Privacy Policy

Folderus is run by LJJKS ApS, a Danish company operating under the brand name Folderus. LJJKS ApS is the data controller for the personal information described in this policy. In this policy, "Folderus", "we" and "us" mean LJJKS ApS.

This policy covers the Folderus app for iPhone and Android and the website at folderus.com. Our Terms of Service explain the rules for using Folderus.

Information you give us

• Photos and videos. Anything you shoot with the Folderus camera or add from your camera roll is uploaded to the folder you choose, together with a small preview made on your phone. We also store basic details about each file, such as its size, type, dimensions, length and when it was taken.
• Folder information. Folder names, folder settings, which folders you belong to, the colour you pick for each folder, and whether you have turned on a private copy.
• Display name. If you set one, it is shown to the other members of your folders. Until you do, you appear as a numbered guest, such as "Guest 2".
• Account information. An account is optional. If you create one with your email address, we store that address and a password. Passwords are stored only as a secure hash by our sign in provider, and we never see them. If you choose Sign in with Apple or Google instead, we receive your email address from that service, and your name if the service shares it. Apple lets you hide your email address, in which case we receive an address that forwards to yours.
• Email invitations. If you invite someone to a folder by email, we store the address you entered so the invitation can reach their account.
• Messages to us. If you email us or use the contact form on this website, we keep your name, email address and message so we can answer you.

Information created automatically

• Guest identity. The first time you open the app, we create an anonymous identity for you: a random identifier with no name or email attached. It lets you join folders without signing up. If you later create an account, the same identifier is kept.
• Encryption keys. Your phone creates an encryption key pair. The public half is stored on our servers so other members can share encrypted folders with you. The private half never leaves your phone.
• Storage and plan. How much storage your uploads and private copies use, your plan, and the status of your subscription, such as which store it was bought from and when it renews or ends.
• Product events. A small set of events tied to your identifier: creating, joining or leaving a folder, taking your first photo in a folder, turning a private copy on or off, downloading, reaching your storage limit, opening a join link, seeing or closing the upgrade screen, changing plan, and creating or deleting an account. Folderus counts these itself, to understand whether the app works and to improve it. They are not shared with analytics or advertising companies.
• Join attempts. When someone tries a join code, we record the IP address, the code tried, the identity that tried it and the result, so we can stop people guessing codes. These records are deleted after 2 days.
• Server logs. Our hosting providers keep technical logs of requests, such as IP address, time and the request made, for security and troubleshooting.
• Crash reports. Crash reporting is switched off in the current version of the app. When it is on, the app may send a crash report if it crashes or hits a serious error, containing the error, the app version, and your phone model and operating system version. Before a report leaves your phone, we remove links, invite codes, keys and file addresses from it. Crash reports do not include your photos, videos, name or email.
• App updates. When the app checks for an update, it sends our update provider the app version, a random identifier for your install and, if the app crashed since the last check, the error message of that crash.

Where photos and videos were taken

Photos and videos can include where they were taken, stored inside the file. When they do, every member of the folder can see it. In a readable folder it is stored with the file. In an encrypted folder it stays inside the encrypted file, so Folderus cannot see it.

For photos and videos you add from your camera roll, you can turn off location in your phone's camera settings before you take them.

What we do not collect

• We do not read your contacts.
• We do not use advertising identifiers, and there are no advertising or third party analytics tools in the app or on this website.
• We do not receive your payment card details. Purchases are handled by Apple or Google.
• This website does not use cookies.

The app asks for each permission when it is needed. You can change any of them in your phone's settings.

• To run the service: store your photos and videos, show them to the members of your folders, make private copies, and keep your phones in sync.
• To manage storage: measure how much you use and apply your plan's limits.
• To keep Folderus safe: prevent abuse such as guessing join codes, protect accounts, and handle reports of illegal or abusive content.
• To fix and improve the app: understand crashes and which features work.
• To talk to you: send sign in codes and answer messages you send us.
• To meet legal obligations.

We do not sell or rent your personal information, we do not use it for advertising, and we do not share it with data brokers. Folderus does not track you across apps or websites owned by other companies.

Where the law requires a legal basis, for example in the EEA and the UK, we rely on performing our contract with you to provide the app, our legitimate interest in keeping it secure and working, your consent for the phone permissions you grant, and our legal obligations.

• Members of your folders. Everything you add to a folder, and your display name, can be seen by every member of that folder. Folders are never public: nobody outside a folder can see what is in it. Anyone with a folder's QR code, join code or link can join it until it is full, so share those only with people you want in the folder.
• Private copies. Members can turn on a private copy of a shared folder. A photo or video is copied into their private copy one hour after it is added. If you delete it within that hour, it never reaches anyone's copy. After that, a copy belongs to the member who holds it, and deleting the original does not remove their copy.
• Private folders. A private folder has only one member, you. Nobody else can join it.
• Folderus. Photos and videos in readable folders are stored as they are, so they can come back on any phone. This means Folderus can technically access them. We cannot see inside encrypted folders.
• Service providers that host and run Folderus for us, listed in the next section.
• For legal reasons. We may disclose information if the law requires it, or to protect the rights, safety and property of our users, the public or Folderus. We cannot disclose the contents of encrypted folders, because we cannot read them.
• Business transfers. If Folderus is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal, under this policy's protections.

We use these companies to run Folderus. They process information only on our behalf and under their own privacy and security commitments. When you use the App Store, Google Play, or Sign in with Apple or Google, Apple and Google also act under their own privacy policies.

Every folder is either readable or encrypted. You choose when you make the folder, and it can never be changed afterwards.

• Encrypted folders are end to end encrypted. Photos and videos are encrypted on your phone before upload, and only members' phones hold the key to open them. Folderus and our providers hold only scrambled data. Because we never have the key, we cannot recover an encrypted folder if every member who held its key loses it. What is encrypted is the photos and videos themselves. Folder names, display names, and basic details about each file, such as when it was taken, its size and its dimensions, are not encrypted.
• Joining an encrypted folder. A link or QR code carries the folder's key inside it, in a part of the link that never reaches our servers. A typed join code is too short to carry a key, so a member's phone sends the key to the newcomer using the public key our server gives it for them. For that step, you rely on our server to introduce the right person.
• Readable folders store photos and videos as they are, so they come back on any phone when you sign in. They are protected by access controls, so only folder members can reach them, and by our providers' encryption at rest.
• All traffic between the app and our servers is encrypted in transit (HTTPS).
• On your phone, sign in details and encryption keys are kept in the system's secure storage, and decrypted photos are held in a cache the system can clear.

No system is perfectly secure, but we build Folderus to collect as little as it needs and to protect what it holds.

• Photos and videos stay in a folder until the person who added them deletes them or leaves the folder. Folders do not expire.
• Trash. Deleted items, and your uploads when you leave a folder, stay in your trash for 30 days so you can restore or download them. After that they are permanently deleted, except copies other members already hold in a private copy.
• Empty folders with no members and no items are deleted 31 days after their last activity.
• Unused guest identities are deleted after 30 days if they never joined a folder or added anything.
• Join attempt records are deleted after 2 days.
• Accounts are kept until you delete them. See Deleting your account and data.
• Subscription records are deleted with your account, here and at RevenueCat. Apple and Google keep their own records of your purchases under their policies.
• Product events are kept to measure how the app is used over time. When you delete your account, they are disconnected from you.
• Messages to us are kept as long as we need them to answer you and follow up.
• Crash reports and server logs are kept for a limited period under our providers' retention settings.

In the app

Open Settings and tap Delete account. If you never created an account, the same button reads Reset this guest identity. Either way, this:

• removes you from every folder you are in,
• removes your uploads from those folders for everyone and permanently deletes them, including anything in your trash, within about a day,
• deletes your private copies,
• deletes your account, email address, display name, encryption keys, storage and subscription records, and your customer record at RevenueCat,
• wipes the keys and decrypted photos stored on that phone.

Photos and videos that other members already copied into their own private copy (see Who can see your information) stay with them and are shown as coming from a "Former member", without your name. If you want your photos, download them to your camera roll before you delete your account, because they cannot be restored afterwards.

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel it in your store account settings.

If you used Sign in with Apple

Apple shares your name with an app only the first time you sign in. So that your name is not lost if you sign up again later with the same Apple ID, we keep it after your account is deleted, linked to the identifier Apple gives us for your Apple ID and not to your Folderus account. If you want it removed, email support@folderus.com and we will delete it.

Without the app

If you no longer have the app, email support@folderus.com from the address on your account, with the subject "Folderus account deletion". We will verify the request, delete your account and data as described above within 30 days, and email you when it is done. The same steps are on our account deletion page.

A guest identity has no email attached, so we cannot find it from an email. It can only be reset from the app. If you uninstall the app without resetting it, a guest identity that never joined a folder or added anything is deleted automatically after 30 days. Photos and videos you added as a guest stay in their folders for the other members.

Deleting some data but keeping your account

You can delete any photo or video you added, at any time. You can leave any folder, which removes your uploads from it for everyone and moves them to your trash for 30 days. You can delete your private copy of a folder without affecting the shared folder.

Depending on where you live, including under the GDPR in the EEA and the UK and the CCPA in California, you may have the right to:

• see the personal information we hold about you and get a copy of it,
• correct information that is wrong,
• have your information deleted,
• object to or restrict some processing,
• take your information with you,
• withdraw consent, for example by turning off a permission.

You can download your photos and videos to your camera roll in the app at any time. For anything else, email support@folderus.com. We will answer within one month and will not treat you differently for using your rights.

If you live in the EEA or the UK, you can also complain to your local data protection authority. In Denmark, that is Datatilsynet.

We do not sell or share personal information for cross-context behavioural advertising, as those terms are defined under California law.

Folderus is not meant for children under 13, or under the minimum age required by law where they live, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@folderus.com and we will delete it.

Account and folder information is stored with Supabase in the EU, in Ireland. Photo and video files are stored with Cloudflare R2 in Europe. Cloudflare's European location is a preference rather than a strict EU-only setting, so files may also be processed in other countries.

Some of our other providers, such as those for crash reports, app updates and subscriptions, may process information outside the EEA, including in the United States. Where information leaves the EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

We may update this policy as Folderus changes. We will post the new version on this page and update the date at the top. If a change is significant, we will also tell you in the app before it takes effect.

Questions, requests or complaints about privacy go to one place: