SpellfoldA candlelit chamber of small rituals.

Privacy policy

Updated October 18, 2026.

In short: everything you write in Spellfold stays on your device. Crash reports and five fixed usage events go to Google’s Firebase, never with your words. There are no accounts, no ads and no tracking.

Your Spellfold on your device

Spellfold stores what it needs on your device: intentions and requests you type, the spells and words prepared for you, the progress of an unfinished altar, your journal pages and margin notes, bookmarked pages, and your settings for music, sound effects, Morwen’s voice, captions and fold gestures. You do not create a Spellfold account, and there are no Spellfold servers.

Personal words on your device

When you ask Morwen for personal words, Spellfold uses Apple’s on-device Foundation Models where your device supports them and Apple Intelligence is turned on. Your request is processed on the device; Spellfold does not send it to any AI server. When that model isn’t available, Spellfold uses its own authored words instead.

Morwen’s voice

Morwen’s voice is synthesized on your device by a speech model that ships inside the app. Her lines, including any personal words, are never uploaded to be spoken. Spellfold does not use the microphone and does not record you.

Sharing

“Share this page” uses the iOS share sheet. Nothing leaves your device until you choose where it goes. A shared page contains the spell’s name and school, your intention, the incantation, the reflection and your notes, so review it before sending. The app or service you share to handles it under its own terms.

iPhone Duo

On iPhone Duo, Spellfold reads the hinge’s position so a gentle fold can turn a page or seal a ritual. Hinge readings are used on the device in the moment and are not stored or sent anywhere.

Crash reports

Spellfold uses Firebase Crashlytics to receive crash reports and limited diagnostic information needed to find and fix app failures. Reports can include a random installation identifier, app and operating system versions, device model, crash time and stack traces. If saving or opening your journal fails, a report records only which of those two operations failed. Reports never include your intentions, spells, journal or notes, and they are not used for advertising or cross-app tracking. Google states that Crashlytics retains crash traces and associated identifiers for 90 days before beginning deletion from live and backup systems. Firebase privacy information.

Advertising and analytics

Spellfold uses Firebase Analytics to understand how the chamber is used, through five fixed events that carry no details at all:

Firebase also measures app sessions and first opens, and derives an approximate region from a masked IP address. This does not use Location Services or show a location permission prompt. Analytics advertising storage, advertising personalization, user IDs, IDFA, IDFV, automatic screen reporting and cross-app tracking are disabled. We never send which spell you chose, your intentions, generated words, journal pages or any other text. The app contains no advertising and does not sell your data. It does not request access to your contacts, photos, location, camera or microphone.

App Store privacy details

On the App Store, Spellfold lists coarse location, device ID and product interaction as collected for analytics and associated with a random app-installation identifier (never your name, email or Apple Account), and crash data and other diagnostic data as collected and not linked to you. None of it is used for tracking.

Children

Spellfold is not directed at children under 13.

Storage and your choices

Your journal and everything else you write stay on your device until you delete them. Remove a journal page from its page; clear an unfinished altar from the ritual menu. Deleting the app removes everything it stored on your device. Device backups may include app data until those backups are replaced. Music, sound effects, Morwen’s voice, captions and fold gestures can be switched on or off in the app. The app currently has no in-app switch for crash reports or analytics. Reports and events already sent to Firebase are kept under Google’s policies.

Support website

These public pages are served by Cloudflare. Cloudflare processes standard request information, such as IP addresses and user agents, to deliver and protect the website. See Cloudflare’s privacy policy. These pages set no cookies and run no scripts, analytics, advertising or tracking. We see only aggregated request counts.

Policy updates

This policy describes the current app. The policy and its updated date will change if the app’s data practices change.

Support and privacy questions

For support or privacy questions, contact us at webmaster@qwertywelch.com. If you email us, we receive your email address and the information you choose to include so we can respond.