PLKA

Privacy Policy

Effective 10 September 2026

This policy is written in plain language on purpose. It describes what Polka actually does — the same rules the app itself is built and tested against.

The one-sentence version

Your photographs and voice recordings never leave your phone; your colours, notes, and settings sync to your account so a new phone can get your journal back; and we collect nothing else — no analytics, no advertising, no tracking, and nothing is ever sold or shared for marketing.

What stays on your phone, always

  • Photographs you attach to a day or use in a picture.
  • Voice recordings you attach to a day.
  • The pictures you compose in the Studio (their image files).

These are never uploaded, by design. The only way any of them leaves your phone is when you explicitly export or share one yourself, through your phone's own share sheet — and then it goes wherever you send it, not to us.

What syncs to your account

So that signing in on a new phone restores your journal, these are stored on our server, tied to your account:

  • Your days: the date, the colours you picked, the water (dilution) setting, the random seed that reproduces the painting, and when the day was completed.
  • Your notes: the short text you attach to each colour.
  • Your palette choices: which palette each month uses, and your eight custom colours.

Journal exports you create from Settings contain exactly this data — and the export file itself states what is and isn't included.

Your account

Polka needs an account so your journal can follow you. Depending on how you sign in, we hold:

  • Email & password: your email address and a hash of your password (we never see or store the password itself).
  • Sign in with Apple or Google: the identifier and email address the provider shares with us. We receive nothing else from them — no contacts, no profile data.

Where your data lives

Synced data is stored with Supabase, our hosting provider, in a database located in Canada (ca-central-1). Every row is protected by row-level security so that only your signed-in account can read or write your data — a boundary we test directly, with real accounts, as part of building the app. Connections are encrypted in transit, and your session is stored in your phone's encrypted keychain.

What we don't do

  • No analytics or usage tracking of any kind.
  • No advertising and no advertising identifiers.
  • No selling, renting, or sharing of your data with anyone.
  • No reading of your journal by us in the ordinary course of running the service. Your diary is yours.

Deleting your data

  • Sign out removes your journal and all media from that phone. What you've synced remains in your account, and comes back when you sign in.
  • Erase everything (in Settings) clears the phone while keeping your account and its backup.
  • Delete my account (in Settings) permanently destroys everything: every synced row on the server, your account identity, and everything on the phone. This is immediate, complete, and cannot be undone. No copy is retained.

Children

Polka is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, the new version will be posted at this address with a new effective date. We won't weaken the media-stays-on-your-phone rule — it's the point of the app, not a policy choice.

Contact

Questions, concerns, or data requests: owner@llamaluke.com. Polka is made by Luke Evers (Llama Luke).