This notice is provided to you under Section 5 of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025. It describes the personal data we process, the purposes of processing, how you may exercise your rights, and how you may complain to the Data Protection Board of India. It is available in English. You may request it in any language listed in the Eighth Schedule to the Constitution of India by writing to the contact below.
Folia ("the App", "we", "us", "our") is a personal finance management application operated as an independent project by Jorzier (jorzier.com), accessible at folia.jorzier.com. For the purposes of the DPDP Act, Jorzier is the Data Fiduciary that determines the purpose and means of processing your personal data, and you are the Data Principal.
Data-protection / grievance contact: support@jorzier.com
General contact: hello@jorzier.com
This is the contact who answers questions about how your personal data is processed and handles grievances and rights requests (DPDP Rules 2025, Rule 9).
| Personal data | Purpose | Where it is stored |
|---|---|---|
| Name and email address (from Google Sign-In or email signup) | To create and authenticate your account and contact you about your account | Supabase (authentication) |
| Financial data you enter — accounts, transactions, categories, savings goals, reminders, templates, settings | To provide the core service: storing and displaying your personal finances | Your own Google Drive "Application Data" folder |
| Google OAuth tokens | To keep you signed in and to read/write your single data file in your Drive | Your browser session |
| A localStorage cache of your financial data | To load the app quickly | Your device only — never sent to us |
| If you enable the AI assistant: your messages plus the financial context/files needed to answer them | To provide AI assistance — only with your separate, specific consent (see Section 7) | Sent to Google Gemini for processing |
| IP address, browser type (by our infrastructure providers) | Security and performance only — we do not analyse this at an individual level | Vercel, Supabase logs |
We limit processing to what is necessary for these purposes (data minimisation). We do not collect payment card numbers or bank credentials, we run no individual behavioural analytics, and we use no cookies for advertising or tracking.
We process your personal data on the basis of your consent, which you give by a clear affirmative action when you create your account (you confirm you are 18+ and agree to this notice). Your consent is limited to the purposes described above. Enabling the AI assistant requires a separate, specific consent.
You can withdraw your consent at any time, as easily as you gave it — by deleting your account (Settings → About → Delete My Account), turning off the AI assistant, or revoking Folia's access from your Google Account permissions. Withdrawing consent does not affect the lawfulness of processing before withdrawal. When you withdraw consent, we cease processing and erase your data unless retention is required by law.
Your financial data — Google Drive AppData storage: All of your financial data is stored as a single JSON file (folia-pro-data.json) in your personal Google Drive AppData folder. This folder is private to you and is not visible to other apps or to people you share files with. It is protected by Google's encryption at rest and in transit. We cannot access the contents of your Google Drive. A copy is cached in your browser's localStorage for fast reads and never leaves your device.
Your account — Supabase authentication: We use Supabase only for authentication and to hold your account record (name and email). Supabase provides AES-256 encryption at rest, TLS 1.2+ in transit, and Row Level Security so each user can access only their own record. The App is served over HTTPS via Vercel.
We apply reasonable security safeguards to prevent a personal data breach (DPDP Rules 2025, Rule 6), including encryption, access controls, and monitoring of our systems. Despite these measures, no system is 100% secure, and you use the App at your own risk.
If a personal data breach occurs, we will notify you and the Data Protection Board of India without undue delay, in the manner required by the DPDP Act (§8(6)) and Rule 7.
Folia uses Google's narrow drive.appdata permission scope:
folia-pro-data.json file described above.You can verify this on your Google Account permissions page.
We do not sell, rent, or trade your personal data. We engage the following Data Processors under contract, strictly to run the service:
The AI assistant is off by default. If you turn it on, you give a separate, specific consent, and your messages — along with the financial context and any files needed to answer them — are sent to Google Gemini for processing, using your own Gemini API key (stored only on your device). Google processes this data under its own terms. You can turn the assistant off at any time, which stops any further data being sent.
Our processors (Google, Supabase, Vercel) may store and process data on servers located outside India. Such transfers are permitted under Section 16 of the DPDP Act, subject to any restrictions the Central Government may notify. We rely on these processors' security and contractual commitments to protect your data wherever it is processed.
Under the DPDP Act you have the right to:
You can manage these from Settings → Privacy in the app. If you are in the European Economic Area, you may also have rights under the GDPR.
We retain your personal data only while your account is active and the purpose is being served. When you delete your account or withdraw consent, your account record and your Drive data file are erased. Residual copies may remain in our processors' backups for a short period before being purged. We will retain data longer only where required by applicable law.
If you have any grievance about how your personal data is handled, contact our data-protection contact at support@jorzier.com. We will acknowledge and aim to resolve it within 90 days. You must give us the opportunity to address your grievance first. If you remain dissatisfied, you may lodge a complaint with the Data Protection Board of India.
Folia is intended only for individuals aged 18 or older. Under the DPDP Act, a "child" is anyone under 18. We do not knowingly process the personal data of children, and we do not carry out behavioural tracking or targeted advertising of any kind. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date and notice version above and make reasonable efforts to notify users. Continued use after changes constitutes acceptance of the updated notice.
Data protection / grievances: support@jorzier.com
General: hello@jorzier.com
jorzier.com