Orifolio — Privacy Policy
Last updated November 6, 2026
This Privacy Policy explains how Orifolio ("the app"), provided by Cheng Kam To, collects, uses, and protects your information. By using the app you agree to this policy.
Information We Collect
- Account information: your Firebase account identifier, linked Apple or Google sign-in details when provided, and account settings such as language. Guest accounts also have a Firebase identifier.
- Records you create: platform balances, activity, collection items, drafts, and values you enter.
- Optional AI inputs: the screenshots, labels, and remarks you submit for recognition, and the resulting drafts.
- Subscription information: verified product and transaction identifiers, account binding, entitlement periods, and AI usage. We do not receive your full payment card details.
How We Use Your Information
We use your account information and records to provide and restore your personal ledger across devices. Submitted AI inputs are processed to prepare a draft for you to review. Subscription information and AI usage are used to provide your plan and prevent duplicate use.
Orifolio does not sell your ledger or screenshots. Ledger records and screenshots are not included in our ad requests.
Account and Authentication
You can start as a guest and link Apple or Google later. Firebase provides authentication and stores your account identifier and linked sign-in details when provided. A guest account also has its own Firebase identifier.
Data Storage and Sync
Firebase stores your account information, settings, platform balances, activity, collection, drafts, and values you enter. We use this data to provide and restore your personal ledger across devices. Selected AI screenshots are uploaded to private Firebase Storage.
AI Screenshot Recognition
AI import is optional. When you agree and start recognition, selected screenshots, labels and remarks are uploaded to private Firebase Storage and sent to a third-party AI processing service to prepare a draft.
Screenshots may include account names, balances or other personal information; crop anything you do not want to share before uploading. Results stay private and need your confirmation before becoming records. Refusing AI processing does not prevent manual entry.
The AI provider processes requests under its own service terms; we do not promise zero retention or make a model-training exclusion claim.
Advertising
Free accounts can see Google AdMob advertising. The advertising SDK may process device and network information, advertising interactions and diagnostics under Google’s policies and your applicable consent choices. Ledger records and screenshots are not included in our ad requests. Where available, change advertising privacy choices in Settings. Paid ad-free and Premium plans remove ads.
Subscriptions and Payments
Apple handles payment details. We store verified product and transaction identifiers, account binding, entitlement periods and AI usage to provide your plan and prevent duplicate use. We do not receive your full payment card details. Deleting an Orifolio account does not cancel an Apple subscription; manage or cancel it in your Apple account.
Third-Party Services
Firebase/Google provides authentication, database, file storage and cloud processing; Apple handles sign-in and purchases; Google supplies advertising; the external AI service receives only submitted AI inputs. Processing can take place outside your region.
Data Retention
Account records, settings and AI results remain until you delete the relevant content or account. Original AI screenshots are available in the app for 7 days.
Storage lifecycle and soft-delete recovery can retain removed files for additional time; currently soft delete retains objects for another 7 days. Cached screenshots are periodically removed on the device and cleared on sign-out or account deletion. Approved shared catalog items are separate from your private account.
Your Choices and Account Deletion
You can review records, remove AI jobs and initiate account deletion in Settings → My account, including guest accounts. Deletion removes your private Firestore data, active screenshot objects, sign-in account and membership bindings.
A minimal account-identifier deletion marker remains to reject stale credentials and offline writes; it contains no ledger, email, screenshot or usage history. Service backups, recovery copies and operational security logs may expire separately. We do not claim instant physical erasure of every recovery copy.
Deleting an Orifolio account does not cancel an Apple subscription; manage or cancel it in your Apple account. Contact support for access or correction requests not covered by the app.
Changes to This Policy
We will update this policy when our data use changes and explain material changes in the app or policy page.
Contact
For questions about this policy or requests concerning your data, contact us through the support form.