Privacy Policy

Foliate is run by Divya Malreddy in Hyderabad, as an individual, without a registered company ("we", "us"). We decide how and why your information is used. You can write to us at foliatecom@gmail.com.

• You make an account with an email address and password, or with Google. Your plan, journal and reflections are saved on our servers so you can open them on any device.
• Evidence files you add are stored privately. Only you can open them, unless you give someone a share link to your portfolio.
• There is no advertising, no tracking and no analytics.
• Your writing is never sent to an AI service, and Foliate has no feature that writes text for you.
• You can download or delete your data at any time from the Your data page.

Most of this is entered by you.

• Your account. Your email address and, if you use Google, the name and email address Google gives us. Your password is kept by our sign-in provider as a one-way hash, so we never see it.
• Your work. Your profile (name, school, grade, programme dates, supervisor's name), experiences, hours, tasks, milestones, goals, reminders, reflections, notes, trackers, project details, meetings and sources.
• Your evidence. The photos and files you add, with the captions you write.
• Your settings. Appearance choices such as theme and text size.
• Your agreement. Which version of the terms you accepted, when, and whether you told us you are 18 or over or under 18.
• Access codes. If you redeem a code, we record which account used it. Codes themselves are kept only as one-way hashes.
• Share links. If you make one, we keep a copy of your portfolio as it was at that moment, which anyone with the link can read.

Reflections can contain personal details about you or about other people. Please think about what you write about others.

We use other companies to run the service. They handle information on our behalf and only to provide that service.

• Netlify hosts the website.
• Supabase provides sign-in, the database, file storage and the confirmation emails.
• Google, only if you choose Google sign-in.

Their servers can be outside India. We do not sell information and we do not share it for advertising.

Like any website, the servers can see your IP address and basic request details when you load a page, and our providers may keep standard logs for security and reliability. If you type an access code, we keep your IP address next to the attempt for up to a day, to stop repeated guessing.

We do not set advertising or analytics cookies and we do not load third-party trackers. See Cookies and storage for the full list.

You do, and nobody else, unless you share it. If you give someone a read-only portfolio link or use the supervisor view, they can read what you share.

The person who runs Foliate can technically reach stored data through the database. We do not read students' writing, except to fix a fault you have reported or where the law requires it.

Foliate is made for students in the IB Middle Years and Diploma programmes, who are often under 18. If you are under 18, a parent or guardian needs to agree to your use of the app. We do not show advertising, we do not profile students and we do not use your information to monitor your behaviour. Foliate is not for children under 13.

Paid plans are not switched on. If they are, we will use a payment provider, we will not see your full card details, and we will update this page first.

We keep your work while your account exists. The delete button on the Your data page removes your plan, your files and your share links. Your sign-in record, which is your email address, stays until you write to us and ask us to remove it. Our providers can keep backups for a short time afterwards. Access code attempt records are removed after a day.

Depending on where you live, you can ask to:

• see the personal information we hold about you,
• correct it or complete it,
• delete it,
• withdraw consent you gave, and
• complain to us and, if you are not satisfied, to your data protection authority.

The quickest way to see or delete your work is the Your data page. For anything else, write to foliatecom@gmail.com.

Files are private and each account can only open its own. Share links are long random addresses. The owner area is protected by a secret and a short-lived cookie. No system is perfectly secure. If we learn of a problem that affects you, we will tell you promptly.

Write to foliatecom@gmail.com. Our grievance contact is Divya Malreddy, foliatecom@gmail.com. We aim to reply within 7 days and to resolve complaints within 30 days.

If we change this policy in a way that matters, we will say so in the app and change the date at the top. Earlier versions are available on request.