Privacy Policy

How: open the Google Play listing, or open the game. Everything in this group is visible from one or the other, right now, without trusting anything written here.

• The package asks for no network permission. On the store listing, under App permissions, Google prints the list it extracts from the package itself — not from our description of it. For Fold that list contains no internet access. This is the single claim the rest of this notice leans on hardest.
• The game works with the handset offline. Put it in flight mode and play. Every sheet, crease and dot is already on the device. Nothing stalls, nothing queues up to be sent later, and no banner appears asking you to reconnect.
• There is no account and no sign-in. It opens on a sheet of paper. No registration screen, no profile, no nickname, no e-mail field. You are never asked for a name, an address, a telephone number or a date of birth.
• There is no advertising. Play as long as you like. No banner, no interstitial between papers, no rewarded video, no sponsored anything.
• There is no consent dialogue, because nothing asks for consent. Consent is a lawful basis for processing data. Where nothing is processed, there is nothing to consent to, and so no box appears on first launch.
• Clearing the data really does clear it. Android Settings → Apps → Fold → Storage → Clear data. Your packs lock again, your best fold counts vanish, and half-folded papers reset. Nothing comes back, because there was never a second copy to come back from.

What the game writes on your device

One small file, so that an interrupted fold survives being interrupted: which packs and papers you have opened and finished, your lowest fold count on each, the exact state of a paper you walked away from, and your settings. Android allots each app a storage area walled off from the rest, and the file lives there. Whether the Regulation reaches it is slightly the wrong question: responsibility follows possession, and possession here is yours, on a device you bought.

How: inspect the installed package. Android Studio's APK Analyzer will show you the merged manifest and every library compiled in; aapt2 dump badging will list the permissions from a command line; and an independent scanner such as Exodus Privacy will report the trackers it finds. None of these tools belong to us and none of them take our word for anything.

• No advertising SDK is compiled in. Not AdMob, not a mediation layer, not a fallback network. There is no ad slot in any screen and no code path that could request a creative.
• Nothing measures you. No Firebase, no Crashlytics, no quietly rolled counter of our own either. Which sheets people give up on, how long an evening with the game runs — these are things we could have found out and decided not to. The practical cost is real: a crash reaches us only when a human takes the trouble to describe it.
• No billing library. Nothing inside Fold can be bought: no purchases, no subscriptions, no paid hints. Payment details are not protected here so much as absent — no orders, no addresses, no digits.
• Nothing is read that would single you out. No advertising identifier. No Android ID, serial, IMEI or hardware address. No catalogue of what else you have installed. And no locally generated token quietly performing the same function under a friendlier label.
• Nothing else is requested either. The manifest asks for no camera, no address book, no position, no microphone and no access to your files — unrequested means unreachable. Were this game ever to raise a permission prompt, treat it as a sign that something is badly wrong.
• Nothing browser-shaped is stored. The game is compiled Android code rather than a web page wrapped in a shell, so the whole vocabulary of cookies, pixels, tags and beacons simply has nothing to attach to here.

One claim about this very page, in the same tier

The page you are reading sets no cookie and runs no analytics — view the source and see. One request does go out, and only one: the pair of typefaces is served by Google Fonts, which means your browser calls Google and Google learns which address called. Whatever passes in that exchange stays between the two of you. Your browser's network panel will confirm both halves of that sentence in about ten seconds.

How: read Google's own privacy notice and your Google account settings. These are things Google does, under Google's responsibility, and our saying so adds nothing to the evidence. We include them because a notice that described only our own code would leave you with a tidier picture than the truth.

• Installing anything leaves a record with Google. Your Play account acquires a record of the download, made by Google under Google's own notice and on Google's own responsibility. It is created before any code of ours executes, and declining ever to open the game does not remove it.
• The operating system reports to its maker. Whatever was ticked during the handset's first-run setup determines how much Android sends Google about the programs executing on it — a sweep that catches Fold along with everything else. Being caught in it is not something an app opts into, and no app can opt out on your behalf. The lever is in your device settings.
• What a publisher sees is a dashboard, not a list. The Play Console offers totals: how many downloaded it against how many removed it, which countries, which Android releases, which handsets, and a mean star rating. Google assembles each figure out of many people, and the console provides no screen that resolves down to one of them.
• A public review reaches us with a name on it. Leave one and we see the display name on your Play profile, the stars, the words and the date, with a public reply box underneath that we may use. It is the only route that brings an identifiable person to us without a letter, and it is one you open yourself. Only you can close it: edit or delete the review in the Play Store. Keep anything private out of it.

Your rights under the GDPR bite properly against Google for everything in this group, because Google holds it and we do not. The controls are in your Google account under privacy, and Google publishes a route for formal requests.

How: you cannot. Nothing in this group leaves a trace you could inspect, and anyone willing to lie in a privacy notice would write exactly the same sentences. What exists instead is recourse — a regulator with the power to ask us questions we are obliged to answer. That is named at the end of this group, and it is the honest answer to why should I believe you.

• A letter you send us is kept only while the matter is open. Send a message and from that moment Appletify AS is holding your return address along with the contents. It stays for as long as the conversation needs it, then goes; it joins no mailing list and is shown to no third party. Article 6(1)(f) supplies the basis — answering correspondence addressed to you is about as plain a legitimate interest as exists.
• Nobody else reads it. No processor is engaged — no host of our own, no backend, no helpdesk, no contractor — so there is no Article 28 agreement anywhere in this notice. The mailbox is read by the director and by nobody else.
• No data of yours leaves the EEA because of us. Chapter V exists to govern such departures, with its clauses, adequacy findings and derogations. None of that apparatus is invoked here, for want of anything to invoke it over.
• Nothing is sold, shared or profiled. No marketing, nobody segmented, no machine reaching conclusions of the sort Article 22 is written about.
• The Data safety form in the Play Console says the same as this page. It declares no data collected and no data shared. You can read the form on the store listing; what you cannot check is that we keep the two in step on every release, and we are saying that we do.

What you may ask us for

Through the EEA Agreement the Regulation binds Norway, and LOV-2018-06-15-38 — personopplysningsloven — is how it was written into domestic law. Out of it come eight entitlements, which are yours irrespective of anything printed here — which is the point of putting them in this tier rather than an earlier one, since our willingness to honour them is itself unverifiable until you try.

• Access Art. 15What do you hold? Nothing, unless a letter or a review is it.
• Rectification Art. 16Fix an error. No record of you exists to be wrong.
• Erasure Art. 17Wipe it. Say so and the letter goes; the handset file you control already.
• Restriction Art. 18Pause the processing. None is running to pause.
• Portability Art. 20Hand it over in a usable form. There is no dataset to package.
• Objection Art. 21Object to legitimate interest or marketing. Only the first applies, and only to your own letter.
• Automated decisions Art. 22Keep the machines out of it. Nothing in Fold judges you.
• Withdraw consent Art. 7(3)Take it back. None was asked for in the first place.

No fee is charged, no template is required, and a month is the outer limit on a reply. The Regulation itself grants two pieces of latitude, which it is only fair to flag: a request so unspecific that we cannot work out whose data is at issue may be answered with a question, and one that is plainly disproportionate — or that simply arrives again and again — may be refused outright.

Children

Fold suits any age and is not aimed at children in particular, nor enrolled in a children's programme on the store. Personopplysningsloven § 5 puts the threshold for a minor's own consent to an information society service at 13 in this country. The number is beside the point for Fold: no agreement is solicited from anyone, at thirteen or at sixty. We do not knowingly hold personal data about a child; a letter that plainly came from one is deleted rather than answered.

The recourse, which is the real answer to this tier

If you think anything above is false, you do not have to argue with us and you do not have to prove it yourself. In Norway the body with that power is Datatilsynet — Postboks 458 Sentrum, 0105 Oslo, or datatilsynet.no — and it can compel Appletify AS to answer questions that no web page could settle for you. An EEA resident elsewhere may raise the identical complaint with their own national authority, and court proceedings belong where that person lives. If you would rather start with us, crease@appletify.monster is open — but that is an offer, not a step you are required to take first.