Last updated: October 31, 2026
Folio is published by Code VIA Technologies ("we", "us"), run by Tom Weiss, an independent developer based in Israel. We are responsible for the personal data described here (the "controller" under European data protection law, and the database owner under Israel's Privacy Protection Law). You can reach us at the email address at the end of this policy. Using Folio is also subject to our Terms of Service.
No law requires you to give us any personal data. Folio works without an account, and you can turn analytics off at any time; without an account you can't sync, share or receive shared notes, and without sending feedback we can't answer it.
Without a Folio account: none of your notes. We cannot see your notes, photos, or attachments. That content never leaves your device except through your own iCloud sync.
With a Folio account: the account information and notes described in "Folio account" below. Signing in is optional, and only notes you keep in your Folio account library or share are stored with us.
Separately, Folio for iPhone, iPad and Mac sends usage analytics to a server we operate ourselves. This is a small, fixed set of events with no free-text fields. It never includes the content of your notes. Details are in the next section.
Folio for iPhone, iPad and Mac sends on-by-default usage analytics to a server we operate. It is a short list of events, and nothing else:
Alongside each event we record a random ID generated on your device when you first install the app (not an Apple device identifier, and not shared with any other app), plus app version, iOS version, device model (e.g. "iPhone16,2"), language, your 2-letter country, and how many notes you currently have (a count only, never their titles or content). There are no free-text fields. Analytics never sees the text of your notes, your photos or attachments, or anything else you've typed.
The install ID doesn't carry your name or email, and we don't join analytics to your Folio account. It is still personal data, though: a purchase event carries the store's transaction ID, which also appears in your Folio Pro purchase record if you have a Folio account, so the two could be matched. App Store privacy labels list analytics as linked to you for that reason.
We do not store IP addresses, even in logs; an IP is hashed with a key that rotates daily, used only to rate-limit abuse, and then discarded. Raw events are deleted after 90 days. A summary record per install (when it was first and last seen, app, iOS version and device model, language, country, how many times the app was opened, and whether it made a purchase) and the purchase records are kept until you ask us to delete them. Analytics never goes to an ad network or an analytics SDK. It goes to a server we operate ourselves. To keep an eye on the service, that server also posts a short alert to our private Slack workspace when a new install or a purchase is first seen, with the device model, iOS version, app version, country, and the product and whether it was a purchase or a restore. Slack stores these alerts on our behalf. Nothing is sold or shared.
In the EU, the rest of the European Economic Area, the UK and Switzerland (based on your device's Region setting), from Folio 1.7.0 build 212 analytics are off until you choose "Allow" when the app asks; nothing is sent and no install ID is created before that. You can turn analytics off at any time in the app's Settings. Opting out stops new events from being sent. To delete what was already collected, tap "Delete analytics data" in Settings: our server deletes the events, purchase records and install record linked to your install ID. If the server can't be reached, the app keeps retrying while it's open, and Settings shows "Retry analytics deletion" until the server confirms. You can also email us at the address below. Aggregate counts that no longer identify an install are kept. Folio for Android does not send these usage analytics; the only diagnostics from it are Google's ML Kit reports when you use Enhance with AI (see "AI features").
A Folio account is optional. You need one to share notes, to back up your notes, and to use Folio Pro across devices. When you sign in, we store:
Account data is encrypted in transit and note content is encrypted at rest. It is not end-to-end encrypted: our server can read it in order to sync and share it. We use it only to run Folio. We don't look at your notes, sell them, use them for advertising, or use them to train AI models.
If you use a Folio account, these companies process data on our behalf, only to provide the service:
Our database is hosted in the European Union. Some of the providers above (Google, Apple, Slack and Railway) are based in the United States and may process data there. Where data protection law requires it, these transfers rely on the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework, as provided in each provider's data processing terms. You can ask us for more information about these safeguards.
You can share a note from your Folio account by inviting someone's email address or by creating a link. Only people who accept can see and edit the note. Everyone on a shared note can see the note, the names of the other people on it, and who last edited it. You can stop sharing at any time; the people you shared with then lose access.
Note reminders and Lock Screen Live Activities are scheduled and rendered on your device. Their content never leaves your device except via your own iCloud sync.
If you use a Folio account, we send push notifications through Apple and Google. When someone shares a note with you, the notification shows their name, not the note's title. Notifications that keep your devices in sync carry no note content.
"Enhance with AI" runs entirely on your device: on iPhone, iPad and Mac it uses Apple Intelligence, and on Android it uses Google's on-device Gemini Nano model, which runs through Android's AICore system service. The text of your notes is never sent to us or to any third party by this feature. It only works on devices that support these on-device models; elsewhere the app explains why it isn't available.
On Android, Folio Pro users can tap Enhance with AI. When they do, Google's ML Kit library, which connects Folio to the on-device model, sends Google diagnostic information: device and app information, performance metrics, feature usage and error codes, configured languages, and identifiers. Google uses it for diagnostics and usage analytics. It never includes the text of your notes, and nothing is sent unless you use the feature.
When you attach a photo or file, Folio receives only the item you explicitly pick. It has no access to the rest of your photo library or file system.
When you add your current location to a note, Folio asks for location access while you use the app and reads your position once, at that moment. The location is saved in the note like any other content: on your device, in your iCloud, and on our servers only if the note is in your Folio account. Folio never tracks your location in the background.
If you use Send Feedback in the iPhone, iPad or Mac app, we receive your message with the app and system versions. It is stored on the same server as analytics and forwarded to our private Slack workspace so we can read it. Slack stores it on our behalf. Feedback is kept until you ask us to delete it; it isn't tied to your account, so tell us roughly what you wrote and when.
Depending on where you live, you can ask us to access the data we hold about you, correct it, delete it, give you a copy in a portable format, restrict how we use it, or stop using it (object). Where we rely on your consent, you can withdraw it at any time. You can export your notes from the app yourself, and delete your account in the app. For anything else, email us at the address below; we reply within one month. We may need to confirm that the request comes from you.
If you're unhappy with how we handle your data, please tell us first. You also have the right to complain to a data protection authority, such as the supervisory authority in your EU country, the UK Information Commissioner's Office, or Israel's Privacy Protection Authority.
In the last 12 months we collected these categories of personal information, for the purposes described above: identifiers (account and install IDs, email address), customer records (name), commercial information (Folio Pro purchases), internet or app activity (usage analytics), approximate location (country) and precise location only when you add it to a note, and the content of notes in your account. We don't sell or "share" personal information for cross-context behavioral advertising, and we don't use sensitive personal information to infer characteristics about you. You have the right to know, delete and correct your personal information, and we won't discriminate against you for exercising these rights. Email us to make a request; an authorized agent can make one on your behalf.
Folio is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created a Folio account, contact us and we will delete it.
If a future feature ever changes any of the above, this policy will be updated before that feature ships, with the effective date revised.
If you have any questions about this Privacy Policy or our data practices, please contact us: