Privacy Policy

Effective date: 2026-07-20 · Last updated: 2026-07-20

This Privacy Policy describes how Foglio ("we", "our", or "us") collects, uses, and shares information when you use the Foglio mobile application (the "App"). This policy is written to comply with the Google Play User Data policy, Data safety section, and applicable laws including the EU GDPR and the California CCPA/CPRA.

By downloading, installing, or using the App, you agree to the terms of this Privacy Policy.

1. Summary

Foglio is designed to be offline-first. All documents you scan, convert, or edit are processed locally on your device. We do not upload, transmit, or store your documents on any server.

The only categories of data that leave your device are:

Foglio itself does not operate any analytics, telemetry, or user-tracking infrastructure.

2. Data We Collect

2.1 Data processed only on your device

The following are stored locally on your device and never transmitted to us:

CategoryPurpose
Camera imagesDocument scanning, edge detection, filters
Files you import (PDF / DOCX / XLSX / PPTX / Markdown / images)Conversion, editing, OCR
OCR text outputSearch and export
Document metadata (titles, tags, folder structure)Library organization
App preferences (theme, language, accent color)User experience
Signature images you drawReuse across signing sessions
VIP entitlement stateUnlock premium features

We do not have access to any of the above.

2.2 Data collected by third-party services

Google AdMob — if you use the free version of the App, AdMob may collect and process:

AdMob's use of this data is governed by Google's Privacy Policy.

Google Play Services (Billing) — when you make a purchase, Google Play processes your Google account identifier, purchase token, and payment method. We receive only a purchase token used to unlock features. We do not receive your payment card, address, or Google account email.

Google Play (Crash reporting) — Google Play automatically collects crash stack traces and ANR (Application Not Responding) reports for apps installed from the Play Store. You can opt out via your device settings (Settings → Google → Usage & diagnostics).

Google ML Kit — text recognition (OCR) runs entirely on-device. Some language recognizers may download model files from Google servers on first use. No document contents are transmitted.

2.3 Data we do NOT collect

We do not collect, and Foglio has no code that transmits:

3. Permissions We Request

PermissionReasonRequired?
CameraCapture pages for scanningOnly when you use Scan
Read media imagesImport photos as sourcesOnly when you tap Import
InternetLoad ads (free tier), download OCR modelsYes
Access network stateDetect connectivity for ad loadingYes
Advertising ID (Android 13+)Personalized advertising via AdMobOnly in the free tier

You may revoke any runtime permission at any time via Settings → Apps → Foglio → Permissions.

4. How We Use Information

We do not "use" your document data because we never receive it. Data collected by AdMob is used to select and measure advertising. Data collected by Google Play Billing is used to fulfill your purchase.

Specifically:

We do not sell your personal information. We do not share it with data brokers.

5. Data Sharing

We share data only with the following categories of third parties, and only for the purposes stated above:

RecipientDataPurpose
Google AdMobAdvertising ID, coarse device info, IPAdvertising
Google Play BillingPurchase token, Google account (by Google, not by us)Payments
Google Play ConsoleCrash and ANR reportsApp stability

We do not share your data with any other third party. We do not transfer data to our own servers because we do not operate any.

6. Data Retention and Deletion

Documents and other data on your device are retained until you delete them within the App or uninstall the App. Uninstalling removes all local data.

AdMob data is retained by Google according to Google's retention policy.

Purchase records are retained by Google Play for legal and accounting reasons.

Deletion requests: because we do not store personal data on our servers, we cannot delete anything on our side. To delete all data associated with Foglio, uninstall the App. To request deletion of AdMob-collected data, use Google's My Ad Center.

7. Children's Privacy

Foglio is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us and we will investigate.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

To exercise these rights against Google (as a joint controller for advertising data), see Google's Privacy & Terms. To exercise any right against us, email the address in Section 12.

California residents (CCPA/CPRA): You have the right to know, to delete, to correct, and to opt out of "sharing" for cross-context behavioral advertising. Foglio does not sell personal information.

EU/UK residents (GDPR/UK GDPR): The legal bases we rely on are consent (advertising) and contract (paid features). You may lodge a complaint with your local data protection authority.

9. Security

Documents are stored in your device's app-private storage, which is sandboxed by the operating system. Encrypted PDFs use industry-standard AES-256 (Android via PDFBox) or AES-128 (iOS via PDFKit).

We do not transmit your documents, so there is no transport-layer risk from Foglio. Third-party SDKs (AdMob, Google Play Billing) use TLS 1.2+ for their own network calls.

No security system is perfect. If you become aware of a vulnerability, report it to the address in Section 12.

10. International Data Transfers

We do not transfer your data internationally because we do not receive it. Google (AdMob, Play Billing) may transfer data to the United States and other countries where its infrastructure operates, under the safeguards described in Google's Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top and, for material changes, present a notice inside the App on next launch. Continued use of the App after a change constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or your data, contact:

For AdMob-related requests, use Google's My Ad Center. For Google Play Billing questions, contact Google Play Support.