Privacy Policy

Last updated August 12, 2026

FolkLoom ("FolkLoom," "we," "us") turns public-domain audio into Yoto cards. This page explains what information FolkLoom touches when you use it, and what it doesn't.

The short version

FolkLoom runs mostly in your browser, talking directly to Yoto's API and Internet Archive's public catalog on your behalf. It also has a small backend of its own now, which stores only what's needed to enforce the free-tier import limit and to handle optional paid-tier purchases (details below). Nothing you do in FolkLoom is sold or used for advertising.

What FolkLoom accesses, and why

Your Yoto login. FolkLoom uses Yoto's own login page (you never enter your Yoto password into FolkLoom itself). After you log in, Yoto gives your browser a temporary access token so FolkLoom can create playlists ("cards") in your Yoto library on your behalf. That token is stored only in your browser's local storage. FolkLoom's server never sees or stores it; it's used only to verify who's making a request to FolkLoom's own backend (described below) and to talk to Yoto directly from your browser.
Your Yoto library. Creating a playlist requires permission to manage content in your library, and FolkLoom uses that permission to add the playlists you choose to import. FolkLoom also checks your existing library once per session, only to see which titles you've already imported so search results can flag or hide them. It doesn't read, use, or share anything else about your library's contents.
Search terms. When you search for a book, your search text is sent to Internet Archive's public search API (the same one anyone can use at archive.org) to find matching LibriVox recordings. It isn't sent anywhere else or linked to your identity.
A record of your imports, to enforce the free-tier limit. FolkLoom's free tier allows 10 lifetime playlist imports per account. To track that, FolkLoom's server stores one row per successful import: an opaque identifier for your Yoto account (not your name, email, or any other profile detail), which title was imported, and when. This is used only to count your imports and show you your remaining balance, never for tracking, analytics, or anything else.
If you buy the paid tier: your email address. FolkLoom's optional paid tier is a one-time purchase through Ko-fi. When you buy it, Ko-fi sends FolkLoom the email address you paid with, so FolkLoom can email you an activation code. That code, your email, and the purchase amount are stored so the code can be redeemed once; once you redeem it in the app, your Yoto account's opaque identifier is marked as unlimited. Your email isn't linked to your Yoto account or library in any other way.

What FolkLoom doesn't do

No analytics or tracking scripts.
No cookies set by FolkLoom itself.
No advertising, and no use of Yoto account information for advertising or tracking purposes, consistent with Yoto's own API Guidelines.
No selling or sharing of your information with third parties, beyond what's necessary for FolkLoom to function, described throughout this page.

Third-party services

FolkLoom relies on a few outside services to work, and your use of FolkLoom is also subject to their own privacy practices:

Yoto: your login, library, and account
Internet Archive: the public-domain audio catalog FolkLoom searches
Ko-fi: handles the optional paid-tier purchase itself (payment details go to Ko-fi and its payment processor, never to FolkLoom); FolkLoom only receives the email address and purchase amount needed to issue an activation code
Resend: sends the activation-code email if you buy the paid tier; sees only the email address needed to deliver that one email

Children's privacy

FolkLoom is designed to be used by parents and guardians, not directly by children. It doesn't knowingly collect any information from children, and doesn't ask for a child's name, birthdate, or any other identifying information at any point.

Your control over your information

Logging out of FolkLoom clears your local session and ends it on Yoto's side too, so a shared device doesn't stay signed in.
You can revoke FolkLoom's access entirely at any time from your Yoto account's connected-apps settings.
Clearing your browser's site data for FolkLoom removes everything FolkLoom has stored locally in your browser (though not the small amount of server-side import/purchase records described above, which exist specifically to enforce limits and purchases across devices and sessions).
To request a copy of, or deletion of, the server-side records described above, email hello@launchby.ai. Note that deleting your import/purchase records may affect our ability to restore unlimited access if you've redeemed a paid-tier code, since that status is tracked in those same records.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of FolkLoom after a change means you accept the updated policy.

Contact

Questions about this policy or your information? Reach out at hello@launchby.ai.