Privacy Policy

Folio is developed by Pedro Silva, operating as plainworks. This policy explains how Folio handles information entered by aesthetic practitioners and their practices.

Information Folio handles

• Account and practice information, including email address, practice name, staff invitations, roles, and subscription status.
• Client and visit records entered by the practice, including client profile fields, treatment notes, products, areas, amounts, lot notes, aftercare, reminders, and exported visit packets.
• Photos and signatures captured or selected by the user, including before/after photos, consent signatures, and related metadata such as capture time, angle, and file checksums.
• Support and feedback emails that you choose to send.
• Limited app diagnostics and product analytics, such as app version, build, platform, feature usage, paywall events, purchase/restore events, and sync or operational state.

How information is used

Folio uses this information to provide client visit documentation, local device storage, cloud backup, sync, private media access, staff access, account export, support, subscription entitlement checks, diagnostics, and product improvement.

Local storage, cloud backup, and media

Folio stores records locally on the device so visit capture can work in the treatment room. When cloud features are configured and enabled, records sync to Folio's backend, and photos/signatures are stored in private object storage accessed through short-lived signed URLs.

Analytics and diagnostics

Folio uses PostHog for product analytics and Sentry for crash/error diagnostics. Analytics and diagnostics are configured to avoid client names, notes, consent text, photo data, signatures, nested record payloads, and other sensitive client content.

Purchases

Subscriptions are processed by Apple. Folio uses RevenueCat to manage subscription status, purchase/restore state, entitlement checks, and subscription lifecycle events.

Support emails

If you contact support or send feedback, we receive the information you choose to include in that message, along with basic diagnostic information included in the email draft.

No ads or sale of data

Folio does not show ads, does not sell personal information, and does not use client records for advertising profiles.

Professional responsibility

Folio supports documentation and workflow. It does not provide medical advice, diagnosis, treatment recommendations, legal advice, or compliance certification. Practices are responsible for clinical judgement, consent requirements, privacy obligations, and record-handling obligations that apply to them.

Data export and deletion

Folio includes local backup/export tools. Cloud accounts can request account export and deletion from the app. Account deletion removes cloud account data according to the app flow, while local device records remain unless separately deleted by the user.

Service providers

Folio may use infrastructure and service providers for hosting, database storage, private media storage, email delivery, analytics, diagnostics, and subscription management. These providers are used only to operate Folio.

Changes

If this policy changes, the updated version will be posted on this page with a new date.

Contact

Questions about this policy? Email [email protected].