Folumi privacy
Your history on this device
Folumi works without an account, sign-in or sync. Doses, schedules, weight, notes, drafts, corrections and preferences stay on your device. Folumi does not send this history in readable form to any server or share it with AI tools, advertisers or social networks. If you turn on the Folumi Plus automatic copy, only a copy encrypted on this device leaves it, and only your devices can open it.
History import
In Your data, you can choose a file exported by Shotsy to review and import compatible doses, weights and notes. On iPhone and iPad, you can also authorize weight readings from Apple Health (HealthKit) for your chosen period; on Android, from Health Connect. We read only weight, date and a weighing identifier to avoid repeated imports; we do not read medications, write to Health or Health Connect, or read in the background. When importing, you review and select before adding anything to your notebook. If you turn on “Bring in new weights on opening”, when Folumi opens or you return to it, at most every 10 minutes, we read recent weights and add only those your notebook does not have yet; turn it off in Your data at any time. Imported weights are included in summaries and any manual or automatic copies you enable, with the same protection as other records. They are not used for advertising, marketing, AI or profiling. Revoking access in Health or Health Connect stops new readings but does not erase records already imported; you manage those in your notebook. Changes or deletions in Health or Health Connect are not synced to Folumi.
Copies off the device
Without the Folumi Plus automatic copy, Folumi does not keep your history outside the device. Deleting or reinstalling the app, clearing its data, replacing or losing your device may erase your history if you have no copy. Do not rely on system backups to recover it: the app uses protected storage and excludes its internal files from the backup routines it configures. To move your history to another device or recover it, save a copy in Your data and use Restore a copy.
The copy you choose to save
Your data lets you save a JSON file with your records, including those in the trash, and your draft, labeled separately. Original values and units are preserved. The file has no password and may contain health information. Choose a trusted destination and control your copies. Restore a copy checks the whole file before changing anything and replaces the records on this device with the copy’s; first, it keeps a copy of what was here on the device. Drafts and most preferences are not restored. The reported treatment start date and next appointment can be restored; the appointment reminder remains off. You can also export a CSV spreadsheet with your records outside the trash, without the draft; like the copy, it has no password, may contain health information and cannot be used to restore. If you choose a cloud provider in the file picker, that destination processes the copy or the spreadsheet under its own terms. The consult PDF summary is made on the device and leaves it only through the system’s share sheet, to wherever you choose; on Android, the last PDF stays in the app’s temporary storage until the next share.
Keeping and deleting records
Records remain on the device while you keep the app data. Deleting a record moves it to the trash, from which it can be restored; it does not permanently erase the content. When you restore a copy, the copy of what was here before stays in the device’s protected database until the next restore, and you can save it from Your data. To remove all local app data, delete the app and its data in system settings. Delete saved copies wherever you keep them. The Plus automatic copy is deleted in Your data, with Delete the stored copy; deleting the app does not delete it, and it goes by itself 180 days after the last one is stored. There is no Folumi account to delete.
Protection and access
The local database is encrypted; its key is held in system-protected storage and tied to this device. Protection also depends on device security. This version does not require a separate Folumi PIN or biometrics: someone with access to your unlocked device can open the app. No system can promise zero risk. Never send passwords, codes or a complete history file to support.
History and the reference curve
This version is intended for adults. Folumi records what you enter; a schedule is not proof of a completed injection. For compatible formulations and amounts, the curve shows recorded injections in fixed research profiles. Recorded weight does not personalize the model. The curve does not measure concentration in your body, predict an individual response or choose a dose, treatment or injection time. Sources, coverage and limitations are available from the curve. The app does not replace a healthcare professional.
Network, external pages and support
You do not need to provide a name, email address or Folumi account to use the local history. Folumi has no advertising and does not send the contents of your notebook for analytics. Purchase and offer measurement through RevenueCat is described below. Our own service stores only the Plus encrypted automatic copy. External pages and their providers may process IP addresses and browser information under their policies. The static support and privacy pages use GitHub Pages and the ternmade.com domain uses Cloudflare Web Analytics to count visits; there are no forms requesting health data. Website visits are separate from app purchase measurement. Provider policies: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement and https://www.cloudflare.com/privacypolicy/
Folumi Plus and purchases
Folumi Plus is sold through your device’s store (the App Store on iPhone and iPad, Google Play on Android) and confirmed by RevenueCat, a service of RevenueCat, Inc. The app only talks to RevenueCat when the Plus offer is first opened, either by you or at the end of setup and, from then on, when you open the app, to keep Plus up to date. That exchange carries a pseudonymous identifier created by RevenueCat, the purchases the store confirms and technical information: the device’s model and system, the app version, the language, the store country, the connection’s IP address and, on iPhone and iPad, the identifier Apple gives the device for this developer; never your records, your name, your email address or the device’s advertising identifier. The store and RevenueCat keep the purchase history of that identifier (product, dates, free trial, renewal, cancellation and store country) to confirm Plus, restore it on another device with the same store account and show Folumi sales figures linked to that identifier, without the contents of your notebook. A summary of the last confirmed access stays on the device, so Plus works offline; on iPhone, the system backup may carry that summary and the appearance and language choices, never the records. Billing, cancellation and refunds follow the rules of the store where you bought: with Apple, in your account settings; with Google Play, under Payments & subscriptions. Without a purchase, the whole notebook stays free. RevenueCat’s policy: https://www.revenuecat.com/privacy
Measuring the Plus offer
To check whether the offer is understood and leads to purchases, RevenueCat receives a paywall impression only after prices are displayed, the placement (first setup, second dose or manual opening), whether a trial was offered and whether you explicitly chose Not now. Closing the screen, a network failure or not buying is not recorded as a refusal. These markers are associated with the same pseudonymous purchase identifier and the app version supplied by the SDK. They do not contain medication, dose, weight, symptoms, dates of treatment or notes, and are not used for advertising. They are not anonymous merely because they omit your name. Purchases and trials count only after the store confirms them. You may contact support to request access or deletion of this data using your purchase reference; do not send health records.
Encrypted automatic copy (Folumi Plus)
If you turn on the automatic copy, the app encrypts the copy of your records on this device (AES-256-GCM) before sending it. The key comes from a secret you keep: on iPhone and iPad, in your iCloud Keychain; on Android, in Google’s Block Store, which takes it to your Google account backup end-to-end encrypted when the device has a screen lock and Google backup is on; and, on both, in the recovery code you keep. The service never receives the key and cannot read the copy. The copy is stored on Cloudflare, Inc. servers (R2), which may be outside your country, under a random identifier, with no name, email address or account; to store it, the service asks RevenueCat whether the pseudonymous purchase identifier has Plus and keeps, beside the copy, only an irreversible summary of it (a hash), so it need not ask again at each copy. Like any internet service, Cloudflare receives the connection’s IP address; the service keeps no access logs. We keep the five newest versions and delete them 180 days after the last one is stored, or when you delete the copy in Your data; under the random identifier stays only a mark that the copy was deleted, with the date, without content and without anything of the purchase identifier. Cloudflare’s policy: https://www.cloudflare.com/privacypolicy/
Widgets, lock screen and Live Activity (Folumi Plus)
With Folumi Plus, the app keeps on this device a summary for the widgets, the lock screen and the Live Activity, which on Android is the dose countdown’s ongoing notification: the countdown to the next dose, the notebook’s week, what’s left in the box and the estimated wave, if it is on. That summary stays in a file only Folumi reads (on iPhone and iPad, shared only with Folumi’s own widget extension; on Android, in the app’s own files), out of backups, and never leaves the device. The medication name and the weight appear outside the app only if you turn them on in Settings, under Lock screen and widgets; what appears on the lock screen can be seen by anyone holding the device. On iOS 26 or later, the app schedules the dose day’s Live Activity, which starts an hour before the time with a system notice; on Android, the countdown notification also starts an hour before, with a notice, if notifications are allowed. Logging from the Live Activity or the notification opens the app on the dose sheet to check and save; nothing is recorded until you save.
Progress photos
If you keep progress photos, they stay on this device only, inside the same encrypted database as the notebook, and are not in the manual copy or the automatic copy. Before keeping it, Folumi removes the location, date and camera details the photo carries, and deletes the picker’s temporary files. The camera opens only when you choose to take a photo; the library opens through the system picker, without Folumi seeing your other photos. Photos never appear in widgets, on the lock screen or in reminders. Deleting a photo removes it from the device; photos have no trash. When you change devices, they do not come along in this version.
Responsibility and contact
Arthur Barbosa is the stated person responsible for Folumi, with support through the Ternmade studio. Contact ternmade@outlook.com using the subject Folumi — support or Folumi — privacy. If you contact us, your email provider and ours process the message and sender address to handle the request. We use this correspondence to resolve your request and meet applicable obligations; you may request its deletion using the same contact. Standard support does not require medication, weight or note contents. You may ask about access, correction, deletion and other applicable rights regarding data you send us. To ask for the purchase history kept by RevenueCat to be deleted, write with the order number on your App Store or Google Play receipt: that is how we find the purchase, with no name or email address. We have no remote access to your local history.
Policy changes
This policy describes Folumi as it is today. Any future account, sync or other use of data requires its own information and controls before activation. Material changes will be presented in the app and on this page with a new date. Store availability is not medical certification.