Privacy policy

What we never receive

FolderSafe encrypts and decrypts on your device. FolderSafe never sends any of the following to us or to anyone else:

• The contents of your vaults and files
• File, folder and vault names, paths and locations
• Your password, recovery phrase, master keys or Touch ID / Face ID keys
• Your Apple Account, contacts, location or any advertising identifier

What the apps send

The apps talk only to foldersafe.app, and send only this:

• Update check: platform (Mac or iPhone), distribution channel (direct download, App Store or TestFlight), app version and build number. We count checks per day, platform, channel and version. Nothing that identifies you or your device is stored.
• Daily usage count: a random install ID that the app creates on your device (not linked to your Apple Account or your hardware), platform, channel, app version and system version, at most once a day. Our server combines the install ID with a random value that changes every day and stores only a SHA-256 hash of the two, together with the day and those version details. The daily value is deleted when the day ends, so the stored hashes cannot be turned back into your install ID or linked across days. This tells us how many installs are active each day, and nothing more.
• Feedback you choose to send: your message, your email address if you give one, the platform and the app version. We use it only to answer you and to improve FolderSafe.

What this website collects

foldersafe.app uses no cookies, no local storage and no third-party scripts. When a page loads, it sends the page's path and, if you came from another site, that site's domain name (or the utm_source tag of the link you followed). We add one to a counter for that day, page and source. Clicks on the download and App Store buttons are counted the same way. If your browser sends Do Not Track or Global Privacy Control, the page sends nothing.

Abuse protection

To stop floods of requests, the usage-count and feedback services keep an hourly counter keyed by a SHA-256 hash of the sender's IP address and the daily random value. These counters are deleted after about two hours. The IP address itself is never stored.

Hosting

The website and the services above run on Cloudflare (Cloudflare Pages, Pages Functions and D1). Like any web host, Cloudflare processes IP addresses and request details to deliver pages and protect against attacks, under Cloudflare's own privacy policy. Our code never writes IP addresses or browser details to our database.

Downloads from the App Store are handled by Apple under Apple's privacy policy. If you allow it in your device settings, Apple may share anonymous app analytics and crash reports with developers; we use them only to fix problems.

Email

If you write to [email protected] or [email protected], we keep the conversation in our mailbox to help you. We never add you to a mailing list.

How long we keep data

• Daily counts (update checks, usage counts, page views): kept as statistics, without identifiers.
• The daily random value: deleted when the day ends (UTC).
• Abuse-protection counters: deleted after about two hours.
• Feedback and email: for as long as we need them to answer you and improve the app. Ask us and we delete them.

Your choices and rights

Your vaults never depend on our servers: blocking foldersafe.app in a firewall does not stop you from using them. Because usage counts cannot be linked to a person, we cannot look them up or delete them for you. To see or delete feedback or email you sent us, write to [email protected].

Children

FolderSafe is a general-audience tool and does not knowingly collect personal information from children.

Changes

If what we collect changes, we update this page and its date before the change ships. Questions: [email protected].