Last updated: October 13, 2026
Learnfold is a native learning workspace that turns topics and sources into personal courses. This policy explains what the app stores on your device, what it may sync through Apple, and what it sends when you choose a connected learning agent, model provider, voice feature, pairing service, or notification feature.
Learnfold does not contain advertising or cross-app tracking SDKs, and we do not sell personal information. The app includes two third-party SDKs, each for one purpose: PostHog for optional anonymous usage analytics (see "App usage analytics") and RevenueCat for managing subscriptions (see "Learnfold Hosted and Subscriptions"). Processing described below is used to provide app functionality.
Learnfold stores the information needed to keep your learning workspace available between sessions. Depending on the features you use, this can include:
Learnfold only receives photos and files that you select, capture, paste, or otherwise explicitly add. Selected items may be copied into the app's private storage so the course can continue to use them. A photo or video selected for visual customization is also stored locally.
When you choose Paste Link or paste an image into a composer, Learnfold reads the clipboard for that action. The camera is used only for a feature you start, such as scanning a pairing code or capturing supported content. Connected agents or websites may receive a link or source content when you ask Learnfold to use it, as described below.
If course cloud sync is enabled and you are signed in to iCloud, Learnfold stores course catalog records and checksummed course workspace data in the app's private CloudKit database. Synced workspace data can include course pages, progress and discussion state, and copies of imported sources stored inside that workspace.
CloudKit is operated by Apple and associated with your Apple Account. Apple processes this data under its privacy policy. Turning off sync stops future synchronization but does not itself delete data already stored in iCloud.
The destination of course requests depends on the learning agent you choose:
Learnfold does not control the storage, logging, training, or deletion practices of a user-operated server or its configured model provider. Review those services' policies and do not submit material you are not authorized to share.
Learnfold Hosted is the default course agent. It needs no account or login. When you use it, the content of your course conversation leaves your device and is processed as follows:
Do not submit material you are not authorized to share or that contains sensitive personal information you do not want processed in the cloud. To use no cloud service, choose Apple on-device models, where supported. To request deletion of Hosted conversation data for your installation, email [email protected]. Because Hosted does not use accounts, include the approximate dates you used it; we will delete what we can identify.
Learnfold Plus and Learnfold Hosted are auto-renewing subscriptions sold through the App Store. Apple processes payment, billing and renewals. We do not receive your Apple Account name, email address, or payment details.
Subscription management with RevenueCat. The app includes the RevenueCat SDK, and RevenueCat, Inc. acts as our service provider to manage subscriptions: it validates App Store purchases, keeps the record of what you subscribe to, and tells the app which plan is active. RevenueCat receives a pseudonymous app user ID, your purchase and subscription status (products, dates, renewal state), the app version, device model and operating-system version, and your IP address as network metadata. The app user ID is a one-way hash derived from a random installation identifier that the app keeps in your Keychain; the identifier itself is never sent to RevenueCat. We do not give RevenueCat your name, email address or Apple Account, and RevenueCat does not receive them from us. This data is used only to provide and manage your subscription, not for advertising or tracking, and the app does not send RevenueCat an advertising identifier or the vendor identifier. If you have never been offered or bought a plan, the app still registers this pseudonymous ID with RevenueCat when it starts. RevenueCat handles it under its own privacy policy.
Learnfold Plus covers using your own runtime. It is checked on your device using the plan information the RevenueCat SDK keeps there, and nothing about it is sent to our own servers.
Learnfold Hosted is processed by a service we operate. To confirm your subscription, our service calculates the same one-way app user ID from the random installation identifier the app already presents to open a Hosted session, and asks RevenueCat whether that user has an active Hosted subscription. It then stores, for a short time, a one-way hash of the installation identifier, the RevenueCat customer ID, whether Hosted is active and until when, and daily usage counters used to enforce fair-use limits and prevent one subscription from being shared widely. RevenueCat may also notify our service when a subscription starts, renews, is cancelled, expires or is refunded. This links your subscription to that installation, not to your name or Apple Account. Because the identifier syncs through iCloud Keychain, it can follow you to your other devices; a subscription can be used on a limited number of installations.
Hosted conversation history is stored by the Hosted service so you can resume a course, and course content you send in Hosted requests is sent to a third-party model provider to generate replies. Our infrastructure providers process network metadata such as IP address and request time to operate and protect the service. When a subscription ends or is refunded, Hosted access stops; we may keep the hashed identifier and usage counters for a limited period for abuse prevention. To ask us to delete Hosted data associated with your installation, contact [email protected]. To ask RevenueCat to delete subscription data for your installation, contact us and include the approximate dates you subscribed, and we will make the request.
Learnfold accesses the microphone only after you start a voice feature and grant permission.
Provider-side retention and account linkage are governed by the selected provider. For OpenAI-operated endpoints, see the OpenAI Privacy Policy.
If you use the assisted Hermes connection flow, Learnfold contacts our pairing broker. The broker receives a random Learnfold installation identifier, a temporary request identifier and claim credential, and the computer name, node identifier, relay address, and one-time connection payload submitted by the computer. This information is used only to match and complete the pairing request. The request is removed when claimed or canceled, or expires if it is not completed.
After pairing, the long-lived connection credential is stored on your device. Normal agent traffic travels through the connected server path rather than through the pairing broker.
Learnfold may request local-network, Bluetooth, Nearby Interaction, camera, microphone, notification, photo-picker, or document-picker access when a related feature needs it. Local-network and nearby-device access are used to discover or confirm a server you choose to connect. Learnfold does not request location or contacts access.
Our pairing broker, and the infrastructure providers that operate it, necessarily process network metadata such as IP address, request time, response status, and security or error information. We use this information to operate, protect, and troubleshoot that service, not for advertising or cross-app tracking.
Learnfold does not include third-party advertising or cross-app tracking SDKs, and it does not track you across other companies' apps and websites. The only third-party SDKs are PostHog (optional anonymous usage analytics, described below) and RevenueCat (subscription management, described above); neither is used for advertising. We do not use course content, imported sources, microphone audio, or device identifiers for advertising, and we do not sell them.
In app versions that include PostHog, Learnfold records anonymous feature-use events such as opening the app, starting a course, submitting a question, approving a plan and opening a course page. Events use a random installation identifier and include app version and structural context, such as whether a question came from a text selection. We do not send question text, course titles or contents, document identifiers, email addresses, advertising identifiers or session recordings. Analytics is not linked to your waitlist email or website visit.
You can turn off Share anonymous usage analytics in Settings. Local development and automated test builds do not send production analytics. PostHog processes these events for product analytics; we disable person profiles and IP-based geolocation. Network providers still process connection metadata when delivering requests.
When Learnfold hits an error, crashes or stops responding, it sends a report to Learnfold's own service so we can find and fix the cause. A report includes what failed (the part of the app, the error type and its technical description), the error message shown to you if there was one, the app's last log lines before the problem (for example "connecting" or "page saved"), the app version and build, whether it is a TestFlight or App Store build, operating system version, device model, language setting, the type of learning agent you use, and a random installation identifier created only for error reports. Crash and hang reports also include the call stack Apple's MetricKit provides. Log lines can mention the name of a course or page when it appears in an error message; other log details are sent only when they are numbers, identifiers or known app states, so values that can hold what you wrote, read or named, such as messages, titles or folder names, are replaced before sending. Web addresses, server and IP addresses, file paths, email addresses, access tokens and quoted text are removed from error text. Reports never include your conversations, course contents, files, server addresses or credentials.
The installation identifier is not linked to your Apple Account, your Hosted identity, analytics or subscription. If you send feedback while error reports are on, the feedback carries the same identifier so we can match your report with the errors behind it; if that feedback includes your email address, your error reports can be associated with it. Reports are stored in Cloudflare D1 for 90 days; we receive an email when a new kind of problem first appears. Reports wait on your device while you are offline. You can turn off Share error reports in Settings, which also deletes reports not yet sent. Local development and automated test builds do not send reports. To request deletion of reports from your installation, contact [email protected].
When you send feedback from Learnfold, we receive the kind of feedback you chose, the message you wrote and, only if you enter one, your email address so we can reply. With Include app & device info on (the default, shown before you send), we also receive the app version, operating system version, device model, the type of learning agent you use (such as Apple, Hosted or Hermes) and, when you report a problem from an error screen, the error message shown. The course title is sent only if you turn on Include course title. We never send course contents, conversations, files, server addresses or credentials with feedback.
Feedback is stored in Cloudflare D1 and forwarded to us by email through Amazon Simple Email Service (SES). If you are offline, the report is kept on your device until it can be sent. To limit abuse, we use the same hourly, secret-keyed IP hash described below. To request deletion of feedback you sent, contact [email protected] with the approximate date you sent it.
Support email is received in iCloud Mail. A server-side rule forwards messages addressed to [email protected] to a dedicated Cloudflare Email Routing intake. We store a ticket number, sender address, subject, message text (up to 32,000 characters), attachment names and types, and delivery status in Cloudflare D1. Email attachments remain in the original iCloud message; the ticket system does not store their contents. In-app feedback also receives a ticket number. If you provide an email address, we may send a transactional acknowledgement through Amazon SES, with a copy to the Learnfold owner. Replies can be linked to the same ticket using its number and the sender address. This does not subscribe you to marketing. Ticket records are deleted after 180 days without activity; the original feedback and mailbox copies follow their own retention settings. Contact [email protected] to request deletion.
When you join, we store your email address, signup time and your agreement to receive Learnfold early-access updates in Cloudflare D1. When experiment measurement is enabled, we also associate the signup with the copy version and anonymous browser identifier. We use your email for early-access updates, not advertising lists. Duplicate addresses create only one entry. Signup does not verify ownership of the email address.
To limit abuse, we temporarily store an hourly, secret-keyed hash of your IP address and an attempt count. We do not store the raw IP address in the waitlist database. Expired limits are deleted during subsequent signup activity. We retain waitlist entries until early-access outreach is complete or you ask to be removed. Welcome emails are sent through Amazon Simple Email Service (SES), which processes your address and delivery information. Emails include an unsubscribe link; unsubscribing stops future waitlist emails and cancels queued messages. We retain a suppression record to respect your choice. To request deletion of your email, contact [email protected]. Joining the waitlist works even if you opt out of experiment measurement.
Our website compares two versions of its wording. A first-party cookie called lf_copy_v2 keeps your browser on the same version for up to 30 days. We store a hashed random identifier, the version shown, and the first time the page was viewed, an early-access link was clicked, or the example was explored. The test also records when a new waitlist signup is successfully saved. Analytics events do not include your email, IP address, browsing history, or course content.
These records are stored with Cloudflare. When PostHog is connected, the same anonymous identifier, copy version and event timestamps are sent to PostHog to compare conversion rates. We do not enable session recording or send form contents to PostHog. Cloudflare experiment records older than 90 days are excluded from reports and removed during subsequent website use. This cleanup does not delete events already sent to PostHog; those are subject to the PostHog project retention settings. Clearing this site's cookies removes your browser's assignment. Browsers that send Do Not Track or Global Privacy Control headers are excluded from assignment and measurement. Preview links are also excluded.
Learnfold is not directed to children under 13, and we do not knowingly collect personal information from children. A parent, guardian, school, or organization using Learnfold with a minor is responsible for selecting appropriate connected services and obtaining any required consent.
We may update this policy as Learnfold changes. We will post revisions here and update the date above.
For privacy questions or requests, contact [email protected].