Folde
Effective August 3, 2026

Privacy policy

Folde is designed as a private, local-first journal. This policy explains what stays on your device and what limited information supports optional online services.

生效日期：2026 年 8 月 3 日

隐私政策

Folde 是一款以隐私和本地存储为核心的日常记录应用。本政策说明哪些数据留在设备上，以及哪些有限信息用于支持可选在线服务。

1. Scope

This policy applies to Folde on iPhone, iPad, Apple Watch, and its WidgetKit extensions, together with Folde's Cloudflare-hosted account, encrypted-backup, purchase-verification, and aggregate analytics services. Folde does not sell personal information or use advertising identifiers.

1. 适用范围

本政策适用于 iPhone、iPad、Apple Watch 上的 Folde 及其 WidgetKit 扩展，也适用于托管于 Cloudflare 的账户、加密备份、购买验证和汇总统计服务。Folde 不出售个人信息，也不使用广告标识符。

2. Data Folde handles

Records and media

Titles, notes, dates, tags, formatting, counters, and photos you add remain in the app's local SwiftData store. Cloud backup sends only the archive after on-device encryption.

Apple account information

If you choose Sign in with Apple, the service stores the Apple account identifier, name, and email Apple provides to authenticate optional online services. Local mode remains available.

Device and approximate network context

For signed-in accounts, device registration sends the platform, hardware model identifier, operating-system version, app version, locale, and time zone. Cloudflare may provide an approximate country, region, and city from the network request. Folde does not request Location Services for this purpose and stores no precise coordinates. The originating IP address is immediately transformed into a keyed, irreversible hash; Folde does not store the raw IP address.

Private aggregate analytics

Folde sends a random installation identifier and a small allow-listed set of feature events. These events never include journal text, Todo titles, Tap names, tag names, photos, advertising identifiers, precise location, or contacts.

2. Folde 处理的数据

记录与媒体

你添加的标题、正文、日期、标签、格式、计数信息和照片均保存在本地 SwiftData 数据库中。云备份只会发送已在设备上加密的归档。

Apple 账户信息

如果选择“通过 Apple 登录”，服务端会保存 Apple 提供的账户标识、姓名和邮箱，用于验证可选在线服务。你仍可选择纯本地模式。

设备与粗略网络信息

对于已登录账户，设备注册会发送平台、硬件型号标识、操作系统版本、App 版本、语言区域和时区。Cloudflare 可能根据网络请求提供粗略的国家、地区和城市。Folde 不会为此申请系统定位，也不会保存精确坐标。来源 IP 会立即转换为带服务端密钥且不可逆的摘要；Folde 不保存原始 IP 地址。

隐私友好的汇总统计

Folde 会发送随机安装标识以及严格白名单内的少量功能事件。这些事件绝不包含日记正文、Todo 标题、Tap 名称、标签名、照片、广告标识符、精确位置或联系人。

3. How data is used

Local content is used only for features you request. Account data authenticates optional cloud services. Device and coarse network context support compatibility, regional product statistics, abuse prevention, and service reliability. Folde does not use your records or device context for advertising, cross-app tracking, or sale to data brokers.

No hidden content uploadYour journal text and media are never transmitted as readable content.

3. 数据用途

本地内容仅用于实现你主动使用的功能。账户数据用于验证可选云端服务；设备与粗略网络信息用于兼容性分析、地区汇总统计、防止滥用和保障服务稳定。Folde 不会将记录或设备信息用于广告、跨 App 追踪，也不会出售给数据经纪商。

不会暗中上传内容你的日记正文和媒体不会以可读形式传输。

4. Apple services and permissions

  • Sign in with Apple: optional identity and profile information.
  • Photos and Camera: only media you select or capture for a record.
  • Notifications: optional local reminders.
  • WidgetKit and App Groups: a limited snapshot required to render the widget and Watch app.

Permissions can be changed at any time in iOS Settings.

4. Apple 服务与设备权限

  • 通过 Apple 登录：可选的身份与资料信息。
  • 照片与相机：仅处理你为记录选择或拍摄的媒体。
  • 通知：可选的本地提醒。
  • WidgetKit 与 App Group：共享渲染小组件与 Watch App 所需的有限快照。

你可以随时在 iOS“设置”中修改权限。

5. Encrypted backups

Backups are created only when you request one. The archive is encrypted on your device with AES-GCM using a key derived from your password. Folde cannot know or recover that password. You may export the encrypted file or, after signing in, upload it to Folde's private Cloudflare R2 storage.

5. 加密备份

只有在你主动操作时才会创建备份。备份使用 AES-GCM 在设备上加密，密钥由你的密码派生。Folde 不知道该密码，也无法帮你找回。你可以导出加密文件，也可以登录后上传到 Folde 的 Cloudflare R2 私有存储。

6. Retention, controls, and deletion

  • Readable records remain on the device until you delete them or remove the app.
  • Folde retains at most three completed encrypted cloud backups.
  • Account-linked device context, approximate country/region/city, and the irreversible IP hash are retained while the account is active.
  • Settings → Account → Delete Account deletes the server account, sessions, device metadata, purchase association, encrypted cloud backups, and all local Folde data.
  • Signing out removes the local Apple profile and server session but does not delete local journal records.

6. 保留、控制与删除

  • 可读记录会一直留在设备上，直到你主动删除或卸载应用。
  • Folde 最多保留三个已完成的加密云备份。
  • 与账户关联的设备信息、粗略国家／地区／城市和不可逆 IP 摘要会在账户有效期间保留。
  • 通过“设置 → 账户 → 删除账户”会删除服务端账户、会话、设备元数据、购买关联、加密云备份以及全部本地 Folde 数据。
  • 退出登录会移除本地 Apple 资料和服务端会话，但不会删除本地日记记录。

7. Security

Folde uses Apple platform protections, app sandboxing, Keychain for the Apple user identifier, and authenticated encryption for exported backups. Protect your device passcode, keep iOS updated, and store backup passwords separately.

7. 安全措施

Folde 使用 Apple 平台安全机制、应用沙盒、钥匙串保存 Apple 用户标识，并对导出备份使用带认证的加密。请保护设备密码、及时更新 iOS，并单独保存备份密码。

8. Children

Folde is a general-purpose personal journal and is not directed to children under 13. Folde does not knowingly collect personal information from children.

8. 儿童隐私

Folde 是通用个人记录工具，并非面向 13 岁以下儿童。Folde 不会在知情情况下收集儿童个人信息。

9. Changes to this policy

This policy may be updated when Folde's features or data practices change. The effective date above will be revised, and material changes will be presented as appropriate.

9. 政策更新

Folde 的功能或数据实践发生变化时，本政策可能更新。页面顶部的生效日期会同步调整，重大变化将视情况进行说明。

10. Contact

For privacy questions or deletion requests, email jamesitachiitachi@gmail.com.

10. 联系方式

如有隐私问题或删除请求，请发送邮件至 jamesitachiitachi@gmail.com。