Legal document

Privacy Policy

What Folvya records when you create a portfolio, why, and how to delete everything in one action.

Last updated — 26 August 2026 Governing language — French · Version française Applies to — the mobile app and the web version
About this translation

This English text is provided for your convenience only. The French version is the legally binding one; in case of any discrepancy, the French version prevails.

In plain terms, before the legal detail

  • We collect what you voluntarily put in your portfolio, plus your account sign-in details — nothing more.
  • We do not sell or share your data with advertisers.
  • The camera is only used to scan a QR code — never any background capture.
  • You can delete your account and all your data, permanently, in one action, from within the app.
01

Data we collect

Two categories: what is needed to run your account, and what you choose to add to your portfolio.

Account

DataHow
Name, e-mailEntered at sign-up
PasswordHashed before storage — never kept or readable in clear text, even by us
Google identifierOnly if you choose “Sign in with Google”

Your portfolio content

Everything you choose to enter in your portfolio sections: about, experience, education, skills, projects, certifications, languages, strengths, interests, partners, testimonials, blog posts, as well as the photos, logos and documents you upload. None of it is required beyond what you decide to publish.

about experience education skills projects certifications photos & documents LinkedIn / GitHub links

View statistics

A simple counter of visits to your portfolio, overall and per section, for your dashboard. No personal data about visitors is recorded — no identity, no stored IP address, no browsing profile.

Technical diagnostics

If the app crashes or hits an unexpected error, a technical report is sent to our error-tracking tool (Sentry): error type, screen involved, app version, device model and OS version. These reports are used only to fix bugs. They contain neither your portfolio content, nor your password, nor your email, nor your IP address.

02

What it is used for

  • Create and display your portfolio, at the address you share.
  • Authenticate you and secure your session.
  • Show you the view statistics of your own portfolio.
  • Contact you if there is a problem with your account (never for commercial purposes without your consent).
03

Third-party services

A deliberately small number of technical providers, never data brokers or advertising networks:

  • Google Sign-In — only if you choose to sign in with a Google account, governed by Google’s privacy policy.
  • Render (Germany / EU) — hosting of the application server and the PostgreSQL database.
  • Cloudflare R2 — hosting of the files you upload (photos, logos, documents); object storage, never accessed for any purpose other than serving your files.
  • Firebase Hosting (Google) — delivery of the web version of the app.
  • Brevo (Sendinblue, France / EU) — sending transactional emails (only the password-reset code); receives your email address for that sole purpose.
  • Sentry — collection of anonymised crash reports (see “Technical diagnostics” above).

None of these providers is a data broker or an advertising network. Your files and database may be hosted on servers located in the European Union.

04

Retention period

DataKept
Account and portfolio contentAs long as the account exists
Per-section view statisticsRolling 12 months, automatically purged beyond that
Sign-in token (session)15 minutes; the refresh token expires after 30 days of inactivity
05

Security

  • Passwords hashed, never stored or transmitted in clear text.
  • Encrypted connections between the app and our servers.
  • Short-lived sessions, automatically renewed — a stolen token quickly stops working.
  • Every edit/delete action verifies that you are the owner of the content concerned.
06

Your rights

You can view and edit your profile at any time directly in the app. To remove everything:

Delete my account

From the app: open the menu (☰) → My account → Delete my account. Confirm — deletion is immediate and permanent.

  1. Your profile and all your portfolio content are erased.
  2. Your uploaded photos, logos and documents are deleted.
  3. Your view statistics are deleted.
  4. Your active sessions are revoked.

No copy is kept after deletion, other than what the law might exceptionally require us to keep (accounting obligations, ongoing dispute).

You can also write to us for any access, rectification or deletion request that you cannot carry out in the app — see Contact.

07

Minimum age

The service is intended for people old enough to build a professional record (CV/portfolio) — 13 years minimum, or the digital age of majority in force in your country if it is higher. We do not knowingly collect data about children below this age.

08

Changes to this policy

If this policy changes significantly, the update date at the top of the page will be revised and, for any substantial change, we will notify you directly (in-app notification or e-mail).

09

Contact

For any question about this policy or your data:

E-mail folvya@gmail.com