LEGAL / PRIVACY

Privacy Policy

LAST UPDATED · 16 OCTOBER 2026

MailFolio opens email-container files locally on your Apple device. The app requires no account and includes no advertising or tracking SDK. Your messages and attachments are never sent to us. This policy explains the limited personal data that is processed by the app, this website (mailfolio.app) and support, and your rights.

Controller and contact

The controller is Eutopix Labs P.S.A. (prosta spółka akcyjna), ul. Hoża 86/410, 00-682 Warszawa, Poland (“Eutopix Labs”, “we”). Registered by the Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy KRS, under KRS 0001237465 · NIP 7011310736 · EU VAT PL7011310736 · REGON 544584646 · share capital PLN 20,000.

Privacy questions and rights requests: privacy@mailfolio.app. You may also write to the address above.

Data that stays on your device

When you choose a file, MailFolio reads its message content, headers and attachments on the device solely to show it to you and perform the action you request. A private copy may be kept in the app’s own storage so the file appears in your library; you can delete individual files or clear the library in Settings, and removing the app deletes it. HTML email is rendered with scripts, forms, remote resources and external navigation blocked, so tracking pixels cannot load. MailFolio does not send imported messages, attachments, searches or exports to Eutopix Labs or anyone else. We cannot see this data; it is under your control.

If you tap Add to Calendar or Add Contact on an invitation or contact card in a message, MailFolio passes those details to Apple’s system editor and you decide whether to save them. MailFolio does not request access to, read or upload your calendars or contacts. When you choose Preview, Share, Reply, Forward, Save or Export, Apple’s system interfaces and the destination you pick process the resulting file or draft.

Local diagnostics

MailFolio keeps Apple MetricKit performance and crash reports and fixed app failure codes locally to help investigate reliability problems. Records include the event date and app version/build, but no email contents, attachments, filenames, URLs, searches or free-form error messages; Apple-generated payloads can include system, device and app diagnostic details. The store is excluded from device backups, limited to 16 reports of at most 1 MiB, and records older than 14 days are deleted. Nothing is uploaded automatically: you can inspect, delete or deliberately export diagnostics from Settings, and an exported copy stays wherever you put it. If you send it to support, the support terms below apply. Apple’s own device-analytics settings govern anything you choose to share with Apple.

Purchases

MailFolio Pro is sold as an auto-renewing monthly or yearly subscription or a one-time lifetime purchase through Apple’s App Store. Apple processes payment, billing and refunds under its own terms and privacy policy. The app receives only the StoreKit product and entitlement status needed to unlock Pro; we never receive your payment-card details, name or Apple Account details.

Apple ad attribution

MailFolio shows no ads, does not use the advertising identifier (IDFA), never shows an App Tracking Transparency (ATT) prompt and does not track you across other companies’ apps or websites. Apple’s own measurement: if you install MailFolio after tapping an Apple Ads advertisement, Apple may count the install and attribute it to that ad using its own App Store measurement. Apple is responsible for that processing; see Apple’s privacy policy (apple.com/legal/privacy). From the first update of MailFolio released after 14 October 2026, the app sends no SKAdNetwork or AdAttributionKit conversion value in the EU/EEA, the UK or Switzerland. Earlier versions may send the coarse, aggregate value described below in every country. Outside these regions (and, in earlier versions, everywhere), the App Store version for iPhone and iPad may send a coarse, aggregate conversion value through Apple’s SKAdNetwork/AdAttributionKit: a number from 0 to 3 describing progress during the first 35 days after installation (opened the app, first successful use, viewed plans, unlocked Pro). It contains no identifier, no IDFA and nothing about you, and no ATT prompt is shown. Apple passes it on delayed and combined with other installs; Eutopix Labs receives only aggregated postbacks that identify no one. Legal basis for those regions: our legitimate interest in measuring our own advertising (Art. 6(1)(f) GDPR where applicable). The Mac version does not use these frameworks.

Optional usage sharing

From version 1.0.12, you may choose Usage analytics in Settings to help improve MailFolio. Sharing is off by default; all normal features remain available without consent. After opt-in only, the app sends finite counts of tasks, plan choices, purchase and restore outcomes, useful returns and fixed error categories. Reports include app version/build, release channel, platform, UTC day and consent-cohort week. An initial coarse summary can include existing local usage (none, few or many), onboarding completion and whether the free limit has been reached. No messages, attachments, filenames, searches, feedback text, financial amounts, transaction identifiers, contacts or persistent account/device identifiers are sent. We use these counts only to improve MailFolio and its services, never for advertising, marketing, ad attribution, product personalization or linking with other datasets to identify anyone.

Eutopix Labs uses Cloudflare Workers and D1 to receive these counts. A temporary random batch ID prevents duplicate retries; it is not a person identifier. The collector does not retain network addresses, request headers or raw bodies, and application logging is disabled. Cloudflare necessarily processes network addresses during transport and may process infrastructure/security data internationally. These requests are not guaranteed anonymous or confined entirely to the EU. We do not sell these counts, personalize advertising or track across companies. The legal basis is your consent, withdrawable in Settings.

Unsent counts expire after seven days. Daily service cleanup removes retry IDs older than eight days and aggregate counts older than 400 days; earlier states may remain in Cloudflare recovery copies for its recovery window. Turning sharing off deletes unsent counts and local sharing metadata and prevents future recording; an in-flight request may already have been accepted. Combined totals cannot be searched or erased by person because we do not hold a person identifier. Contact privacy@mailfolio.app for questions.

This website

mailfolio.app is hosted on Cloudflare. To deliver and protect the site, Cloudflare processes technical request data such as IP address, requested page, time, browser headers and security signals, and keeps short-lived request logs. The site sets no cookies of its own, uses no analytics, advertising or tracking tools and does not use browser storage; Cloudflare may set a strictly necessary security cookie if it shows a security challenge. If you arrive from an AI search service, a small script may add a campaign label naming that service (for example ChatGPT or Perplexity) to App Store links when you click them. It uses no cookies or storage, makes no network request and does not include the referring page address, your conversation or a visitor identifier; Apple controls any resulting App Store reporting, which is aggregated.

Support

If you email us, we process your email address, your message, any technical details and any files you deliberately send, to answer you. Email is hosted by Soverin. Please do not send confidential messages unless we ask for a redacted example you are allowed to share.

Purposes and legal bases

• Providing the app’s on-device features and Pro access: performance of our contract with you (Art. 6(1)(b) GDPR). This processing happens on your device.
• Answering support requests: contract or steps you request (Art. 6(1)(b)) and our legitimate interest in helping users (Art. 6(1)(f)).
• Operating and securing the website: our legitimate interest in a reliable, secure site (Art. 6(1)(f)).
• Aggregate ad attribution: our legitimate interest in measuring advertising (Art. 6(1)(f)).
• Keeping records where the law requires it, such as tax or accounting records, and handling legal claims: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).

Retention

• Imported files and the library: on your device until you delete them or remove the app. Temporary preview and share files are removed by the system.
• Local diagnostics: on your device for up to 14 days (16 reports, 1 MiB each), unless you delete them sooner.
• Ad-attribution step: on your device; the app stops updating it 35 days after installation.
• Support correspondence: up to 24 months after the request is resolved, unless a longer period is needed for a legal claim or obligation.
• Website request logs: kept by Cloudflare for a short period under its retention settings, typically a few days.
• Accounting and tax records: kept for as long as Polish accounting and tax law require — usually 5 years from the end of the calendar year in which the related tax fell due (Accounting Act art. 74; Tax Ordinance arts. 70 and 86). App purchases are sold by Apple, so your purchases do not appear in our accounting records.

Recipients and international transfers

We do not sell personal data or give it to advertisers. The only recipients are: Apple (App Store, StoreKit, ad attribution and the system features you use), Cloudflare, Inc. (website hosting and security) and Soverin (support email). Cloudflare and Apple may process data outside the European Economic Area, including in the United States; such transfers rely on the EU–US Data Privacy Framework where the recipient is certified and on the European Commission’s Standard Contractual Clauses. Apple processes App Store data as an independent controller under its own privacy policy.

Your rights

Under the GDPR and UK GDPR you can request access to, rectification, erasure or restriction of your personal data, data portability, and object to processing based on our legitimate interests. Where processing relies on consent you can withdraw it at any time without affecting earlier processing. Email privacy@mailfolio.app; we normally answer within one month. Data that exists only on your device is under your control and can be deleted in the app or by removing it; we cannot access or erase it for you. You can complain to the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority where you live or work. We do not make automated decisions or profile you.

US state privacy rights (including California)

We do not sell or share personal information, as those terms are defined by the California Consumer Privacy Act as amended by the CPRA and similar state laws, and we do not use sensitive personal information to infer characteristics. In the last 12 months the only categories we may have collected are identifiers and the content of messages you send to support (email address, message), and internet activity in website request logs processed by Cloudflare. You can ask to know, correct or delete this information at privacy@mailfolio.app; we will not discriminate against you for exercising these rights.

Do Not Track: this site and our apps do not track you across third-party sites or services, so they behave the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

Children

MailFolio is a general-purpose utility and is not directed at children under 16. We do not knowingly collect personal data from children.

Changes

We update this policy when the app, our providers or the law change; the date above identifies the current version. 14 October 2026: added controller registration details, ad attribution, legal bases, retention, transfers and US state privacy rights, and clarified the disabled usage option. 16 October 2026: described optional usage, purchase and fixed-error counts available from version 1.0.12, consent, Cloudflare transport and retention. 14 October 2026 (update): Apple ad measurement by region, accounting-record retention and Do Not Track clarified.

Contact

Privacy requests: privacy@mailfolio.app. General support: support@mailfolio.app. Company details are in the legal notice.