In short: The Truefold app stores your documents on your device and in your own private iCloud. Sensitive values are end-to-end encrypted, and the keys never leave your devices — so no one else, including us, can read your vault. There is no account to create, and the app collects no personal data, analytics, or tracking about you.
1. Who we are
Truefold (“the app”, “we”, “us”) is an iOS application. This policy explains how the app handles information. You can reach us about privacy at support@truefold.app.
2. The short version of how Truefold works
Truefold is a local-first, accountless app. The documents and details you add are stored on your device and synchronised only through your own Apple Account and private iCloud storage. We do not operate a server that holds your data, and we have no ability to sign in to your vault or read its contents.
3. Information Truefold handles, and where it lives
The information in your vault is whatever you choose to add — for example identity documents, bank details, payment cards, and travel papers. Here is where each kind of data lives and whether we can access it:
| Data | Where it is stored | Leaves your device? | Can we access it? |
|---|---|---|---|
| Record details (titles, types, non-sensitive fields) | On your device and your private iCloud | Only to your own iCloud | No |
| Sensitive values (ID numbers, card numbers, CVV, private notes) | Same, encrypted | Only as ciphertext | No — we have no key |
| Document scans and images | Encrypted files on device and your iCloud | Only as ciphertext | No — we have no key |
| Encryption keys | Your iCloud Keychain | Only within your Apple devices | No |
| Diagnostic logs | On your device only | No | No |
4. What we collect
The Truefold app collects no personal data about you. It contains no analytics, no advertising, no tracking, and no third-party software-development kits that transmit data off your device. We do not create user accounts, and we do not receive your name, email, contacts, location, device identifiers, or app usage data.
Public website
Truefold’s public website uses Cloudflare Web Analytics to measure aggregate visits and page performance. It does not use cookies, persistent visitor identifiers, advertising profiles, or cross-site tracking. Website activity is not connected to the Truefold app or anything stored in your vault.
5. How your data is protected
- Sensitive values and document scans are encrypted with AES-GCM on your device before they are stored or synced. iCloud only ever carries the resulting ciphertext.
- The encryption keys are held in your iCloud Keychain and are shared between your own devices through Apple’s end-to-end encrypted Keychain. The keys never reach us.
- Access to the app is protected by your device’s Face ID, Touch ID, or passcode.
Because the keys are held only on your devices, a consequence worth stating plainly is that if you lose access to your devices and your iCloud Keychain, your encrypted values cannot be recovered by us or by anyone.
6. Apple and iCloud
Truefold relies on Apple’s iCloud and CloudKit to store and synchronise your vault within your own Apple Account. Apple provides this infrastructure under Apple’s Privacy Policy and iCloud terms. We never see your data pass through this service in a form we can read.
7. Your rights
Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the California CCPA/CPRA — including rights to access, correct, export, and delete your personal data, and to be free from sale of your data. Because we hold none of your data, these rights are exercised directly in the app, and there is no company-held copy for us to disclose or delete:
- Access & portability: use “Export Data” in the app’s settings to obtain a copy of your vault.
- Deletion: use “Delete All Data” in the app’s settings to erase your vault, its attachments, and its synced iCloud copy; if you use Truefold on more than one iPhone, each keeps its own local copy until you delete it there as well. Deleting the app also removes its local data.
- Correction: edit any record directly.
- No sale or sharing: we never sell or share your personal data, because we do not collect it.
If you have a question about your rights, contact us at support@truefold.app.
8. Children
Truefold is a personal utility and is not directed to children. The app collects no data from anyone. You may create a holder profile that describes a family member, including a child, but that information is entered by you and stays on your device and in your own iCloud under the same protections as the rest of your vault.
9. Data retention
Your data remains in your vault for as long as you keep it. You control retention entirely: remove individual records at any time, or erase everything with “Delete All Data”. We retain no copy of your vault because we store no copy of it.
10. Changes to this policy
If we change how the app handles data — for example if a future feature introduces any data collection — we will update this policy and its “last updated” date, and reflect the change in the app’s App Store privacy details before that version ships.
11. Contact
Questions about this policy or your privacy? Email support@truefold.app.
This policy describes the current version of Truefold and is provided for transparency; it is not legal advice.