Folio Privacy Policy

2.1 Vault Encryption (AES-256-GCM)

Your pages, text blocks, databases, images, and file attachments are stored locally inside a vault encrypted using military-grade AES-256-GCM. No one except you (not even the Folio development team) holds the keys to decrypt your vault.

2.2 Biometric Unlock and Passkeys

Folio features native integration with Windows Hello, FaceID, TouchID, and OS-level Passkeys to unlock your vault. Biometric credentials are managed 100% by your OS and are never read, stored, or sent to external servers.

2.3 Voice Notes and Offline Transcription (Whisper)

Audio recording and transcription-to-text features powered by Whisper.cpp run entirely offline on your local CPU/GPU. Your voice notes and their transcripts never leave your computer.

3.1 EU AI Act Compliance (Regulation EU 2024/1689)

Folio strictly complies with the transparency obligations mandated by <strong>Article 50 of the EU AI Act (Regulation EU 2024/1689)</strong> for limited-risk AI systems:

• Opt-In by Default: The AI Assistant (Quill) is completely disabled by default (aiEnabled = false). Activating it requires explicit user consent acknowledging the use of AI systems.
• UI Transparency: Interfaces involving AI explicitly display the «AI Assistant» label and visual indicator badges when embedding context via @ mentions.
• Content Tagging (aiGenerated): Content blocks generated by Quill within your vault carry the aiGenerated: true metadata flag and a subtle visual indicator in the editor.
• Strict Ban on Biometrics & Emotion Analysis: Folio does NOT perform emotion recognition, affective tone analysis, or biometric voiceprint identification. Acoustic traits in meeting notes are used locally solely for basic speaker turn separation (Speaker 1, Speaker 2).

3.2 On-Device Local Models (Ollama, LM Studio & Gemini Nano)

When using local providers (Ollama at http://127.0.0.1:11434, LM Studio at http://127.0.0.1:1234, or Gemini Nano on supported Android devices), language processing executes 100% on your hardware. Zero text, prompts, or page contexts leave your device.

3.3 Quill Cloud & Bring Your Own Key (BYOK)

When using Quill Cloud (via Ink credits) or custom API keys (BYOK OpenAI/Gemini), selected prompt text and thread history are transmitted over encrypted HTTPS to inference endpoints. These requests are processed ephemerally solely to return completions and immediately discarded; they are never stored or used for AI model training. The app enforces explicit <code>AiSafetyPolicy</code> confirmation before connecting to any remote non-localhost endpoint.

3.4 Complete Control & Disabling AI

You can turn off Quill at any time in <strong>Settings → Quill</strong> by unchecking 'Enable Quill'. This instantly disables all chat, autocompletion, and context features. For technical details, refer to the in-repo compliance document <code>docs/AI_COMPLIANCE.md</code>.

4.1 Local P2P Sync (WiFi)

Folio allows notebooks to sync directly between your devices on the same WiFi network using TCP sockets and UDP multicast discovery. P2P sync is end-to-end encrypted and bypasses cloud servers completely.

4.2 Automated Backups (NAS, WebDAV & Firebase)

You can schedule automatic encrypted backups to local network shares (SMB/UNC), custom WebDAV servers, or Folio Cloud storage on Firebase. Cloud backups are fully encrypted before uploading.

4.3 Encrypted Live Collaboration

Folio Cloud live collaboration rooms feature end-to-end (E2E) encryption for messages and media shared between room participants.

4.4 Web Publishing

When using the 'Publish to Web' feature, only the specific page you explicitly select is exported as a clean public HTML document. You can unpublish or remove it at any time.