Privacy Policy
infolio respects your privacy and your control over data. infolio uses a local-first architecture whenever possible, keeping content on your device by default. When you choose to enable sync, we process the minimum information required to provide account, sync and service support.
1. Scope
This policy applies to your use of the infolio website, desktop apps, mobile apps and related services. If you use third-party object storage, third-party sign-in or third-party payment services, their own rules also apply.
2. Information We May Collect
To provide account login, sync configuration and service support, we may process account identifiers, nickname, avatar, email, purchase and legacy subscription status, basic device information, error logs and the sync settings you choose to enter.
Your documents, whiteboards, spreadsheets, albums, calendars, password vaults, and Mini Page content are stored on your device by default.
3. How We Use Information
We use information to authenticate accounts, sync data, restore purchases, troubleshoot issues, improve compatibility, respond to feedback and present service-related status. We do not sell your content or use it for advertising profiles without your explicit authorization.
4. Storage and Sync
infolio first writes your content to a local database. When sync is enabled and your device is online, changes are synced to your chosen storage service, such as iCloud, S3, OSS, R2 or WebDAV. The legacy infolio Cloud Space is reserved for accounts with a history of using that service. You can request deletion of any synced content still stored there.
Synced page content and attachments are encrypted by the app before upload. For self-configured third-party storage, availability, stability and compliance are governed by the corresponding provider.
5. Sharing and Disclosure
Except where required by law, necessary to perform the contract, or necessary to protect major lawful rights and interests, we do not share personal information with unrelated third parties. When you use third-party payment, storage or sign-in services, necessary data may be transmitted according to their API requirements.
6. Security
We use reasonable technical and organizational measures to protect account systems, transport links and server-side information, including access control, authentication, encrypted transmission and auditing. No internet environment is absolutely secure, so please also protect your device, credentials and local keys.
7. Your Rights
You may view or update nickname, avatar, sync settings and some account information in the app. You may also delete local content, switch sync sources, or close and delete your account where supported. If you have questions, contact the infolio team through in-app feedback or public website channels.
Request deletion of your infolio account8. Android Health Connect
On Android, when you enable the health connector and grant Health Connect read permissions, infolio can access the data types you allow: steps, distance, active calories burned, exercise sessions, heart rate, sleep records, and weight.
The health connector temporarily reads records on your device and passes the results to Mini Pages you authorize so they can display and summarize your activity, exercise, sleep, heart rate, and weight.
If you save query results in infolio, those copies are handled as described in Storage and Sync, and you can delete them in infolio. You can revoke permissions in Health Connect settings to stop further reads and manage the original records there.
9. Google APIs and User Data
When you choose Google sign-in, Google Drive app-specific sync, Google Search Console, or the Google Analytics 4 connector, infolio accesses only the data covered by your consent. This can include basic account information, this app's own Drive data, search statistics for selected sites, and metadata and reports for selected GA4 accounts and properties, including active-user metrics for Firebase-linked properties.
We use this data only for the sign-in, app-specific sync, and analytics queries and displays you request. The GA4 and Search Console connectors do not modify properties, events, or website data at Google. Drive app-specific sync accesses this app's dedicated data area and does not read your other Drive files.
Connectors request data directly from your device to Google. GA4 connector credentials are managed by the Google SDK or secure local storage, and its reports are not automatically uploaded to infolio servers. Necessary Google sign-in identity information may be verified by infolio's account service. If you choose to save query results or sync related content, those copies follow this policy's Storage and Sync rules.
We transfer relevant data only as needed for features you request, to Google or to storage services or tools you explicitly choose. We do not sell Google user data, use it for advertising profiles, provide it to data brokers, or use it to train general-purpose AI or machine-learning models. Human access is limited to support you explicitly authorize or necessary security, compliance, and other uses permitted by Google's policy.
You can revoke infolio access in your Google Account's third-party connections settings to stop future access. You can also delete connections and saved query results in infolio. Deleting a connection does not delete original Google data or automatically remove copies you separately saved in pages or sync storage; manage those copies under this policy's Rights and Storage and Sync rules.
infolio follows the Google API Services User Data Policy and its Limited Use requirements when using or transferring data obtained from Google APIs.
Read the Google API Services User Data Policy10. Policy Updates
This policy may be updated as the product, laws or service model evolves. Updated versions will be shown on the website or in the app, with the update date indicating the effective version. When changes materially affect your rights, we will try to notify you in a prominent way.