PHOLUFor the moments that matter.
Google PlayMain
Last Updated: October 2026

Privacy Policy

Your privacy is the product. Memories are encrypted on your device before they sync, and we never sell your data.

01

What Information We Collect

Pholu is built so that as little as possible ever leaves your device:

  • Account information (email address, username)
  • Memory content you create (text, photos, audio), encrypted on your device before it syncs
  • Device information needed for sync and security
  • No advertising or third-party analytics SDKs are bundled in the app
02

Data Encryption & Security

Your memories are encrypted before they ever leave your device:

  • ChaCha20-Poly1305 client-side encryption
  • Encryption keys are held only on your devices
  • We cannot read the content of your encrypted memories
  • Local-first storage, with encrypted cloud sync on paid plans
03

How We Use Your Information

  • Provide and improve Pholu
  • Sync memories across your devices
  • Answer your requests to the AI assistant
  • Send important service notifications
  • Keep your account secure
04

Data Storage & Processing

Your data is stored securely and is never sold or shared with advertisers:

  • Encrypted cloud storage on Supabase infrastructure
  • Offline-first local cache on your devices
  • AI requests are proxied through our own backend to a third-party model provider, carrying only the memories relevant to what you asked, and are never used to train models
  • Cross-border transfers occur only where needed to run these services
05

Your Rights

You have full control over your data at all times:

  • Access all your data
  • Export your complete archive, media included, from inside the app
  • Delete your account and its data from inside the app
  • Choose whether to use the AI features at all
06

Children

Pholu is for people aged 16 and over. We do not knowingly collect personal data from anyone younger, and we ask you to confirm your age when you create an account.

Your memories will contain other people, including children, and for a family archive that is the point. Those photographs and recordings are encrypted under keys derived on your own device, and Pholu does not read them.

If you believe we hold an account belonging to someone under 16, write to support@pholu.app and we will close it and delete what it holds.

07

Contact Us

If you have any questions about this Privacy Policy, reach out at support@pholu.app and we will respond promptly.