Private by architecture.

Effective: 15 October 2026

This policy is short because the system is. Orifold has no accounts, no servers of its own, and no analytics service. We operate no infrastructure that your writing can travel to. The one place your pages do travel is your own iCloud, described below. When you open an event's card, that event's address goes to Apple Maps, as described under Calendar and Reminders.

What Orifold stores, and where

Your pages, handwriting, tasks, reflections, the photos you place on a page, the PDFs you bring in as paper, your settings, and the search index built from your handwriting are stored on your device, inside Orifold's app container. They are never transmitted to us, and Orifold sends them to no third party.

Photos come in through the system photo picker, which hands Orifold only the photos you choose, and PDFs through the Files picker, the same way. Orifold asks to add to Photos only when you choose Save Image on a pressed page. It can add a page there; it never reads your photo library.

Carrying pages between your iPads

If you have Orifold Plus and leave sync on, your pages, ink, tasks, the photos placed on your pages, your important days, and your planner settings are carried between the iPads signed in to your Apple Account. They travel through Apple's CloudKit private database, inside your own iCloud. PDFs you brought in as paper stay on the iPad you added them on. That store belongs to your Apple Account, not to us: we have no account system, no credentials, and no ability to read it. Apple's privacy policy governs iCloud itself. Turn sync off, or use Orifold Free, and your pages stay on the iPad you wrote them on. Your Calendar events and Reminders are not carried across — they stay in your own calendar, on each iPad.

While sync is on, Apple's push notification service tells your iPad when a change is waiting in your iCloud. That signal carries none of your writing.

One small record sits in your iCloud whether or not you have Plus: it says whether Plus is active and until when, so your other devices can honour it. It holds nothing you wrote.

Calendar and Reminders

With your permission, Orifold reads your Calendar events and Reminders through Apple's EventKit framework in order to print them onto your pages. This happens on your device. Your events and reminders are not transmitted to us or stored on any server of ours. If you decline permission, Orifold works with sample content instead.

One detail does leave your iPad, and only when you open an event's card: the event's address is sent to Apple Maps, which finds the place and draws a small map of it. Nothing else about the event goes with it, and Orifold never asks for your own location. Apple's privacy policy governs Maps.

Handwriting recognition

Handwriting search uses Apple's on-device Vision framework. Recognition runs on your iPad; neither your ink nor the recognized text is sent anywhere for it.

Reading your ink

With Orifold Plus, on an iPad where Apple Intelligence is available and turned on, Orifold reads the recognized text of your handwriting to give you a recap of your week, reflection prompts that fit your pages, and tasks drawn from what you wrote. It uses Apple's on-device language model, so the reading happens on your iPad, and neither your ink nor its text leaves the iPad for it. Where Apple Intelligence is not available, these features do not appear.

Spotlight, Siri and Shortcuts

Orifold adds the recognized text of your pages and your tasks to your iPad's own Spotlight index, so system search can find them. iPadOS keeps that index on your iPad. Orifold's Siri and Shortcuts actions — open today, add a task, start a focus block, mark a day — run in the app, on your iPad. What you say to Siri is handled by Apple under Apple's privacy policy.

No analytics, no identifiers

Orifold contains no third-party analytics, advertising, or tracking SDKs. To understand its own onboarding and purchase flows, Orifold keeps simple counters on your device. They contain no identifiers, are never carried across, and are never transmitted.

Purchases

Subscriptions and the lifetime purchase are processed by Apple through the App Store. Orifold receives only the entitlement state — whether Plus is active — and never sees your payment details. Apple's own privacy policy governs the transaction.

Notifications

Orifold's notifications are scheduled locally on your device: a morning brief, an evening review and a weekly note, each only if you choose it, and, when you start a free trial, a single reminder two days before it ends. If you have never answered Orifold's notification prompt, that reminder waits quietly in Notification Center; if you have turned notifications off, it does not come. No server of ours sends any of them.

Backups and exports

Backups and PDF exports are files you create and carry yourself — to Files, iCloud Drive, or AirDrop. Where you send a backup is your choice; Orifold sends it nowhere on its own. Your device's system backup (iCloud or computer) may include Orifold's data like any other app's, under Apple's policies.

Deleting your data

Deleting Orifold from your iPad removes everything it kept there. To remove what sync carried to your iCloud as well, open Settings › your name › iCloud › Manage Account Storage › Orifold, then choose Delete Data. Backups and exports you made stay wherever you put them.

Children

Orifold is not directed at children under 13 and collects no personal information from anyone.

Changes

If this policy changes, the new version will be posted here with a new effective date. Because Orifold collects nothing, changes can only make that statement more precise, not less true.

Contact

Questions about privacy reach us at support@orifold.app. Orifold is made by DTSoft.