Privacy Policy

Last updated: 8 June 2026

Studfolio is a LEGO collection tracker for Android with optional social features. This page explains what information the app collects, why, and how it is handled. If anything is unclear, email contact@studfolio.net.

What we collect

• Account. When you sign up we store your email address and a salted hash of your password. We never store your password in plain text.
• Your collection. The sets and minifigures you add, your quantities, conditions, notes, custom collections, wishlist entries, and the timestamps of those entries.
• Social profile (only if you opt in). When you join Studfolio Social we store the date of birth you provide (to verify you are 13+), your chosen display name, your collection visibility settings, and the relationships you create with other users (friends, follows, blocks, hearts, friend requests).
• Push notification tokens (only if you accept push permissions). A Firebase Cloud Messaging device token used to deliver friend-request alerts and other in-app notifications. We never read the contents of your device.
• App diagnostics. Standard server logs (IP address, request path, response code, timestamp) are kept short-term to debug errors and prevent abuse.

We do not collect contacts, location, advertising IDs, browsing history, or any other data not listed above.

What other people can see

Until you join Studfolio Social, no one can see anything about your account or collection. After you opt in:

• Public collections appear in search and the Discover feed, and are visible to anyone using the app — including their item lists, totals, and any hearts you have received.
• Friends-only collections are only visible to people you have accepted as friends.
• Private collections are visible only to you and remain excluded from all public listings.
• Wishlist visibility is a separate setting (Public / Friends / Private) you control during opt-in and from Social Settings.
• Item-level details like personal notes, purchase prices, and conditions are NEVER shared on any public surface, even on public collections.

You can change any visibility setting at any time from Social Settings. You can also block other users to remove them from your view entirely.

Camera and photos

The Scan feature uses your camera to identify a LEGO piece. When you press the shutter, the captured image is sent to Brickognize, an image-recognition service for LEGO parts. The image is used only to return a candidate part ID and is not retained by Studfolio. We do not request, upload, or store photos from your gallery.

Third-party services

To enrich your collection with prices, names, and images — and to deliver notifications — Studfolio's server uses:

• BrickLink — for catalog metadata and current marketplace prices.
• BrickEconomy — for current values and pricing history.
• Brickognize — only when you use Scan (see above).
• Firebase Cloud Messaging (Google) — only if you opt into push notifications, to deliver alerts to your device.
• Google Play Billing — if you purchase Studfolio Pro, to verify your subscription server-side.

Catalog-pricing calls are made by our server, not by your device, and they do not include your account identity. Only set/figure IDs leave our system.

Where data is stored

Account, collection, and social data is stored on a single managed server we operate. Connections to the server are encrypted with TLS. Backups are encrypted at rest.

How long we keep it

Your account, collection, and social data are kept for as long as your account exists. Server access logs are kept for up to 30 days. If you delete your account, all associated data — including your social profile, friendships, hearts, follows, and feed history — is removed within 30 days.

Sharing and selling

We do not sell your data and we do not share it with advertisers. No third-party analytics or tracking SDKs are embedded in the app.

Your rights

You can view, export, or delete your data at any time. To export or request deletion, email contact@studfolio.net from the address tied to your account. Deletion is honored within 30 days. You can also leave Studfolio Social at any time from Social Settings, which removes your profile from public listings and clears your relationships.

Children

Studfolio is not directed to children under 13. Studfolio Social requires you to confirm during opt-in that you are at least 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top and, for material changes, notify you in the app on next launch.

Contact

Questions or concerns? Email contact@studfolio.net.