In short: TrueFold stores your documents on your device and in your own private iCloud. Sensitive values are end-to-end encrypted, and the keys never leave your devices — so no one else, including us, can read your vault. There is no account to create, and we collect no personal data, analytics, or tracking about you.
1. Who we are
TrueFold (“the app”, “we”, “us”) is an iOS application. This policy explains how the app handles information. You can reach us about privacy at support@truefold.app.
2. The short version of how TrueFold works
TrueFold is a local-first, accountless app. The documents and details you add are stored on your device and synchronised only through your own Apple Account and private iCloud storage. We do not operate a server that holds your data, and we have no ability to sign in to your vault or read its contents.
3. Information TrueFold handles, and where it lives
The information in your vault is whatever you choose to add — for example identity documents, bank details, payment cards, and travel papers. Here is where each kind of data lives and whether we can access it:
| Data | Where it is stored | Leaves your device? | Can we access it? |
|---|---|---|---|
| Record details (titles, types, non-sensitive fields) | On your device and your private iCloud | Only to your own iCloud | No |
| Sensitive values (ID numbers, card numbers, CVV, private notes) | Same, encrypted | Only as ciphertext | No — we have no key |
| Document scans and images | Encrypted files on device and your iCloud | Only as ciphertext | No — we have no key |
| Encryption keys | Your iCloud Keychain | Only within your Apple devices | No |
| Diagnostic logs | On your device only | No | No |
4. What we collect
We collect no personal data about you. TrueFold contains no analytics, no advertising, no tracking, and no third-party software-development kits that transmit data off your device. We do not create user accounts, and we do not receive your name, email, contacts, location, device identifiers, or usage data.
5. How your data is protected
- Sensitive values and document scans are encrypted with AES-GCM on your device before they are stored or synced. iCloud only ever carries the resulting ciphertext.
- The encryption keys are held in your iCloud Keychain and are shared between your own devices through Apple’s end-to-end encrypted Keychain. The keys never reach us.
- Access to the app is protected by your device’s Face ID, Touch ID, or passcode.
Because the keys are held only on your devices, a consequence worth stating plainly is that if you lose access to your devices and your iCloud Keychain, your encrypted values cannot be recovered by us or by anyone.
6. Apple and iCloud
TrueFold relies on Apple’s iCloud and CloudKit to store and synchronise your vault within your own Apple Account. Apple provides this infrastructure under Apple’s Privacy Policy and iCloud terms. We never see your data pass through this service in a form we can read.
7. Your rights
Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the California CCPA/CPRA — including rights to access, correct, export, and delete your personal data, and to be free from sale of your data. Because we hold none of your data, these rights are exercised directly in the app, and there is no company-held copy for us to disclose or delete:
- Access & portability: use the app’s Export feature to obtain a copy of your vault.
- Deletion: use “Delete All Data” in the app’s settings to erase your vault, its attachments, and its synced copy; deleting the app also removes its local data.
- Correction: edit any record directly.
- No sale or sharing: we never sell or share your personal data, because we do not collect it.
If you have a question about your rights, contact us at support@truefold.app.
8. Children
TrueFold is a personal utility and is not directed to children, and it collects no data from anyone online. You may create a holder profile that describes a family member, including a child, but that information is entered by you and stays on your device and in your own iCloud under the same protections as the rest of your vault.
9. Data retention
Your data remains in your vault for as long as you keep it. You control retention entirely: remove individual records at any time, or erase everything with “Delete All Data”. We retain nothing because we store nothing.
10. Changes to this policy
If we change how the app handles data — for example if a future feature introduces any data collection — we will update this policy and its “last updated” date, and reflect the change in the app’s App Store privacy details before that version ships.
11. Contact
Questions about this policy or your privacy? Email support@truefold.app.
This policy describes the current version of TrueFold and is provided for transparency; it is not legal advice.