PolariPrivacy policy
Polari · last updated 24 October 2026
Polari is a guided-audio app for gay and bi men's sexual wellness. We built it to keep as little about you as possible: most of what's personal (your name, favourites, ratings, greeting audio) stays on your phone. This page lists exactly what leaves your phone, where it goes, how long it's kept, and how to delete it. It covers the Polari apps (the iPhone app and the web app at app.polari.fit) and this website, polari.fit.
Who we are. Polari is run by [LEGAL NAME] ("we"), the data controller. Contact: hello@polari.fit.
The short version. No ads, no tracking across apps or websites, no data brokers, and we never sell or rent your data. Polari is for adults (18+) only. You can delete your account and everything linked to it inside the app (Settings → Account → Delete my account).
What stays on your phone only
These are stored in the app on your device and are never sent to our server:
- Your name or nickname (used for on-screen greetings).
- Your favourites, your copy of the ratings you gave, guide checklist ticks, ambience and playback-resume settings.
- Your personal greeting audio clips (if you turn that feature on), and which notices you've seen.
- Cached app files and audio (including sessions you download in the iPhone app), so the app loads quickly and works offline.
Deleting your account (or deleting the app) wipes this data from the device.
What our server keeps, linked to your account
| Data | Why | Kept |
|---|---|---|
| Email address and a one-way (Argon2) hash of your password | Your account and sign-in | Until you delete your account |
| Sign-in session (a cookie; the server stores only a keyed hash of it) | Keeping you signed in | 30 days, or until you log out |
| Settings: pacing, weekly target, active program, narrator voice, usage-stats choice, the audio version you picked per session | Making the app work the way you set it | Until you delete your account |
| Progress: which sessions and articles you completed, and when | Your plan and streaks | Until you delete your account |
| Usage stats (only if you turn on "Help improve Polari — share usage stats"; it is off until you do): app opens, which items you view and for how long, play / pause / seek / finish / close with playback position and time listened, the voice played, favourite added or removed | Understanding which sessions work, to improve the content | Until you turn the setting off (that deletes them immediately) or delete your account |
| "About you" (optional, only while usage stats are on): gender, age range, sexual orientation, country. Each can be left as "Prefer not to say" | Understanding who Polari serves | Until you change them, turn usage stats off (clears them) or delete your account |
| Which in-app announcements you dismissed or opened | Not showing them again | Until you delete your account |
| Audio versions you asked the app to make (session and voice settings) | Rendering and listing them | The audio is shared content and stays; the link to you is removed when you delete your account |
| Invites: the invitee's email and who sent the invite | Invite-only sign-up | Deleted with the account of the person invited; unused invites you sent are deleted with your account |
Usage stats and "About you" are used only in aggregate by the small team that makes Polari's content. Turning usage stats off in Settings → Privacy deletes what was collected and clears your "About you" answers.
What our server keeps that is not linked to you
- Session ratings. Stars, optional follow-up answers and an optional comment (up to 500 characters) about a session. They are stored without your account, email or any device identifier: your phone makes a random id per rating, and the server keeps only a one-way hash of it so you can edit or remove that rating later from the same phone. Because ratings can't be traced back to you, they are kept after you delete your account. Please don't put personal details in comments. To remove a rating, clear it in the session before deleting your account.
Personal greeting (optional)
If you turn on "Greet me by name", your first name and a one-time encryption key made by your phone are sent to our server, which turns the name into short audio clips. The name and key are held in memory only while the clips are made and are never written to disk or logs. The clips are encrypted with your phone's key, so the server can't play them; they wait on the server until your phone picks them up, at most 48 hours, and are then deleted.
AI-written reports (no personal data)
Polari has no AI chat, and nothing you type or listen to is sent to an AI service. To write internal reports for the content team, we may send aggregated usage statistics (counts and averages, never individual users' data or rating comments) to OpenRouter, which passes them to an AI model. Those requests ask OpenRouter to use only model providers that don't store or train on the data.
Cookies and tracking
The Polari app uses one strictly necessary cookie (polari_session) to keep you signed in. There are no advertising or analytics cookies,
no third-party SDKs, no advertising identifiers, and no tracking across other companies' apps or websites.
This website (polari.fit) sets no cookies at all, has no analytics or trackers, and loads nothing from other companies' servers.
Hosting, logs and security
Our server is hosted by Microsoft Azure in the Germany West Central region (Frankfurt, Germany). Traffic to Polari passes through Cloudflare, our network and security provider: it delivers this website and protects the service from attacks, so it sees network traffic in transit (such as your IP address and the pages or files your device requests). Cloudflare acts as our processor.
Our server does not keep request logs. It keeps short error messages for troubleshooting, without your personal data. To slow down password guessing, failed sign-in attempts are counted in memory for 15 minutes by network address and email, and never stored. Data travels over HTTPS.
Deleted data is overwritten in the database, not just marked as free. The server is backed up daily with encrypted Azure virtual-machine backups, which are kept for 30 days; after you delete something, it can remain in those backups until they expire, at most 30 days later. Backups are only used to restore the service after a failure.
Who we share data with
- Microsoft (Azure), our hosting provider, which runs the server and stores its backups, as our processor.
- Cloudflare, our network and security provider, which handles traffic in transit, as our processor.
- OpenRouter (and the AI model provider it routes to), only for aggregated reports with no personal data, as described above.
- Authorities, only if the law requires it.
We never sell, rent or share your data for advertising.
Deleting your data
In the app: Settings → Account → Delete my account. This permanently deletes your account and everything linked to it on our server (email, password hash, settings, progress, usage stats, "About you" answers, audio picks, announcement history, unused invites you sent) and wipes Polari's data from that phone. Anonymous session ratings remain because they are not linked to you. You can also email hello@polari.fit and we will delete your account for you.
Your rights
Depending on where you live (for example under the EU/UK GDPR), you can ask to access, correct, export or delete your data, object to or restrict how we use it, and withdraw consent at any time (usage stats can be switched off in Settings → Privacy, which also deletes them). Write to hello@polari.fit. You can also complain to your local data protection authority.
Adults only
Polari is only for people aged 18 or older. Creating an account requires confirming you're 18 or older. If we learn an account belongs to someone younger, we delete it.
Health information
Polari is for wellness and pleasure practice, not medical advice. If something persistently worries you (pain, erection or ejaculation problems), talk to a doctor.
Changes
If we change what we collect, we'll update this page and tell you in the app before the change applies.