Privacy

Linenfold is built so that we never have your documents in a form we can read. They are read, stored and searched inside the browser on your own device. If you turn on the optional encrypted backup, they are encrypted on your device before upload, and we can’t decrypt them.

OWNER REVIEW: add the name of the business or person operating Linenfold, a contact email for privacy questions, and the date this policy takes effect. Check this page against India’s Digital Personal Data Protection Act, 2023 and any other law that applies to you before publishing.

What stays on your device

• The photos and PDFs you add, their thumbnails, and the text read from them
• The details you or Linenfold fill in (type, amounts, dates, names, notes)
• Family names you add, and any PDF passwords you enter so locked PDFs open again

These are kept in your browser’s storage for this site (IndexedDB). Unless you turn on encrypted backup, they are not sent to us or anyone else.

How documents are read

Text is read with an open-source OCR engine (Tesseract) running in your browser, and PDFs are opened with an open-source PDF reader (PDF.js), also in your browser. Both are downloaded from this website like the rest of the app. No document, image or text is sent anywhere to be read.

What our server sees

Your browser downloads the app’s files (pages, code, fonts, the OCR engine) from the web server that hosts Linenfold, as with any website. Like most web servers, it may record standard request logs such as IP address, time, the file requested and browser type.

OWNER REVIEW: state where the site is hosted, what the host logs and how long logs are kept.

Optional encrypted backup and sync

Backup is optional. Without an account, everything stays on your device, exactly as described above. If you turn it on:

• Encryption happens on your device. Your documents, photos and PDFs, their details, family names and any PDF passwords are encrypted with AES-256-GCM before upload, using a key protected by your passphrase (PBKDF2-SHA256, 600,000 rounds) and by a recovery key shown to you once. We never receive your passphrase, your recovery key or the key that decrypts your data, so we can’t read your backup and can’t give anyone else the ability to.
• If you forget your passphrase and lose your recovery key, your backup can’t be recovered, by you or by us. There is no reset.
• Your email is used only to send one-time sign-in codes. It is not linked to anything inside your encrypted data.
• What our server can still see: that you have an account (your email), how many encrypted items you have and how big they are, when they change, and which devices you’ve signed in on (a name like “Linenfold on macOS”, and when each was last used).
• Deleting it: Delete cloud backup in Settings removes your account, every encrypted item and file, and every signed-in device from our server. The documents on your device stay.

OWNER REVIEW: state where the backup server and its file storage are hosted (provider and region), who the email provider is, and how long server logs are kept.

Anonymous usage stats (off unless you turn them on)

If you switch on Share anonymous usage stats, the app sends at most once a day: a random ID made only for this purpose, the app version, and how many times the app crashed. It is sent without your sign-in, is not linked to your backup account or documents, and the server stores only a one-way hash of the ID and no IP address.

What we don’t do

• No account needed to use Linenfold, and no passwords of yours stored by us
• No analytics beyond the opt-in anonymous stats above, no tracking pixels and no third-party scripts
• No cookies
• No advertising, and no selling or sharing of data

Backups

A backup file is created on your device and saved wherever you choose. If you lock it with a passphrase, it is encrypted with AES-256-GCM using a key derived from your passphrase (PBKDF2-SHA256, 310,000 rounds). We never see the file or the passphrase and can’t recover either. An unlocked backup is an ordinary zip file that anyone holding it can open.

Calendar reminders

If you add reminders to your calendar, the downloaded calendar file contains each document’s title and date. Once imported, those events are handled by your calendar provider (for example Google or Apple) under their privacy terms.

Sharing

When you share or download a document from Linenfold, it goes only where you send it.

Deleting your data

Delete individual documents in the app (they stay in Recently deleted for 30 days), or use Settings › Erase this device to remove everything at once. Clearing this site’s data in your browser, or uninstalling the app, also removes it. Without encrypted backup we hold nothing, so there is nothing for us to delete on our side. With it, use Delete cloud backup as described above.

Children

Linenfold is meant to be used by adults managing their household’s documents, including documents that belong to children in the family.

Changes

If this policy changes, the updated version will be posted on this page.