povletAbout this policy
Povlet (“we,” “us,” or “our”) provides the Povlet app and website. This policy explains how we handle personal information when you visit the website, create an account, share a Moment, or contact us.
Povlet is a private, two-person journal—not a public feed. Private sharing still involves storing information and delivering it to the person you connect with. Questions and privacy requests can be sent to surafelpovlet@gmail.com.
Information we handle
- Account details: your email address, chosen name, account identifier, and authentication information. If you choose an available Apple or Google sign-in option, we receive the information that provider makes available for authentication, such as an identifier and email address. We do not receive your Apple or Google password.
- Your journal: photos you submit, capture and submission times, your connection, invitations, notes, reactions, favorites, reveal status, and other choices you make in the app.
- Preferences and delivery details: your time zone, reminder schedule, notification preferences, installation identifier, device platform, and push notification token when notifications are enabled. A push token is a delivery address for your installation, not your phone number.
- Support and safety information: messages you send us, reports, block records, and information needed to investigate a problem or abuse.
- Technical information: our hosting and service providers may process IP addresses, request times, browser or device information, authentication events, and error or security logs to deliver and protect the service.
Photos and notes can reveal personal information about you or others. Choose what you share carefully, and only share material you have the right to share.
Why we use it
We use information to authenticate you, connect your journal with your chosen person, deliver and display Moments, preserve your history, operate optional notifications and widgets, answer requests, and keep the service secure. We also use relevant records to investigate abuse, resolve disputes, and meet applicable legal obligations.
Where a legal basis is required, we rely on performing our agreement with you for the core service; legitimate interests in operating a reliable service, preventing abuse, and providing support; compliance with legal obligations; and consent where required for optional processing. You can withdraw consent for optional permissions without deleting your account. Withdrawal does not affect processing that was lawful before withdrawal.
We do not sell your personal information or use your private photos for targeted advertising. The current app and landing website do not include advertising or cross-site marketing trackers.
Service providers and other disclosures
We use service providers to operate Povlet. These include Supabase for authentication, application data, and photo storage; Expo and the relevant Apple or Google delivery services for push notifications; Firebase Hosting for the website; and email providers for sign-in messages and support correspondence. Providers process the information needed for their roles under their applicable agreements and privacy terms.
When you open an email app, a sign-in provider, or a destination in the system share sheet, that service handles the information you send under its own terms. The landing page’s example photos and names are illustrative, not a live view of any user’s journal.
We may disclose relevant information where reasonably necessary to comply with law, respond to valid legal requests, protect rights and safety, or investigate abuse. If Povlet undergoes a merger, acquisition, or transfer, information may transfer with the service, subject to applicable law and notice of material changes.
Your device, permissions, and website storage
The app requests camera access when you choose to take a photo and notification permission when you choose to enable notifications. You can manage these permissions in device settings. Povlet does not require your address book or precise location to create a shared journal.
The app stores your session, preferences, loaded journal, downloaded photos, and photo drafts or queued uploads locally to support a responsive experience and offline access. Signing out clears the app’s account-scoped journal and photo data through its cleanup flow. This does not delete photos you separately exported or saved elsewhere.
The public landing website does not ask you to sign in or submit journal photos, and does not set advertising or analytics cookies. Fonts and sample images are served with the site. Your browser may cache these files, and the hosting provider may process technical request information. If you contact us by email, we receive the message and sender details you choose to provide.
Retention and deletion
We keep account information and shared journal content while needed to provide your account and retained journals, unless you remove your contribution or request deletion. Hiding a Moment, leaving a connection, uninstalling the app, and deleting your account are different actions.
- Remove a photo: use the Moment’s controls to remove your own contribution. File removal is processed in the background.
- Incomplete Moments: unreleased photos are scheduled for cleanup seven days after their 24-hour response window ends. Background processing and retries mean physical file removal may not be immediate.
- Delete your account: go to Us → Your account → Delete my account. This ends connections, removes identifying profile information and your photo references, disables notifications, and queues deletion of your stored photos and authentication account. Your partner’s own contributions are not deleted by your request.
- Limited retained records: minimal non-identifying relationship records may remain to preserve journal integrity. Support, safety, security, and legally required records may be retained where needed to handle a request, investigate abuse, meet a legal obligation, or resolve a dispute. Retention depends on that purpose and any applicable legal period.
Backups and service logs may retain residual information until they expire or are overwritten under the relevant provider’s retention settings. Removal from the active service does not mean instant removal from every backup. We cannot delete copies another person has saved outside the service. Contact us if you cannot access the deletion controls or need information about the status of a request.
Security and international processing
Povlet uses authenticated access, private photo storage, and encrypted network connections. It is not an end-to-end encrypted messaging service. No storage or transmission method is completely secure; protect your device, email account, sign-in links, and invitation codes.
Our providers may process information in countries other than yours, where privacy laws may differ. International processing must follow applicable data-protection requirements, including appropriate contractual or other lawful safeguards where required. Contact us to ask about the providers, processing locations, or safeguards relevant to your account.
Your choices and rights
You can update your name, change reminders, turn off the widget, hide Moments, remove your own photos, export your own contributions, leave or block a connection, and initiate account deletion in the app.
Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information; restrict or object to certain processing; and withdraw consent. Email surafelpovlet@gmail.com to make a request. We may need to verify that a request concerns your account and protect other people’s information. We will respond within the time required by applicable law.
You may also have the right to complain to your local data-protection authority. You do not need to give up that right to contact us first. Where applicable law provides additional rights, those rights remain available.
Age requirements
Povlet is not intended for children under 13. You must also meet any higher minimum age or parental-consent requirements that apply where you live. Where local law permits use with parental or guardian consent, that consent must be obtained before using the service.
We do not knowingly collect personal information from children under 13 or from users who do not meet applicable age requirements. If you believe a child has provided information in violation of these requirements, contact us so we can investigate and take appropriate action, including deletion where required.
Changes and contact
We may update this policy as Povlet or legal requirements change. We will update the date above and provide additional notice or seek consent when required for a material change. A policy update does not remove rights you already have under applicable law.
For privacy questions, support, or account requests, contact Povlet at surafelpovlet@gmail.com. You can also read our Terms of Service.