Privacy Policy

Polas, by Housegram Srl · Last updated 16 October 2026

Polas is a photo-sharing app for friends. This policy explains what we collect, why, who we share it with and how to delete it. The data controller is Housegram Srl, Via Quirino Majorana 203, 00152 Roma, Italy (VAT IT16586921005). Contact: account@housegramsrl.com · PEC: housegram@legalmail.it.

What we collect

• Account: your email address (if you sign in with an email code) or your Sign in with Apple identifier, and your phone number if you choose to add it.
• Profile: username, display name and profile photo, which other users can see. Your first and last name, birthdate and interests are private: only you can see them. We use your birthdate to check you are at least 18.
• Polas: the photos, captions, hashtags, @mentions, voice notes and their transcripts, the place you tag and who can see each pola.
• Snapshots: the quick photos you share with friends for 24 hours.
• Interactions: comments and replies (text, voice or GIF), reactions, likes on comments, saved polas, moments (shared albums) and the week wraps you share.
• Friends and safety: your friend requests and friendships, invite links, the people you block and the polas you report.
• Contacts (optional): if you allow access, phone numbers are hashed on your device and only the hashes are compared to find friends already on Polas. Numbers are never uploaded in clear and your address book is never stored.
• Notifications: a push token for your device, to send you the notifications you can turn off in iOS Settings.

What stays on your device

Your live location is used only on your device to show you on the map and suggest nearby places; it is never saved or shared. A place is stored only when you choose to tag it on a pola. Voice notes are transcribed on your device with Apple's speech recognition. Camera and microphone are used only while you shoot a photo or record a voice note.

Who can see what

You choose the audience of every pola: all your friends, selected people, the members of a moment, or everyone on Polas for public polas (which can also appear in Discover). Snapshots are visible to your friends for 24 hours. Comments are visible to whoever can see the pola. If you share a week wrap, anyone with the link can see, on our website, your display name and the photos in it: your own polas and any public ones. Blocking someone hides your content from each other.

How and why we use it

We use your data only to run Polas: create your account, show your content to the people you choose, send notifications, help you find friends, and keep the service safe (reports, blocks, bans). The legal basis is the contract with you (Art. 6(1)(b) GDPR) and, for safety and abuse prevention, our legitimate interest (Art. 6(1)(f)). Contacts access is based on your consent, which you can withdraw in iOS Settings at any time. We don't sell your data, we don't show ads, we don't profile you for marketing and we don't track you across other apps or websites.

Service providers

• Supabase: database, file storage and login, on servers in the European Union (Ireland).
• Apple: Sign in with Apple, push notifications and place search (Apple Maps receives the text you search for and your approximate area).
• GIPHY: when you search for a GIF, your search text and IP address are sent to GIPHY; only the link to the GIF you pick is stored with your comment.
• Resend: sends your email login codes.
• Meta (WhatsApp Business): if you add your phone number, sends you its verification code on WhatsApp.
• Vercel: hosts this website, which uses no cookies and no analytics.

Some of these providers may process data outside the EU; in that case transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

Retention and deletion

We keep your data while your account exists. You can delete any pola, snapshot, comment or reaction at any time, and it is removed for everyone. Delete your account from Settings to permanently remove your profile, polas, snapshots, comments, reactions, moments, friendships, photos and voice notes. Residual copies in backups are erased within 30 days.

Your rights

Under the GDPR you can access, correct, export or delete your data, restrict or object to its processing, and withdraw consent. Write to account@housegramsrl.com and we will reply within 30 days. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali). Polas is only for people aged 18 and over.

Changes

If we change this policy we will update the date above and, for important changes, tell you in the app.