Your portfolio data.

FolioGP is operated by FolioGP UK.

What is stored

We store your account email, name, a one-way password hash, sign-in sessions, and the information you choose to add: your professional profile, learning notes, reflections, development goals, supporting documents and appraisal reviews.

Who can see it

Your portfolio is available after sign-in. An appraiser assigned by email can access the submitted snapshot and its supporting files after signing in with that email, while your paid annual access is active. Appraisers do not need their own paid plan. Hosting and service administrators may have technical access to stored records.

Hosting and service providers

Application records and uploads are stored on the operator’s Netcup server. Zoho sends account and review notification emails. Mollie handles payment details on its hosted checkout. FolioGP stores checkout references, amounts, status and annual access periods; it does not receive your card details. No AI service processes portfolio content.

Sign-in and monitoring

A secure sign-in cookie lasts up to 30 days unless you sign out, reset your password or the administrator revokes access. Temporary limits protect sign-in and email requests. Caddy access logs are used for troubleshooting and daily visitor estimates. The separate server monitor receives aggregate counts, not account emails, portfolio content, raw IP addresses or payment identifiers. Visitor identifiers are hashed with a server-held salt and change daily. Monitor history is kept for 30 days.

Keep patient details out

Use anonymised reflections and evidence. Do not upload patient-identifiable records, consultation recordings or clinical records.

Export, retention and deletion

A raw JSON export of your data is available without a subscription. Printable reports, completion and appraiser sharing require an active paid year. You can delete learning entries and goals. Submitted snapshots and archived supporting files remain stored to preserve the review record. Accounts and portfolio records are kept until the operator processes a deletion request; server backups follow the operator’s backup policy.

Account links expire after 30 minutes. Sent email bodies and recipients are cleared from the application’s delivery queue; delivery status is retained for up to 30 days. Failed or pending messages are retained for troubleshooting.

For account, data access or deletion requests, contact hello@foliogp.uk.