Privacy Policy

This policy explains what data Folirei ("Folirei", "we", "us") processes, why, and the choices you have. It applies to the Folirei apps on every platform (Android, iOS, desktop, and web) and to this website. The service is operated by Nolan Davis, a sole proprietor doing business as Folirei. If you have any questions, contact us at [email protected].

The short version

• Folirei is local-first. Without an account, your library and learning data never leave your device.
• Cloud sync and managed AI are optional and tied to a signed-in account.
• Your imported book and manga files stay on your device. We do not upload them.
• We do not sell or share your personal information, and we do not run third-party advertising.
• We do not use your content to train AI models.
• You can export your data and delete your account at any time from within the app.

Information we process

Stored only on your device

Your library, the book and manga files you import, your reading position and progress, mined vocabulary, flashcards, review history, reading statistics, highlights, and notes are stored locally on your device. With no account, none of this is sent to us. Reading, word lookup, furigana, pitch accent, mining, and spaced-repetition review all work fully offline.

Account information

If you create an account, we process your email address and authentication details through our authentication provider (Supabase). This is what lets you sign in, sync, and manage a subscription.

Data synced to your account (opt-in)

If you sign in and turn on cloud sync (a Plus and Pro feature), the following learning data is uploaded to our database so it can sync across your devices: your decks and flashcards, review history, vocabulary and word-status lists, highlights and notes (together with the reading position each is anchored to), bookshelves and collections, reading-streak data, and your profile and subscription record. Optionally, you can also sync your reading statistics (streak, time read, estimated words read). Sync is off until you enable it, and you can turn it off again at any time in Settings. Your actual book and manga files are not part of sync. They remain on your device.

AI features (lookup, explanations, translation, OCR)

Folirei's AI features can run three ways, and you choose which:

• Your own API key. Requests (the word, sentence, chapter text, or manga page image you act on) go directly from your device to the provider you configured (for example OpenAI, Anthropic, or Google) under that provider's own terms. We do not see this traffic.
• Local (Ollama). If you point Folirei at a local Ollama server, AI runs on your own machine or network and the content does not leave it.
• Managed AI (Plus and Pro). The text or image you act on is sent through our server to our AI gateway and model provider (Cloudflare) to produce the result, and a per-feature usage count is recorded to enforce your monthly allowance. We do not use your content to train models.

Translating a chapter sends that chapter's text. Using OCR on a manga page sends that page image. AI explanations send the selected word or sentence. These are sent only when you trigger the feature.

Crash and error reporting

To find and fix bugs, Folirei can send crash and error diagnostics to our error reporting provider (Sentry). Crash reporting is on by default and can be turned off at any time in Settings under Privacy ("Send crash reports"). Changes take effect on the next launch.

A crash or error report can include:

• Stack traces and error details
• Device model, operating-system version, app and build version, and build commit
• Your device IP address, language or locale, and standard device identifiers
• Your subscription tier and account identifier, if you are signed in
• The on-screen layout structure (component types, not pixels or screenshots) and low-level thread information
• A recent in-app action trail (screen names you navigated through, not their contents)
• Failed network-request metadata (the address path and status code, never request or response bodies)
• Performance and timing data

A crash or error report never includes:

• Your book text, manga images, or any reading content
• Login credentials, passwords, or authentication tokens
• Your AI provider API keys
• Screenshots of your screen

In-app feedback

If you send feedback from within the app, we receive your message and a small amount of context (platform, app version and build commit, subscription tier, language or locale, and the recent in-app action trail described above) so we can reproduce the issue. Your message is stored in our database, not in crash reporting.

Payments and subscriptions

Subscriptions on the web and desktop are handled by Stripe. Subscriptions on mobile are handled by RevenueCat together with the Apple App Store or Google Play. These providers process your payment to complete the transaction. We do not receive or store your full card number. We do keep a record of which plan you are on so we can grant the right features.

API keys you provide

Any AI provider keys or service tokens you enter (for example an OpenAI, Anthropic, Ollama endpoint, or WaniKani token) are stored in your operating system's secure credential store (keychain) on your device. They are not sent to us. They are used only to talk to the service you configured.

How we use your information

We process the data above only to:

• Provide the app and its core features
• Sync your account across your devices, when you enable sync
• Provide managed AI features and enforce your usage allowance
• Process subscriptions and grant the right plan
• Diagnose crashes and improve reliability
• Respond to your feedback and support requests
• Meet our legal obligations and prevent abuse

Where the GDPR applies, our legal bases are: performance of our contract with you (providing the app, sync, and subscriptions), your consent (optional features such as crash reporting and statistics sync, which you can withdraw at any time), and our legitimate interests (keeping the service secure and reliable).

We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law (CCPA/CPRA). We do not use automated decision-making that produces legal or similarly significant effects about you.

Who we share data with

We do not sell your data. We share it only with the service providers (subprocessors) that help us run Folirei, and only as needed to provide the feature you are using:

• Supabase: account authentication, database (cloud sync), and backend functions.
• Cloudflare: the managed-AI gateway and AI model hosting (Workers AI), for managed AI features.
• Stripe: subscription billing and payment processing on web and desktop.
• RevenueCat, Apple App Store, Google Play: in-app purchases and subscriptions on mobile.
• Sentry: crash and error reporting, unless you turn it off.
• Your chosen AI provider (for example OpenAI, Anthropic, Google, or a local Ollama server): only when you use AI features with your own key or local model. That traffic is governed by that provider's terms.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and our service.

International data transfers

Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) for these transfers.

How long we keep data

Data stored on your device stays until you delete it or uninstall the app. Synced account data is kept while your account is active. When you delete your account, we delete your account and the data synced to it. Backups and logs are cleared on a rolling basis shortly afterward. Crash reports and feedback are retained only as long as needed to diagnose and fix issues.

Your rights

Depending on where you live (including under the GDPR and California's CCPA/CPRA), you have some or all of these rights:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information
• Receive a portable copy of your data
• Withdraw consent for optional processing (such as crash reporting)
• Object to or restrict certain processing

You can exercise most of these directly in the app: export your data, turn sync or crash reporting off, and delete your account (which removes your account and its synced data). For any other request, email us at [email protected]. We will not discriminate against you for exercising your rights, and we will respond within the time limits the applicable law requires.

Children's privacy

Folirei is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at [email protected] and we will delete it.

Security

We use industry-standard measures to protect your data, including encryption in transit, access controls, and storing the secrets you enter in your device's secure credential store. No method of transmission or storage is completely secure, but we work to protect your information and to limit what we collect in the first place.

Changes to this policy

We may update this policy as the app evolves. When we make a material change, we will update the date at the top and, where appropriate, notify you in the app.

Contact

The data controller is Nolan Davis, a sole proprietor doing business as Folirei, established in California, United States, and this policy is governed by the laws of California, United States. For privacy questions or to make a request, email [email protected].