Draft · App policy pending review
Your shelf stays
on this phone.
This is a draft of the app’s privacy policy. It will be reviewed and completed before the app is released.
Last updated: October 30, 2026.
On your phone
Your shelf is kept in an encrypted database on your phone, with its key held in the phone’s protected key storage. No account exists. Dewfolio does not upload your shelf, and does not use analytics, advertising, or crash-reporting services. App data is excluded from the phone’s cloud backups.
Only when you choose
Barcode decoding and label reading happen on your phone. Online barcode lookup is optional. In the first Shelf release, approving a lookup sends the barcode to Open Beauty Facts; your connection’s IP address and the app’s name reach that service too. Choosing a provider photo makes another request. Nothing else from your shelf is sent. Follow the app’s disclosure before choosing a lookup.
Links you tap open in your browser. Sharing a card, spreadsheet, backup, or diagnostics happens through an app you choose in your phone’s share sheet.
Your copy, your choice
You can export the shelf as a CSV spreadsheet file. CSV files are plain text. An encrypted backup is protected by a passphrase you choose and can be used to restore on another phone. You choose where to keep an export or backup and whom to share it with. You can delete your data from within the app.
Photos and the coming Diary
Label reading is performed on the phone. The private photo Diary is a later release. Its full data practices will be included here before it is available; this draft does not describe it as a released feature.
This website
This site sets no cookies and runs no analytics. Fonts and page assets are served from the same website. There are no advertising pixels, third-party embeds, or email-capture forms. Following a store link leaves this site and opens the store.
If you choose a light or dark appearance, this site saves that choice in your browser. The preference stays on your device and is not sent anywhere.
Your browser sends connection information to the website host to request a page. The host’s identity, access-log practices, and retention details will be added before the site is published.
Contact and final policy
A support and privacy contact will be added before launch.
The final policy will identify the publisher, contact details, hosting practices, and the exact data practices of the released app. This draft is not the final store privacy policy.