Amor Folio.
Privacy Policy
Who we are
Amor Folio is a therapy management and client wellbeing platform operated by Affiliate Therapy Ltd. This policy applies to all users of the Amor Folio platform, including therapists, counsellors, and clients (including students accessing the app through their organisation). Affiliate Therapy Ltd is the data controller for account and platform data. Therapists are independent data controllers for the clinical records they create within the platform; Amor Folio acts as data processor for those records.
What data we collect
Therapist accounts:
  • Account profile (name, email, provider identifier from Microsoft or Google)
  • Client records, session notes, risk assessments, and intake information you create
  • Calendar and session data linked to your connected calendar account
  • Organisation and team membership data (for multi-user accounts)
Client / student accounts (Amor Folio app):
  • Email address used to create your account
  • Journal entries you write (stored privately and never shared with your therapist or organisation)
  • Booking requests and confirmed session records with your therapist
  • Session credit balance linked to your organisation account
  • Push notification tokens (if you enable notifications)
How we use your data
We use your data only to operate the platform:
  • To authenticate your account and maintain your session
  • To display your sessions, journal, and booking history to you
  • To send you session reminders and updates (if notifications are enabled)
  • To allow therapists to manage bookings on their side
We do not use your data for advertising, profiling, or any purpose unrelated to providing the service.
Where data is stored
All data is stored on servers operated by Hetzner Online GmbH, a German cloud provider located within the European Union. Hetzner is certified under ISO 27001 and subject to GDPR. No data is processed outside the EEA. Amor Folio does not use US-based cloud infrastructure for the storage of any user or client data.
Authentication
Therapist sign-in is handled via Microsoft. Client / student sign-in uses a secure magic link sent to your email address — no password is required. Amor Folio stores only a secure identifier that links your account to your data; no passwords are ever held.
Encryption
All data is encrypted in transit using TLS 1.2 or higher. Sensitive tokens are encrypted at rest using AES-256-GCM. Volume-level encryption is enabled on all storage volumes.
Journal privacy
Journal entries in the Amor Folio client app are strictly private. They are never visible to therapists, organisations, or Amor Folio staff. They are stored under your account only and cannot be accessed by anyone else.
Who can access your data
  • You — you can always view and delete your own data.
  • Your therapist — can view confirmed session records relevant to your care. They cannot see your journal.
  • Your organisation — can see that you are registered and your session balance. They cannot see session notes or your journal.
  • Amor Folio staff — do not have routine access to clinical records. Access for support purposes requires explicit consent and is logged.
Notifications
If you enable push notifications in the Amor Folio app, we store a notification token on your device and on our server to deliver alerts. You can disable notifications at any time in your device settings.
Data retention and deletion
You can request deletion of your account at any time by contacting us. Deleted records are removed from live storage immediately and purged from backups within 30 days. Therapists are responsible for retaining clinical records for the minimum periods required by their professional body (e.g. BACP, UKCP, NCS) before deletion.
Cookies and tracking
Amor Folio uses session cookies only, to keep you signed in. We do not use tracking cookies, advertising cookies, or any third-party analytics that collect personally identifiable information.
Your rights
Under UK and EU data protection law you have the right to:
  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing or request restriction
  • Data portability
To exercise any of these rights, contact us at the address below.
Third parties
Amor Folio does not sell, share, or transmit your data to any third party. Microsoft is used for therapist authentication only. Hetzner processes data solely as an infrastructure provider under a data processing agreement with Amor Folio. Resend is used to deliver transactional emails (magic links, session confirmations) under a data processing agreement; email content is not retained by Resend beyond delivery.
Contact and complaints
For privacy queries, data subject access requests, or a copy of our data processing agreement: privacy@amorfolio.org

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Last updated: May 2026 · Affiliate Therapy Ltd · Registered in England and Wales