Pollinate LLC · Effective 29 October 2026
Privacy Policy
Plain-language terms for a product built around trust. Questions or requests can always be sent to support@pollinateapp.xyz.
The short version
What you write is yours alone until you decide otherwise. Your gratitude journal is stored with your account on our servers, which is how it survives a lost phone, but a private entry can be read by exactly one person: you. If you choose to share a reviewed copy, it can be read only by your accepted connections and people who share an active hive with you. Your private original does not become a community post. There are no ads in this app. There is no third-party analytics, crash-reporting or tracking code in it either. We store only the activity needed to provide the features you use, protect the service and keep records such as Nectar reactions consistent. We do not sell your information or share it for advertising. The rest of this page is the same thing said precisely.
Who we are
This app is published by Pollinate LLC. We are responsible for the information described on this page. In data-protection terms, we are its controller. We are responsible for everything the app stores: your account, your journal, private notes and keepsakes, community posts, Nectar reactions, and stings attached to posts. The next sections say exactly what that means. Anything you want to ask or ask us to do, support@pollinateapp.xyz reaches a person.
What we collect
When you make an account we collect an email address. That address is the one you type, or, if you sign in with Apple, the one Apple gives us for you, which can be Apple's private relay address rather than your personal one. No password is created: you sign in with Apple or with a link we email you. You choose a display name later, the first time the app needs one. Some older accounts were made with a password. If yours was, it is handled by our authentication provider and stored only as a cryptographic hash. We cannot read it, and neither can anyone who works on this app. We do not ask for your phone number, and the app never requests access to your contacts, camera roll, location or microphone.
Your journal entries
Entries you write are stored with your account on our servers, whether or not you share them. Storing them is how your journal follows your account instead of dying with a phone. An unshared entry can be read from the app by exactly one account: yours. The database enforces that limit itself, the same way it protects shared entries, so a bug in the app cannot widen it. Your entries do reach our hosting provider because they are backed up with your account. No other app account can read a private entry. A small number of authorized operators may access stored data only when needed to secure or operate the service, respond to a request you make, investigate abuse, or comply with law. What happens when you leave is also plain: deleting your account permanently deletes every entry you never shared, and we cannot recover it through the app afterwards.
Private keepsakes and optional email delivery
Keepsake collections and letters belong to the adult account that creates them. A child does not need an account or email address. Collection names, letter titles and text are stored with your account. They are not shared with your connections or hives. Device drafts are also stored locally for recovery; they are not end-to-end encrypted. If email delivery is enabled and you confirm a recipient and date, we store that email address, delivery time and a separate copy of the letter. Later edits do not change the scheduled copy. Our email provider processes that copy to send it and may retain delivery records. You can cancel before sending begins; an email already being sent cannot be recalled. Delivery status describes the provider or recipient email server, not whether a person read it. PDF export creates a copy on your device or in your browser print preview. Copies you save, print or send are outside our control. Deleting your account removes your keepsakes and queued deliveries from the app, but cannot retract exported copies or emails already sent. Only send letters to recipients who expect them.
When you share gratitude
Sharing creates a separate, reviewed copy of the words you chose. Your private journal entry or sent note remains governed by its original private audience. The community copy never includes a note recipient or the private source itself. Community posts can be read by you, your accepted connections, and people who share an active hive with you. They are not available to every Pollinate member or to signed-out visitors. Blocking an account removes access even when you share a hive. These limits are enforced by the database, not only by the screen. You can remove your own community post. Removing it takes it out of the feed and removes its drops from Nectar rankings. Any separate original private note is unchanged.
Finding people
People are found by exact email address. If you search for one, you are told only whether an account exists and, if it does, that person's display name, and nothing more. There is no way to browse, list or search users generally, and a near-miss on an email returns nothing. We do this so the app cannot be used to work out who is on it.
Nectar and stings
Nectar is a non-monetary expression of love. You can add one drop to another person’s community post and undo it. We store your account, the post, its author, the first reaction time and whether the reaction is active. There is no spendable balance, purchase or cash value. Your current connections and shared hive members can see community-scoped drop totals and rankings for Nectar given and received. Rankings only count active drops among people in the viewer’s community on posts they can access; different circles can see different totals. We do not show a list of who reacted to each post. Undoing and re-adding a drop keeps its original time, and blocked people are excluded. Historical simulated gifts remain separate and never become leaderboard credit or real money. A sting is a lightweight reaction. We store who stung which post and when so each account can sting a post once and undo its own sting. People who can see the post see its sting count, not a list of who stung it.
What we do not do
We do not show advertising. We do not include analytics, attribution or crash-reporting tools. We do not sell your information, share it with data brokers, or hand it to anyone for their own marketing. We do not routinely read your entries, use them for advertising, or use them to train machine-learning models. Authorized access is limited to operating and securing the service, responding to you, investigating abuse, or complying with law. We would disclose information if the law genuinely required it of us, and we would tell you unless we were forbidden from doing so.
Where your information is kept
Accounts, comments, connections and journal entries, shared and unshared alike, are stored with our hosting provider, Supabase, in AWS US East (Northern Virginia). They hold this data on our behalf and do not use it for their own purposes.
How long we keep it
Journal entries, notes, community posts, Nectar records and stings are kept while needed to provide the app or preserve records already delivered to another person. Inactive reaction records retain the first reaction time so undoing and re-adding cannot inflate rankings. You can remove your community posts, and account details are kept while your account exists. When you delete your account: Your account, profile, private journal entries, private collections, scheduled notes, community posts, and Nectar reactions are deleted. Notes and historical simulated gifts already delivered to other people remain under their existing retention rules.
Getting your data, or deleting it
You can delete your account from inside the app: Account → Delete account. The screen tells you exactly what will be deleted before you confirm. If you would rather write to us instead, support@pollinateapp.xyz works too. For a copy of what we hold about you, or to have something corrected, email support@pollinateapp.xyz from the address on your account and we will act within 30 days. Export and correction have not been built into the app yet. That is why those two are an email rather than a button, and it is a gap we intend to close. Entries you never shared are part of your account, so deleting your account deletes them too.
Children
This app is not intended for children under 13, and we do not knowingly create accounts for them. If you believe a child has made an account, email us and we will remove it.
Changes to this policy
If we change how any of this works, we will change this page and the date at the top of it. For anything that meaningfully affects your privacy, we will tell you in the app rather than expecting you to re-read this. Questions about any of it: support@pollinateapp.xyz.