Privacy policy

Last updated 26 August 2026

The short version: what you write in Core Folio is yours, we keep it so the app can show it back to you, and we do not sell it or advertise against it. The longer version follows.

What we hold

• Your account — your email address, your first name, and when you last signed in.
• What you write — your Folios, people, notes, lists, dates and the photographs and video you add.
• How you get in — a passkey’s public half if you use Face ID, and a hashed password if you set one. We never hold a password itself, and a passkey’s private half never leaves your phone.
• Your subscription — whether you have one and until when, from Apple or Google. We never see your card.

What we do with it

• Show it back to you, and keep it safe.
• Answer your questions: when you ask Cora something, the words needed to answer are sent to our AI provider (Anthropic). They do not use it to train their models.
• Send you the emails the app needs to work — a sign-in link, a code, a note that your address changed. No marketing you did not ask for.

What we never do

We do not sell your data. We do not share it with advertisers. We do not read your Folios for any purpose other than making the app work for you.

Where it lives

On Cloudflare’s infrastructure, encrypted in transit. Photographs and video sit in private storage that only your signed-in account can reach.

What you can do about it

• Take it with you — export everything, words and photographs, from My data and account.
• Move house — change the email address the account belongs to, and everything follows.
• Delete it — deleting your account removes the account and everything in it. It cannot be undone, and we do not keep a quiet copy.
• Ask — write to us for a copy of what we hold, or to have it corrected.

How long we keep it

Until you delete it. Sign-in links and codes expire in minutes; sessions expire in 30 days, or a year if you asked to stay signed in.

Getting hold of us

Write to hello@corefolios.com.