Introduction
FolioX ("we", "our", or "the app") is a privacy-first portfolio tracking application. This policy explains what stays on your device, what limited information leaves it, and why.
Data Storage
All your portfolio data — including accounts, holdings, and transactions — is stored locally on your device using Apple's SwiftData framework. You do not need an account, and we do not operate any servers that store your portfolio. Your portfolio only leaves your device if you enable iCloud sync or use Screenshot Import, both described below.
iCloud Sync (Pro Feature)
If you subscribe to FolioX Pro and enable iCloud sync, your portfolio data is synced through your personal iCloud account using Apple's CloudKit framework. This data is transmitted between your devices through Apple's encrypted infrastructure. We never have access to, process, or store your synced data.
Market Data Requests
To display prices, dividends, and historical charts, FolioX sends requests to our market-data server (api.getfoliox.com), which fetches the data from third-party providers. These requests contain only ticker symbols and currency codes (e.g., "AAPL", "BTC", "USD") and never include your quantities, cost basis, balances, or account details. Like any web server, ours receives your IP address when your device connects to it; we use it only to serve the request.
Screenshot Import (Pro Feature)
Screenshot Import is optional and only runs when you choose screenshots to import. The text in your screenshots is first read on your device; the screenshots themselves are never uploaded. The recognized text — which can include the holdings, amounts, and returns shown in the screenshot — is then sent over an encrypted connection to our server, which passes it to Anthropic's Claude API solely to extract a structured list of holdings. We do not store this text or the results, and we do not use them for any other purpose. You review and edit every extracted row before anything is saved to your device.
Adding Holdings in Plain Language
On supported devices, you can describe a holding in a sentence (for example, "bought 100 Apple at $190"). The sentence is processed entirely on your device by Apple Intelligence and is never sent to us or anyone else.
Analytics and Crash Reporting
To understand which features are used and to fix crashes, FolioX uses Google's Firebase Analytics and Firebase Crashlytics.
- Usage events record actions such as opening the app, adding a holding, creating an account, viewing the upgrade screen, or exporting a backup, with coarse details like the market or asset type, the entry method, the account currency, or the subscription plan.
- Crash reports include the technical state of the app when it crashed, such as the stack trace, app version, device model, and OS version.
- Firebase also automatically collects standard technical information such as an app-instance identifier, device model, OS and app version, session information, and an approximate location (country or region) derived from your IP address.
Analytics events and crash reports never include your ticker symbols, quantities, prices, cost basis, balances, or notes. FolioX does not access the advertising identifier (IDFA), does not track you across other companies' apps or websites, does not show ads, and does not sell your data. Google processes this data under its own privacy policy.
Subscriptions
FolioX Pro subscriptions are managed entirely through Apple's App Store and StoreKit 2 framework. All payment processing is handled by Apple. We do not collect, process, or store any payment information, credit card details, or billing addresses.
Data Deletion
Because your portfolio is stored on your device, you can delete all FolioX portfolio data by deleting the app or using Clear All Data in Settings. If you have iCloud sync enabled, you can also remove synced data through your iCloud storage settings. We hold no copy of your portfolio. Analytics and crash data are kept by Google for a limited period under Firebase's retention settings and are not linked to your name or email.
Third-Party Services
FolioX relies on the following third parties:
- Market data providers (such as Yahoo Finance, CoinGecko, Sina Finance, Tiantian Fund, and exchange-rate services), reached through our market-data server — receive only ticker symbols and currency codes.
- Anthropic (Claude API) — receives recognized screenshot text, only when you use Screenshot Import.
- Google (Firebase Analytics and Crashlytics) — receives the usage events and crash reports described above.
- Apple — iCloud sync (CloudKit), in-app purchases (StoreKit), and on-device Apple Intelligence.
Please refer to each provider's privacy policy for how they handle the data they receive.
Children's Privacy
FolioX does not knowingly collect information from children under 13. The app does not require account creation or ask for personal information such as your name or email.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date. Since we do not collect email addresses, we encourage you to review this page periodically.
Contact
If you have any questions about this privacy policy, please contact us at support@getfoliox.com.