Privacy policy

Last changed: 24 October 2026

Who we are

TotalFolio is an app made by Ashutosh Kashyap, an individual developer in India (“we” on this page). For any question about your data, or to raise a grievance, write to support@totalfolio.app.

The short version

• Your records stay on your phone, encrypted.
• There is no TotalFolio account and no TotalFolio server.
• There are no ads, no analytics and no tracking. We never see your records.
• If you turn on backup, an encrypted copy goes to your own Google Drive, where only you can open it.

What the app keeps, on your phone only

Everything you enter: your records (for example insurance policies, loans, deposits, funds, shares, gold, property, documents and cards), the people you add (such as their name, relation, date of birth, mobile number and email), the payments you mark, your reminder settings, and the photos and PDFs you attach. It also keeps the app’s own settings.

All of it is stored in one encrypted file in the app’s private storage on your phone. The key that unlocks it is kept in your phone’s Android Keystore and never leaves the phone. Other apps can’t read it.

TotalFolio never asks for banking or portal passwords, UPI PINs, card CVVs, OTPs, full card numbers or full Aadhaar numbers (only their last 4 digits).

Permissions and why

• Notifications: to show your reminders. Android asks you first.
• Fingerprint, face or screen lock: only if you turn on App lock. Your phone checks it; TotalFolio never sees your fingerprint, face or PIN.
• Internet: only for the optional backup to Google Drive.
• Run at start-up, vibrate and keep awake: so reminders are set again after the phone restarts, and arrive on time.
• View network connections: to check whether you are on mobile data before a large backup.
• Photos, camera and files: TotalFolio has no permission for these. When you attach a photo or a PDF, your phone’s own camera or picker opens, and only the item you choose is given to the app.

Backup to Google Drive (optional)

Backup is off until you turn it on. When you do, you choose a Google account and allow TotalFolio its own folder in that account’s Google Drive.

What Google data TotalFolio uses

• Your Google account’s email address, so the app can show which account it backs up to. It is kept only on your phone. Google sign-in also offers your name and profile picture; TotalFolio doesn’t keep them.
• TotalFolio’s own app-data folder in your Google Drive (Google’s drive.appdata permission). TotalFolio can only see and change the files it made there. It can’t see, open or change any other file in your Drive.

How it is used

Only to save, list, download and delete your backups. The app keeps the two newest copies and deletes older ones. Each copy is encrypted on your phone, with a key made from a backup password you choose, before it is sent. Google stores a file it can’t read. Your password is not stored anywhere: not on your phone, and not in Drive.

Sharing

Google user data is not shared with anyone. Your backup goes from your phone straight to your Google Drive; it never passes through us, and we receive nothing. It is not used for ads, it is not sold, it is not used to train AI models, and no person reads it.

TotalFolio’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Stopping

In the app, go to Settings → Stop backing up. You can delete the copies in Drive there too, and, while the phone is online, TotalFolio’s access to your Drive is withdrawn. You can also remove TotalFolio’s access at any time in your Google Account, at myaccount.google.com/connections.

What we don’t do

• We use no analytics, advertising, tracking or crash-reporting services.
• We don’t sell, rent or share your data.
• We have no server that holds your records.
• When something goes wrong, the phone’s own log records only the kind of error, never your records.

Deleting your data

• On your phone: uninstall TotalFolio, or go to Settings → Apps → TotalFolio → Storage → Clear storage. This deletes your records and their key for good; without a backup they can’t come back.
• Your backups in Google Drive: in the app, Settings → Stop backing up, and choose to delete the copies. Or, in Google Drive on a computer: Settings → Manage apps → TotalFolio → Options → Delete hidden app data.
• Google access: remove TotalFolio at myaccount.google.com/connections.

We hold none of your records, so there is nothing to delete on our side. If you have emailed us, we delete your emails when you ask.

Children

TotalFolio is meant for adults keeping their family’s records. It can hold details you enter about your children, such as a name or a date of birth; they stay on your phone like everything else. Children should not use the app themselves.

This website

totalfolio.app sets no cookies and uses no analytics. If you tap Dark or Light, your browser keeps that light or dark choice in its local storage for this site; it is never sent anywhere. It is hosted by Cloudflare, which handles visitors’ internet addresses to deliver the pages and keep the site safe, under Cloudflare’s privacy policy.

If you email us

We use your email address and your message only to reply to you. If you ask to test the app, we also add the Gmail address you give us to TotalFolio’s test list in Google Play Console, so Google Play lets you install the test version; we remove it whenever you ask.

Changes

When this policy changes, the date at the top changes, and the change is described here.