Privacy Policy

1. Information collected and purposes

• Account information: Identifiers, email addresses, display names, and similar information from your sign-in provider are used for authentication, synchronization, access management, and support. Folemi never receives your provider password.
• Reading and knowledge information: Imported short words and passages, sources, saved terms, explanations, related information, personal memos, and notes are used to generate explanations, organize knowledge, suggest connections, search, reuse, sync, and export.
• Usage and technical information: Action types and times, AI usage, response times, results, connection information, and errors are used to provide the service, improve quality, understand costs, prevent abuse, and investigate problems. Section 3 describes operational measurement.
• Authentication SDK information: The Google sign-in SDK may handle names, email addresses, phone numbers, approximate location, user and device identifiers, usage and technical information for authentication, security and SDK quality. Folemi does not request contact-list or location permission for this purpose or use sign-in data for advertising tracking. Actual information depends on the login provider and its settings.
• Support information: Contact details and the content of your inquiry are used to verify identity, respond, and investigate issues.

Production billing is not enabled. After billing launches, subscription identifiers, purchase verification, expiry dates, and cancellation status from payment providers will be used to manage access and prevent duplicate subscriptions. Card numbers are handled by payment providers, not stored by Folemi.

2. AI processing and saving knowledge

When you request an explanation, selected words or short passages (up to 240 characters), necessary source details, and related dictionary knowledge or saved notes (including your memos) are sent to the OpenAI API. Surrounding book text is not collected automatically. Folemi operates within Kindle’s permitted copy limits and does not circumvent them.

AI may use excerpts of saved terms and explanations to find possible connections with existing knowledge. Creating a note sends the selected knowledge and necessary related information. Before entering personal or confidential information in notes, consider that it may be sent to AI.

Your action confirms whether a term or note is saved. Displaying an explanation does not add it to your dictionary automatically. Generated results may be held briefly on the server for drafts and deduplication. Selected original text and surrounding passages are excluded from dictionary, draft, and response storage fields. Text you paste into your own notes is not automatically detected and removed.

Approval to save is not treated as consent to sell reading content, merge knowledge with other users, or collect model-training data. Optional storage of OpenAI API responses is disabled, but this is not a guarantee of zero retention by providers. For retention related to abuse monitoring and similar purposes, see OpenAI’s data handling documentation should also be reviewed.

3. Operational measurement

The following actions and results are recorded to operate the service, improve quality, and understand costs.

• Requests, generation, and display of explanations; saving, editing, deleting, and revisiting knowledge or notes
• Reuse of saved notes in explanations, whether reuse spans different books, and generation, adoption, or dismissal of connection suggestions
• Return-to-reading results; AI model, token counts, response times, and success or failure
• Changes to verified subscription status after billing launches

The dedicated measurement ledger excludes book text, terms, explanations, book titles, notes, email addresses, URLs, IP addresses, device fingerprints, and authentication data. Cross-book reuse records only yes, no, or unknown, without book titles or their hashes.

Accounts and action targets are recorded using app-specific identifiers. This is not treated as anonymization. Administrator reports contain aggregated values only, and test activity is excluded from normal usage results. Version 0.9.5 does not use a third-party advertising measurement SDK or device fingerprinting. See the separate section below for the next iPad version.

Raw measurement records have a 400-day retention limit and are automatically deleted. Deletion can take time after expiry. Account-specific measurement records are included when reviewing a user’s deletion request.

4. External services and data handling

• Google Cloud / Firebase: Used for authentication, APIs, knowledge storage and synchronization, operational measurement, logging, and monitoring.
• OpenAI：Receives the information in Section 2 to generate explanations, knowledge notes, and connection suggestions.
• Cloudflare：Used for public site delivery, DNS, and connection protection.
• Apple / Google: Used to authenticate with your chosen sign-in method. Apple or Stripe will be used for payments and subscription management after billing launches.

AI transmission begins only after the app explains what is sent and asks for consent. You can stop future AI transmission in Account settings while continuing to view saved knowledge. Processing already sent to an external service cannot be undone.

These providers may process connection information and logs for communications and security. The exclusions from the Section 3 measurement ledger do not mean that authentication information, saved knowledge, or infrastructure connection logs are never collected anywhere in the service.

External processing and retention also follow each provider’s contracts and policies, and may occur outside Japan. For details, see Firebase Privacy and Security、OpenAI Privacy Policy、Cloudflare Privacy Policy.

Personal information is not provided to third parties except with consent, as required by law, through outsourcing necessary for service delivery, or in other legally permitted cases. Business succession will remain subject to the original purposes and applicable law.

The public landing-page demo uses fictional content, sends nothing to AI, and saves nothing to your dictionary. Apps using sign-in and synchronization use local device storage needed for authentication and service functions.

Ads and privacy choices in the next iPad version

This section applies to iPad version 0.9.6 and later, including test builds. It does not apply to version 0.9.5 or the Mac app. Live ad delivery remains disabled until release preparations are complete.

The applicable version uses Google AdMob and User Messaging Platform (UMP). Ads appear only in dictionary and saved knowledge-note lists. There are no interstitials or required ad videos in explanations, reading text, the share extension, saving or returning to reading. Test builds use Google's official test ads.

Folemi does not include reading text, terms, book names or bibliographic information, dictionary or note contents, login email addresses or Folemi account IDs in ad requests. Personalized ads and publisher first-party IDs are disabled. Folemi does not request App Tracking Transparency authorization for cross-app or cross-site tracking. Non-personalized ads do not mean zero data collection.

Google's advertising and consent SDKs may process approximate location inferred from IP addresses, device identifiers, advertising and product interactions, performance and crash information, and consent or privacy choices for ad delivery, measurement, analytics, fraud prevention and quality improvements. Folemi does not request precise location permission for advertising or create device fingerprints. Actual processing depends on region, OS, choices and Google's settings.

Where required, Google's consent and privacy-choice forms appear before ads are requested. If the consent update or form fails, ads are suppressed and reading features remain available. Consent or ad viewing is never a condition of saving knowledge or returning to reading.

Where a privacy-choice entry point is required, use “広告のプライバシー” (Ad privacy) in the Account menu to revisit your choices. Elsewhere, the entry explains advertising data handling. Changing a choice cannot retroactively undo information already sent. See How Google uses information from partner sites and apps and Google Privacy Policy for Google's use, retention and deletion information. Contact Folemi at [email protected].

5. Retention, deletion, and security

Account information and saved knowledge are retained as needed to provide the service. You can delete individual knowledge items and notes in the app. Minimal deletion records, processing history and legally required information may remain as needed for synchronization, abuse prevention and compliance. To delete the whole account, open Account → Privacy → Delete account. After reauthentication and confirmation, access is blocked immediately and the account and associated saved data are normally deleted within 30 minutes. Linked Apple authorization tokens are revoked. If you cannot use this flow, contact the Section 6 address.

Measures include encrypted communications, authentication, per-user access control, limited administration rights, and separate storage of secrets. App users cannot directly read or write the operational measurement ledger.

For recovery from incidents or mistakes, Google Cloud backups are kept in the same Japanese region: point-in-time recovery for seven days, daily backups for seven days, and weekly backups for 28 days. Deleted information may remain until backup expiry. Recovery procedures reapply deletion requests and prevent deleted accounts from being reactivated. Minimal deletion-status records needed for recovery are retained for up to 35 days after normal deletion. Automatic deletion may take time to propagate.

Please also manage files exported as Markdown or imported into other apps at their destinations. Deleting information in Folemi does not automatically remove copies you made elsewhere.

6. Access, correction, and deletion requests

Contact the address below for notice of purposes, access, correction, deletion, suspension of use or third-party provision, complaints, or questions. We verify the account and respond under applicable law. Identity verification may be required; never email passwords or verification codes.

7. Policy updates

This page will be updated when features or information handling change. Required notices and consent procedures will be followed for changes such as new purposes of use.

8. Operator and contact

Operator: YOSHINOBU TAKAHASHI (trading as Matorisuka)
Contact: [email protected]

For address and sales status, see the Commercial Disclosure should also be reviewed.