attempt to access other users' accounts, content, or data.
• Use the service to generate or distribute material that is illegal in the jurisdiction you are operating from — including child sexual abuse material, defamation, targeted harassment, instructions for weapons of mass destruction, and content the underlying AI vendors explicitly prohibit under their own use policies.
• Abuse the service in ways that materially degrade it for other users: excessive scraping, automated mass account creation, denial-of-service attempts, or operating under many concealed accounts to evade plan limits.
• Resell Inkfold access, re-brand Inkfold as your own service, or expose it as an application programming interface to third parties, unless you have a separate written agreement with us.
• Use outputs from Inkfold to train, fine-tune, distill, or otherwise create a model or service that competes with Inkfold or with the FusionLayer engine that powers it.
• Use Inkfold to make automated decisions producing legal or similarly significant effects on individuals without independent human review.

We may suspend access to investigate suspected violations; if a suspension becomes a termination, §13 (Termination) applies.

9. Service availability and changes

We aim for high availability but do not promise uninterrupted service. We may perform maintenance, upgrade infrastructure, add or retire features, or change model-routing defaults. Material changes that degrade a feature you rely on will be announced in advance by email or in the dashboard, normally at least 14 days before the change takes effect.

For Enterprise customers on a separate signed contract with a service-level agreement, the contract's service-level agreement governs and overrides this section to the extent of any conflict.

10. Disclaimers

Inkfold is provided "as is" and "as available". To the maximum extent permitted by law, we disclaim all implied warranties — including merchantability, fitness for a particular purpose, satisfactory quality, and non-infringement.

AI models can produce inaccurate, outdated, biased, or harmful output. Inkfold's anti-hallucination stack, citation verifier, and self-consistency checks reduce this risk but do not eliminate it. You are responsible for reviewing AI output before acting on it.

11. Limitation of liability

To the maximum extent permitted by law, Inkfold's total aggregate liability arising from or related to these terms or your use of the service is limited to the greater of (a) the amount you paid us in the 12 months preceding the event giving rise to the claim, or (b) one hundred euros (€100).

To the maximum extent permitted by law, we are not liable for indirect, incidental, consequential, special, exemplary, or punitive damages — including lost profits, lost data, or business interruption — even if we have been advised of the possibility.

Mandatory-law carve-out. Nothing in this section limits or excludes our liability for (a) death or personal injury caused by our negligence, (b) fraud or fraudulent misrepresentation, (c) gross negligence or willful misconduct, (d) any liability that cannot lawfully be limited or excluded under the law that applies to you — including non-waivable consumer rights under the laws of Israel, of European Union member states (in particular under Directive 93/13/EEC on unfair contract terms), of the United Kingdom (Consumer Rights Act 2015), and of the State of California (Consumers Legal Remedies Act).

12. Indemnification

You will defend, indemnify, and hold harmless Inkfold from third-party claims arising from (a) your violation of these terms, (b) your violation of applicable law, or (c) your content or your use of AI-generated output. We will give you prompt notice of any covered claim, allow you to control the defense, and reasonably cooperate at your expense.

13. Termination

• By you. You may terminate your account at any time from the dashboard. Termination begins deletion of all encrypted blobs and account-linked metadata within 30 days, as described in the Privacy Policy §7. You can export your data before deletion via Settings → Data → Export.
• By us. We may suspend or terminate your access for material or repeated violation of these terms, for fraud, for non-payment on a paid plan, or if required by law. Where feasible we will notify you first and give you an opportunity to cure.
• Survival. Sections of this agreement that by their nature should survive termination — content licenses already granted, disclaimers, limitation of liability, indemnification, governing law, and miscellaneous — survive.

14. Changes to these terms

We may update these terms. Material changes will be announced by email to account holders and in a banner on this page at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. If you do not agree to a material change you may terminate before it takes effect. Continuing to use Inkfold after a change takes effect means you accept the updated terms, except where the change is substantively prejudicial to you and your local law requires affirmative consent — in which case we will obtain it.

15. Governing law and disputes

These terms are governed by the laws of the State of Israel, without regard to its conflict-of-laws rules. Disputes will be resolved exclusively in the competent courts of Tel Aviv-Jaffa, Israel.

Consumer carve-out. If you are a consumer (using Inkfold outside any trade, business, craft, or profession), and the mandatory law of your country of habitual residence gives you protections that cannot be derogated from by contract — including (without limitation) the right of consumers in European Union member states to bring proceedings in their country of residence and to benefit from the consumer-protection law of that country (under Regulation (EU) No 1215/2012 and the Rome I Regulation), equivalent rights for United Kingdom consumers, and the protections of the California Consumers Legal Remedies Act — then those protections apply and the governing-law and venue clauses above are limited accordingly.

16. Miscellaneous

• Entire agreement. These terms and the Privacy Policy are the entire agreement between you and Inkfold and supersede any prior agreement on the subject matter.
• No waiver. A failure to enforce any right is not a waiver of that right.
• Severability. If any provision is held unenforceable, the rest of the agreement remains in force and the unenforceable provision is replaced by an enforceable provision that comes as close as possible to the original intent.
• Assignment. You may not assign this agreement without our consent. We may assign it in connection with a reorganization, acquisition, or sale of substantially all our assets; your rights are preserved under the same terms or better.
• Force majeure. Neither party is liable for delay or failure caused by events beyond reasonable control (acts of war, natural disasters, large-scale internet outages, government action).
• Notice. We notify you by email to the address on file. You notify us at the addresses below.

17. Contact

• Legal and terms questions: [email protected]
• Privacy and data-subject requests: [email protected]
• Data Protection Officer: [email protected]
• Security incidents: [email protected]
• Support: [email protected]

Operator (entity in formation): Inkfold, operated from Israel. Postal address provided on request to [email protected] pending entity registration. Inkfold is built on the FusionLayer engine; the engine's role as a sub-processor is disclosed in the Privacy Policy — Sub-processors.