Privacy

Plain English, because it’s your diary. The short version: we can’t read it.

Last updated 27 October 2026

Who we are

Folio is made by Soul Archive Ltd, a company registered in England and Wales (company no. 16186654), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the controller of the little personal data described here. Questions: privacy@devilsense.com.

Without an account

Everything stays on your iPhone. We receive nothing: no diary content, no usage data, no identifiers.

With an account

Accounts and sync are coming soon. When you choose to turn them on, we store:

  • your email address and the IDs of the sign-in providers you use (Apple, Google or email), so you can sign in;
  • the names of your signed-in devices and when each was last seen, so you can manage and sign them out;
  • your diary — entries, photos, tasks, categories and settings — only in end-to-end encrypted form. It is encrypted on your device with a key only your devices hold. We can’t read it, and we can’t recover it without your devices or your recovery key.

Our servers see only what they need to move encrypted data around: record IDs, sizes, version numbers and timestamps.

Who processes data for us

  • Cloudflare hosts this website, our servers, database and storage. Data may be processed anywhere in Cloudflare’s global network.
  • Resend sends sign-in codes by email.
  • Apple and Google, only if you choose to sign in with them.

We don’t sell or share your data with anyone else, and there is no advertising.

Dictation and writing tools

Dictation and the ✦ writing tools run on your iPhone using Apple’s on-device models. Audio and text are not sent to us or to anyone else, and audio is never stored.

Cookies

This website sets no cookies and runs no analytics. The web app, when it launches, will use one strictly necessary cookie to keep you signed in — nothing for analytics or advertising, so there’s no cookie banner.

How long we keep things

  • Account data: until you delete your account. Deletion is immediate for you; server clean-up, including backups, finishes within 30 days at most.
  • Items you delete in Folio go to Recently Deleted on your devices for 30 days, then they’re permanently deleted (sooner if you empty it).
  • Support emails: up to 24 months.

Your rights

Under UK GDPR and EU GDPR you can ask for access to your data, a copy of it, correction or deletion. The quickest copy is the in-app export (Profile → Your data → Export). You can delete your account in the app or on the web — see Delete your account. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

Children

Folio is not directed at children under 13.

Changes

If this policy changes, we’ll update the date at the top and, for meaningful changes, tell you in the app.