Privacy Policy
1. Who we are
Polygram is a dating and social platform for people whose relationships are negotiated rather
than assumed. This policy covers the Polygram iOS app and www.polygram.love. Polygram is
currently in private beta. For privacy questions or to exercise any right below, contact
privacy@polygram.love.
2. What we collect, and why
| Data | Why | Legal basis (UK/EU GDPR) |
|---|---|---|
| Email address | Sign-in (we email you a one-tap link; we do not store a password) | Contract |
| Date of birth | Verifying you are 18 or older. Locked after signup. | Legal obligation; contract |
| Display name, bio, headline | Your profile | Contract |
| Relationship structure, looking-for tags | Matching | Contract |
| Approximate location | Distance-based matching. See §4. | Contract |
| Intimacy declarations (what you are seeking, open to, or rule out) | The core matching constraint. Reveals data concerning your sex life and may reveal sexual orientation. | Explicit consent (Art. 9(2)(a)) |
| Health & accessibility context (optional) | Context you choose to share about chronic illness, disability, or recovery | Explicit consent (Art. 9(2)(a)) |
| Blocks and reports you file | Safety and moderation | Legitimate interest (protecting users) |
| Session tokens | Keeping you signed in. Stored in your device Keychain. | Contract |
| Audit records of consent and safety-relevant actions | Proving consent was given and reconstructing disputed matches or safety incidents | Legal obligation; legitimate interest |
We do not collect: contacts, browsing history, advertising identifiers, precise background location, or biometric data.
3. Special-category data
Your intimacy declarations and health context are special-category personal data under UK/EU GDPR Article 9. We handle them differently from everything else:
- They require their own explicit consent, recorded separately from your account terms, and stamped with the version of this policy in force at the moment you consented.
- Withdrawing that consent deletes the underlying records — it does not merely hide them.
- Our staff cannot read your health context through any ordinary path. Access requires an audited emergency (“break-glass”) procedure that records who accessed it, when, and the written reason, and that record cannot be deleted or altered by anyone, including us.
- They are excluded from any analytics.
4. Location
Your exact coordinates never leave our database. Other users see a deliberately fuzzed point and a distance rounded into 500-metre buckets. The precision radius is yours to set. We do not track your location in the background.
5. Who we share data with
We do not sell personal data and we do not share it for advertising or cross-context behavioural advertising. We use these processors:
| Processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication, and sign-in email delivery | United States (us-east-1) |
| Cloudflare, Inc. | Hosting www.polygram.love and the sign-in link page | Global CDN |
| Apple Inc. | App distribution and beta testing (TestFlight). Apple provides us aggregate crash and install data. | United States |
We may disclose data where legally required, or where necessary to protect someone from imminent harm. Transfers out of the UK/EEA rely on Standard Contractual Clauses with the processors above.
6. Artificial intelligence
Polygram does not use artificial intelligence to make decisions about you. Matching is a deterministic, explainable set of rules over declarations you typed yourself — there is no machine-learning model ranking you, no automated profiling with legal or similarly significant effects, and no AI chatbot in the product. We do not use your data to train AI models, ours or anyone else's. If this ever changes, we will update this policy and ask for your consent before the change applies to you.
7. How long we keep it
| Data | Retention |
|---|---|
| Profile and account data | Until you delete your account |
| Intimacy declarations / health context | Until you withdraw consent or delete your account, whichever is first |
| Deleted accounts | A short grace window during which you can cancel, then permanent purge |
| Safety reports and moderation records | Retained after account deletion where needed to protect other users |
| Consent and audit records | Retained as proof that consent was given and lawful process followed |
8. Your rights
Wherever you live, you can: access your data, correct it, delete your account and data from inside the app, export a copy, withdraw consent at any time, and object to processing based on legitimate interests.
Narrowing what you share is never gated: adding a limit, withdrawing an intimacy dimension, or revoking a consent is always free, always immediate, and never placed behind a subscription or a waiting period.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not offer financial incentives for data. You have rights to know, delete, correct, and to limit use of sensitive personal information; exercising them will never result in discriminatory treatment.
UK/EU residents: you may lodge a complaint with your supervisory authority.
Exercise any right in the app (Settings) or by emailing privacy@polygram.love. We respond within 30 days.
9. Security
Access rules are enforced by the database itself, per row and per column, rather than by app code that could be bypassed — an attacker holding our public app key still cannot read another member's data. Sign-in uses one-time links bound cryptographically to the device that requested them, so an intercepted email is useless elsewhere. Tokens are stored in your device's Keychain. Uploaded media is unviewable until it has been scanned. No system is perfectly secure, and we will notify you and the relevant regulator of a qualifying breach without undue delay.
10. Children
Polygram is strictly 18+. Age is verified server-side at signup and cannot be edited afterwards without support review. We do not knowingly collect data from anyone under 18; if we learn we have, we delete the account and its data.
11. Changes
Each version of this policy carries a version number, and your consent records store the version in force when you gave them. Material changes — particularly to special-category processing — will be notified in-app and, where required, re-consented rather than assumed.