Privacy Policy

Folios — A Private Journal

Effective date: 23 August 2026

The short version: Your journal entries never leave your device. We collect minimal anonymous analytics (app usage, crash reports) to improve the app — but we never see your writing, personal data, or identity.

1. Data We Collect

Folios uses Firebase Analytics and Firebase Crashlytics (by Google) to collect anonymous usage data and crash reports. This helps us understand how the app is used and fix bugs. This data includes:

App opens, screen views, and feature usage (anonymised, no personal identifiers)
Crash logs, stack traces, and device info (model, OS version) when the app crashes
A random, anonymous instance ID generated by Firebase

This data cannot be linked to your identity. We do not collect your name, email, IP address, or any personal information. There are no accounts, no sign-ups, and no advertising SDKs, and Folios does not request or use the Android advertising ID.

Your journal entries, moods, and any text you write are never collected, transmitted, or accessible to us.

This collection is optional. You can turn it off at any time under Settings › Privacy › Usage analytics, and Folios will stop sending usage data and crash reports.

2. Where Your Data Lives

All journal entries, settings, and backups are stored locally on your device in a private app database. If you enable auto-backup, an encrypted copy is written to a folder you choose on your device — never to our servers.

3. Encryption

When you export or back up your journal in the .folios format, entries are encrypted with AES-256-GCM using a password you set. The key is derived via PBKDF2-HMAC-SHA256 with 200,000 iterations. We never see or store your password.

4. On-Device Processing

Folios uses on-device machine learning for features like mood analysis, writing insights, and language detection. These models run entirely on your phone using Google ML Kit and TensorFlow Lite. No text ever leaves your device for processing.

5. Permissions

Folios requests only the permissions it needs:

Biometrics / Face ID — to unlock the app and locked entries. Biometric data is handled by the OS and never accessed by Folios.
Notifications — for optional daily writing reminders and streak nudges. You control these in Settings.
Storage access — only when you choose to export, import, or set up a backup folder. Folios only accesses the specific files and folders you select.

6. Third-Party Services

Folios uses the following third-party services:

Firebase Analytics (Google) — collects anonymous app usage data. Firebase Privacy Policy
Firebase Crashlytics (Google) — collects crash reports and device diagnostics. No personal data is included in crash reports.

Folios does not use any advertising, tracking, or social media SDKs. All other third-party code consists of open-source Flutter packages and on-device ML models — none of which transmit data off your device.

7. Your Choices and Data Deletion

You are in control of everything Folios holds:

Your journal is yours to delete. Entries live only on your device. Uninstalling Folios, or clearing its storage in Android settings, removes them permanently and immediately. We have no copy on any server — there is no account, no cloud sync, and nothing for us to delete on your behalf, because we never had it.
Turn analytics off. Switch off Usage analytics in Settings and Folios stops sending usage data and crash reports from that moment on.
The analytics we do hold cannot be traced to you. It is tied to a random instance ID generated by Firebase, not to any account, name or address, so we have no way to find "your" records and no way to confirm a deletion request came from the person whose data it is. It expires on Google’s standard Firebase retention schedule. If you would rather none of it existed, switching the setting off is the effective step.

8. Children's Privacy

Folios is intended for people aged 13 and over, and is not directed to children under 13. We do not knowingly collect personal data from children. The anonymous analytics data collected by Firebase cannot be used to identify any individual.

9. Changes to This Policy

If this policy changes, we will update the effective date above and note the changes here.

10. Contact

If you have questions about this policy, or want analytics data deleted, reach us at:

hello@enraio.com