Privacy Policy

Last updated 2026-11-12

Folio for Figma (“Folio”) is a free app for iPad and iPhone that hosts Figma’s web editor inside Apple’s WebKit browser engine. The source code is public. Folio’s native code sends no usage data to us. Websites process browsing data under their own policies. Support correspondence, website hosting and the optional website analytics are described below.

Who we are

Folio and this website are provided by Galcsik Győző Kft., a Hungarian limited liability company (“we”, “us”). We are the data controller for support correspondence and the website processing described below. On the App Store, Folio is published through the individual developer account of Gyozo Galcsik, our managing director, on our behalf.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Privacy questions go to the email address above.

Summary

• Folio’s native code sends us no usage data. The selected App Store privacy answer is “Data Not Collected”, using Apple’s open-web exemption for website traffic. This does not mean websites collect no data.
• The Folio app has no accounts, no analytics, no advertising and no crash-reporting service of its own.
• Our website, folio.design, uses Google Analytics only if you accept analytics cookies. Until you do, no analytics code loads. See Website analytics.
• Native settings, tabs and diagnostics stay in local storage unless you export them or the system includes them in a backup, as explained below.
• If you email us, we process your message to answer it, handle complaints or fix the reported problem.
• Browsing traffic goes directly to Figma, the services its pages load and other websites you open. There is no Folio proxy in between.
• Folio’s native app code has no credential form and does not read or extract your Figma password. WebKit handles sign-in pages and stores website sign-in data.

Data stored on your device

Folio keeps the following on the device, in the app’s own storage, so that the app works between launches:

• Tabs and windows: the Figma document links, tab names and pins you have open, so they can be restored on relaunch.
• Settings: input, display, memory and restoration preferences.
• Diagnostic event logs: input logging defaults to off. General lifecycle events, plus input and UI-drag events when their logging is enabled, stay in memory, bounded to 500 general events and 2,000 UI-drag events per tab. Developer Tools > Logs > Clear clears these in-memory events. Closing the tab or app also discards them.
• Native memory and recovery history: Folio saves timestamps, fixed event labels and the memory allowance available to Folio in memory-lab.json in its Application Support storage. This is not a measurement of Figma’s WebContent memory. The file retains the latest 500 events across launches, even with input logging off. Debug memory experiments can also save the latest 20 run summaries, including a random run ID, allocation type, sizes, timing, progress and status, plus an optional numeric memory-meter note of at most 64 characters. Older entries are replaced when these count limits are reached; there is no time-based expiry or separate clear-history control. Delete the app, rather than offload it, to remove this file.
• System logs: Folio writes sanitised lifecycle messages to Apple’s on-device system log. iOS and iPadOS control their retention; Folio has no control to clear them or promise a fixed retention period.
• Imported fonts: font files you add to Folio’s local font library. Folio excludes this library from system backups.
• Downloads: files you export or download from Figma. Saving or sharing keeps Folio’s copy. Delete removes it. The catalog holds up to 32 files and 128 MiB, with a 32 MiB limit per file. Older unprotected completed items may be evicted to make room. Unprotected failed or cancelled entries may also be removed. Folio excludes the catalog and its files from system backups.
• Website data: cookies, sign-in data, local storage and caches that websites create inside WebKit, as in a browser. Folio’s native app code does not read or extract credentials or cookie contents.

Folio’s diagnostic logs and reports leave out file identifiers, document titles, sign-in URLs, document text and typed input. Folio never uploads them. Copying or sharing a report is your choice.

iOS and iPadOS may include local data that Folio has not excluded in system backups, depending on your settings. Apple controls backup and restore behaviour. Copies saved to Files, Photos or another app follow that service’s storage and backup settings.

Deleting Folio from the device deletes its app storage. It does not delete files you saved elsewhere, system backups or data held by Figma. Manage those copies through the relevant system or service.

Photos, camera and microphone

When you choose Save to Photos, Folio asks only for permission to add photos. It does not request access to read your photo library. This action supports validated PNG and JPEG downloads and keeps the original in Folio’s download catalog.

Web pages may offer camera or microphone capture when you choose to take a photo or record audio. The system controls permission. Any content you submit goes to the website under its policy. Folio adds no separate recording or upload service.

Emails you send us

If you write to one of our addresses (hello@, support@ or legal@foliodesign.app), we receive your email address, your name if your email shows it, the message and anything you attach, such as a diagnostic report you chose to share. We use this only to answer you and to fix the problem you report. The legal basis is our legitimate interest in answering messages sent to us (Article 6(1)(f) GDPR), or taking steps you asked for (Article 6(1)(b) GDPR).

Ordinary support correspondence is kept while the conversation is open and deleted at the latest two years after the last message. Where statutory consumer complaint rules apply, complaints and copies of our substantive replies are kept for three years under section 17/A(7) of Hungarian Act CLV of 1997. That separate retention is a legal obligation under Article 6(1)(c) GDPR. We may provide these records to the competent authority as required by law. Folio is distributed free of charge on a non-trader basis; other correspondence follows the ordinary retention above. We never use correspondence for marketing or sell it. The mailbox provider below processes it for us.

Email is optional. Without contact details we may be unable to reply. We do not use this correspondence or website connection data for automated decision-making or profiling.

Network connections

Folio connects over HTTPS to figma.com, the services its pages load and other websites you open, including sign-in providers. Sign-in happens on Figma’s own pages; the process is the same as in a browser. Folio adds no servers, proxies, tracking requests or compatibility downloads.

Websites may process account details, uploaded content and browsing data under their own policies. How Figma processes your data is described in Figma’s privacy policy at figma.com/legal/privacy. Figma’s terms and policies apply to your use of Figma through Folio.

Website analytics

The Folio app collects no analytics. Our website, folio.design, uses Google Analytics 4 only if you agree.

On your first visit, a banner asks whether you allow analytics cookies. Until you accept, the analytics code is not loaded and nothing is sent to Google. Rejecting is as easy as accepting, and the website works the same either way. You can change your choice at any time with Cookie settings at the bottom of every page.

If you accept, Google Analytics measures how the website is used: the pages you view, how far you scroll, the site or campaign that brought you, clicks on outbound links such as the App Store button, file downloads, your approximate location (country and city, derived from your IP address), device and browser type, screen size, language, and when you visit. It stores a random identifier in cookies, so repeat visits can be recognised. We use this only to understand how many people visit and which pages and links help them.

• Legal basis: your consent, under Article 6(1)(a) GDPR and, for storing and reading cookies, section 155(4) of Hungarian Act C of 2003 on electronic communications.
• Settings: Google signals, advertising features and ad personalisation are turned off. We send Google no names, email addresses or other identifiers, and we don’t combine analytics with other data. Google states that Google Analytics 4 does not log or store IP addresses; it uses them only to derive approximate location.
• Retention: Google Analytics keeps event-level and user-level data for 2 months; after that, only aggregated reports remain.
• Recipient: Google Ireland Limited, as our processor under the Google Ads Data Processing Terms. Google may process the data outside the European Economic Area, including in the United States through Google LLC, which participates in the EU–US Data Privacy Framework. The standard contractual clauses in those terms also apply. Google’s own processing is described in its privacy policy.
• Withdrawing consent: choose Cookie settings and switch Analytics off, or select Reject all. The website then deletes its _ga cookies and stops loading Google Analytics. Withdrawal doesn’t affect processing that happened before it.

Cookies on folio.design:

Third parties

• Figma, Inc. operates the web editor Folio displays. Folio is not affiliated with Figma; see the legal notice.
• Apple Inc. distributes Folio through the App Store and TestFlight. If you have enabled “Share with App Developers” in your device’s settings, Apple may share crash reports and aggregate statistics with us. Those reports are prepared and anonymised by Apple under Apple’s privacy policy; Folio adds no crash-reporting code of its own.
• Google Ireland Limited provides Google Analytics on our website, only with your consent, as described in Website analytics.
• Google Workspace hosts our foliodesign.app mailbox and processes the emails you send us. Google’s published data processing terms describe processor duties and international-transfer safeguards.
• Cloudflare, Inc. hosts the Folio website. Cloudflare may process IP addresses and request metadata to deliver pages, prevent abuse and secure its network. We also view aggregate traffic statistics derived from this data, such as request counts, countries and referring sites; we see totals only, not individual visitors. Our legal basis is our legitimate interest in operating a secure website, Article 6(1)(f) GDPR. Connection data is retained only as needed for these purposes and legal obligations. Cloudflare controls its network-log retention under its privacy policy; we do not promise a fixed log-deletion period.

Google and Cloudflare may process data outside the European Economic Area. Their published terms describe safeguards such as adequacy decisions and the European Commission’s standard contractual clauses, where applicable. These clauses require protections for transferred personal data. You can read the linked terms or ask legal@foliodesign.app for information or a copy of the safeguards that apply to your data.

Children

Folio is not directed at children. Its native code sends us no usage data, regardless of age. Websites and support correspondence follow the rules described above. Using Figma requires a Figma account, and Figma’s own age requirements apply.

Your rights

Folio’s native code sends us no usage data. For personal data we process through correspondence, website operation or website analytics, you may request access, correction, erasure or restriction. Where we rely on your consent, you may withdraw it at any time, without affecting processing before the withdrawal. You may object to processing based on legitimate interests. Portability applies where the conditions in Article 20 GDPR are met, including automated processing based on consent or contract. These rights have legal limits, including required complaint retention. Write to legal@foliodesign.app; we answer within one month. Requests about data held by Figma or Apple go to those companies. Data on your device is under your control and can be removed by deleting the app.

Supervisory authority

You may contact Hungary’s data protection authority, Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), at 1055 Budapest, Falk Miksa utca 9-11., Hungary, ugyfelszolgalat@naih.hu or www.naih.hu.

Verifying this policy

Folio’s source code is public under the Apache License 2.0 at github.com/foliodesign/folio, so these statements can be checked against the code. The app’s network behaviour can also be inspected with standard tools, and the website’s cookies and requests with any browser’s developer tools.

Changes

This policy may be updated when Folio changes. The date at the top shows the current version. Material changes will be noted in the project’s changelog.

Contact

Questions about this policy: legal@foliodesign.app. Full provider details are in the legal notice.

See also the Terms of Use, the legal notice and the support page.