Last updated: 13 August 2026
Profolio is a portfolio app for keeping a record of achievements — your own, or your child's. This policy explains what we collect, why we hold it, who else sees it, and how you get rid of it.
Your email address, and anything you choose to add to your profile: display name, username, biography and profile picture. We do not store a password — you sign in either with a one-time code sent to your email, or through Facebook, Google or LINE.
When you sign in with Facebook, Google or LINE, we store that provider's account identifier for you, and the email address it reports. For Facebook we also store an access token so the app can act on your behalf for the features you approved. We never receive or store your password for any of these services.
The items and collections you build: titles, descriptions, dates, photos and videos. You control whether each item is public or private, and whether your portfolio as a whole is visible to others. Anything you mark public can be seen by anyone holding the link.
For each sign-in session we record the IP address and browser user-agent, so you can see and revoke active sessions and so we can investigate abuse. We also count views and likes on items.
To run the service: authenticate you, store and display your portfolio, apply your plan's limits, send transactional email (sign-in codes, family invitations), and keep the service secure. We do not sell your personal information, and we do not use it for advertising.
If you connect Facebook, we request access to your email address so we can identify your account.
If you additionally enable Facebook import, we request access to your own posts and photos. That access is used for one purpose: when you paste a link to one of your own Facebook posts, we fetch that single post and copy its text, date and images into a draft item for you to review and save. We do not browse, index or bulk-download your Facebook account, and we do not read anything you have not explicitly linked to. Once a draft is saved, the copied media lives in your Profolio portfolio like any other upload.
You can disconnect Facebook at any time, or ask us to delete your account entirely. Step-by-step instructions for both are here:
A parent can create an account for their child from within their own account. Child accounts have no email address of their own and sign in with a PIN set by the parent. The parent controls the child's profile, the child's content and the child's visibility settings, and can delete the child's account at any time. A child account can be shared with a second parent by invitation; both parents then have the same control.
We use a small number of service providers to run Profolio. They receive only what they need to perform their function:
| Provider | Purpose | What they receive |
|---|---|---|
| DigitalOcean | Hosting and media storage | Your account data and uploaded photos and videos |
| Google (Gemini) | Optional AI writing and photo assistance | Only the item text and photo you submit for a given AI request |
| Google (Gmail SMTP) | Transactional email | Your email address and the message content |
| Meta, Google, LINE | Sign-in, and Facebook import if you enable it | The sign-in request itself; we receive data from them, not the reverse |
AI assistance is optional and runs only when you ask for it. We may also disclose information where we are legally required to do so.
We keep your data for as long as your account exists. When an account is deleted, its profile, items, collections, uploaded media, sign-in connections and sessions are deleted with it. Backups are retained for a short period and then overwritten.
We use a single signed cookie to keep you signed in. We do not use advertising or third-party tracking cookies.
If we change this policy we will update the date at the top of this page. Material changes will be announced in the app.
Questions about this policy, or about your data, go to [email protected].