Privacy policy

What we collect

Account: if you sign in with Google, we receive your name, email address and a user ID. We never see your Google password.

Portfolio: what you type into Folio — grades, test scores, activities, awards, essays, your university list and deadlines.

Payments: if you subscribe, Stripe processes your card. We only store a Stripe customer and subscription ID and your plan status — never card numbers.

Analytics: only if you allow it — anonymous page views and product events (for example “opened the assessment”). Links that contain private IDs are shortened before sending.

Why we use it

To save your portfolio and sync it between your devices, to calculate your assessment and admission odds, to generate AI reviews you ask for, to run school workspaces you join, and to manage subscriptions.

We do not sell your data, show ads, or use your portfolio for marketing.

Who processes it

Google Firebase (sign-in and database), Vercel (hosting), Stripe (payments), Google Analytics (only with your consent).

AI providers (Groq, OpenRouter, Google Gemini) receive the part of your portfolio needed to answer a specific AI request. Only the current portfolio is sent — never your email or payment details.

Who can see your portfolio

Only you. A school or counselor sees it only after you accept their invitation, and loses access the moment you disconnect. A public link shows only the sections you choose and can be switched off at any time.

Cookies and local storage

Necessary: sign-in session, your language (folio_lang) and your cookie choice (folio_consent). Your portfolio is also cached in your browser so it works offline.

Optional: Google Analytics cookies, set only after you click “Allow analytics”. You can change your choice in Settings at any time.

Your rights

In Settings you can download your whole portfolio as a file and delete your portfolio and account. You can also write to us to access, correct or delete your data.

If you are under 16, please use Folio together with a parent or guardian.

How long we keep data

As long as your account exists. When you delete it, your portfolio, chat history and public link are removed immediately; billing records required by law are kept by Stripe.