Privacy Policy

Last updated: 9 August 2026

Folioki ("Folioki", "we", "our", or "us") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under applicable data protection laws, including the General Data Protection Regulation ("GDPR").

1. Data Controller

The controller responsible for the processing of your personal data is the operator identified in the Imprint.

If you have any questions about this Privacy Policy or your personal data, please contact us at [email protected].

2. Information We Collect

Account Information

• Your email address.
• Your authentication method (email, Apple, or Google).
• Identifiers required to maintain your account.

Content You Create

We store the content you choose to add to your library, including:

• books and articles;
• imported or pasted text;
• extracted images;
• reading progress;
• notes;
• flashcards;
• learning history;
• learning preferences.

Subscription Information

If you purchase a subscription through Apple's App Store, we receive information necessary to verify your subscription, such as transaction identifiers. We do not receive or store your payment card details.

Usage and Security Information

We maintain limited operational logs necessary to operate, secure, and improve the Service, detect abuse, troubleshoot issues, and enforce subscription limits.

3. How We Use Your Information

We use your personal data to:

• provide and maintain your account;
• synchronize your library across your devices;
• save your notes, flashcards, and learning progress;
• verify subscription status;
• provide AI-assisted features that you request;
• protect the Service against fraud, abuse, and unauthorized access;
• comply with legal obligations.

4. Legal Bases for Processing

Where the GDPR applies, we process personal data on the following legal bases:

• Performance of a contract (Article 6(1)(b) GDPR) to provide the Service.
• Legitimate interests (Article 6(1)(f) GDPR) to ensure the security, integrity, and reliable operation of the Service and prevent abuse.
• Legal obligation (Article 6(1)(c) GDPR) where required by applicable law.

5. AI Features

Optional AI features, including AI translation, grammar explanations, and flashcard generation, require sending the text you select together with its surrounding context to AI services provided through Amazon Web Services.

These requests are processed solely to generate the response you request. We do not use your content to train our own AI models. Where supported by the provider, submitted content is not used to train foundation models.

AI features are optional and are used only when you explicitly request them.

6. Service Providers

We use trusted service providers that process personal data on our behalf, including:

• Amazon Web Services (AWS) for cloud infrastructure;
• Amazon Cognito for authentication;
• Apple for App Store subscriptions and Sign in with Apple;
• Google, if you choose Sign in with Google.

7. International Data Transfers

We primarily process personal data within the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on appropriate safeguards, including Standard Contractual Clauses or other lawful transfer mechanisms where required.

8. Data Retention

We retain your personal data for as long as necessary to provide the Service and maintain your account.

If you delete your account, we delete or anonymize your personal data within a reasonable period unless retention is required by law or necessary for backup recovery, security, fraud prevention, or dispute resolution.

Operational logs are retained only for as long as reasonably necessary for security and operational purposes.

9. Your Rights

Where the GDPR applies, you may have the right to:

• access your personal data;
• correct inaccurate information;
• request deletion of your personal data;
• restrict certain processing;
• receive a portable copy of your data;
• object to processing based on our legitimate interests;
• lodge a complaint with your local data protection authority.

To exercise your rights, contact [email protected]. We will respond within the time required by applicable law.

10. Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. Data transmitted between your device and our services is encrypted using HTTPS.

However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Folioki is not intended for children below the minimum age required under applicable law to consent to the processing of personal data. We do not knowingly collect personal data from children in violation of applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made, we will update the "Last updated" date and, where required by law, provide additional notice.

13. Contact

If you have questions about this Privacy Policy or our processing of personal data, please contact us at [email protected].

Third-Party Services

The Service may interact with third-party services, including Apple, Google, and Amazon Web Services, solely as necessary to provide authentication, subscriptions, cloud infrastructure, and AI functionality.

Legal information about the controller is available in our Imprint.