Privacy Policy

Effective date: April 13, 2026  ·  Last updated: May 14, 2026

1. Who We Are

Folia Pro ("the App", "we", "us", "our") is a personal finance management application operated as an independent project by Jorzier (jorzier.com). The App is accessible at foliapro.jorzier.com.

For privacy-related questions, contact us at: hello@jorzier.com

2. Information We Collect

Information you provide directly:

• Account information: your name and email address (via Google Sign-In)
• Financial data: accounts, transactions, categories, savings goals, reminders, and templates that you voluntarily enter into the App
• Settings and preferences you configure within the App

Information collected automatically:

• Authentication tokens (Google OAuth) to keep you signed in
• A localStorage cache of your financial data, stored only in your browser, to reduce load times
• Basic usage data collected by our infrastructure providers (Vercel and Supabase) for security and performance monitoring — this includes IP addresses and browser type, which we do not access or analyze at an individual level

Information we do NOT collect:

• We do not collect payment card numbers or bank credentials
• We do not run analytics tracking on individual user behavior
• We do not use cookies for advertising or tracking purposes

3. How We Use Your Information

We use your information exclusively to:

• Provide, maintain, and improve the App
• Authenticate your identity and keep your session secure
• Store and retrieve your financial data as you use the App
• Respond to your support requests

We do not use your data for advertising, profiling, or sale to third parties under any circumstances.

4. How We Store and Protect Your Data

Your financial data — Google Drive AppData storage:

All of your financial data is stored as a single JSON file (folia-pro-data.json) in your personal Google Drive AppData folder. This folder is private to you and is not visible to other apps or to people you share files with. The data is protected by Google's own security infrastructure, including encryption at rest and in transit. We cannot access the contents of your Google Drive. You can revoke our access to your Google Drive at any time via your Google Account settings (myaccount.google.com/permissions).

A copy of the data is also cached in your browser's localStorage for fast reads. This cache stays on your device and is never transmitted to our servers.

Your account — Supabase authentication:

We use Supabase only for authentication and to hold your account record (your name and email address — the same information Google provides at sign-in). Your financial data is never stored on Supabase. Supabase provides:

• Encryption at rest using AES-256
• Encryption in transit using TLS 1.2+
• Row Level Security (RLS) — a database-level policy that ensures each user can only access their own account record

The App is served via Vercel, which provides HTTPS for all connections.

Despite these measures, no system is 100% secure. We cannot guarantee the absolute security of your data and you use the App at your own risk.

5. What the App Can and Cannot See in Your Google Drive

Folia Pro uses Google's drive.appdata permission scope. This scope is intentionally narrow — much narrower than full Drive access. Specifically:

• The App does not access your Google Drive. It cannot read, list, search, modify, or delete any of your personal files, folders, photos, or documents in Drive.
• The App can only see its own dedicated, hidden folder. Google provisions a private "Application Data" folder that is scoped exclusively to Folia Pro. The App reads and writes only inside that folder, and only its own files within it.
• This is how Google's app-data scope is designed to work for every app that uses it — the folder is invisible to you in the normal Drive UI, invisible to other apps, and invisible to anyone you share files with.
• The single file Folia Pro creates there is the folia-pro-data.json file described above.

You can verify the scope at any time on your Google Account permissions page — it will list our access as "See, create, and delete its own configuration data in your Google Drive" rather than full Drive access.

6. Data Sharing and Third Parties

We do not sell, rent, trade, or otherwise transfer your personal information to outside parties except as described below:

• Google — all users authenticate via Google Sign-In and store their financial data in Google Drive's app-data folder. Google processes this under their Privacy Policy. We only receive your name, email address, and an OAuth access token from Google. We do not receive or store your Google account password.
• Supabase — handles authentication and stores your account record (name and email) under their own Privacy Policy. Your financial data is never sent to Supabase.
• Vercel — our hosting provider. They serve the App under their own Privacy Policy.
• Legal obligations — we may disclose your information if required by law, court order, or governmental authority.

Beyond the above, we share no data with any third party.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: You can view all your data within the App at any time.
• Correction: You can edit any data you have entered.
• Deletion: You can permanently delete all your data at any time via Settings → Reset Data → Hard Reset. This action is irreversible and removes the data file from your Google Drive AppData folder. To also remove your account record, contact us at hello@jorzier.com.
• Portability: You can download a full JSON backup of your data at any time via Settings → About → Download Backup. CSV and XLSX exports are also available from within the App.
• Account deletion: To delete your account entirely, use the Reset feature in the App or contact us directly. You can also revoke the App's Google Drive access via your Google Account permissions.

If you are located in the European Economic Area (EEA), you may have additional rights under the GDPR including the right to lodge a complaint with your local supervisory authority.

8. Data Retention

We retain your data for as long as your account is active. If you delete your data or account, it is removed from our active systems immediately. Residual copies may remain in backups for up to 30 days before being permanently purged.

9. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify users.

11. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

hello@jorzier.com
jorzier.com