Poralab ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, protect, and disclose information when you use the Poralab mobile application ("App").
By using Poralab, you agree to the practices described in this Privacy Policy.
1. Information We Collect
Depending on how you use Poralab, we may collect the following types of information:
Personal Information
When you create or use an account, we may collect information such as:
- Name or username
- Email address
- Phone number, if provided
- Profile information
- Profile picture, if provided
- Account authentication information
User-Generated Content
If Poralab allows you to create, upload, send, or share content, we may process information such as:
- Messages and chat content
- Posts, comments, or other content
- Photos and images
- Files or other content uploaded by you
Device and Technical Information
We may automatically collect certain technical information, including:
- Device model
- Operating system and version
- App version
- IP address
- Device identifiers, where permitted
- Crash reports and diagnostic information
- App performance and usage information
We use this information primarily to operate, secure, maintain, and improve the App.
2. How We Use Your Information
We may use collected information to:
- Create and manage your account
- Provide and operate Poralab's features
- Authenticate users
- Enable communication and messaging features
- Provide notifications
- Maintain and improve the App
- Detect, prevent, and investigate fraud, abuse, or security issues
- Troubleshoot technical problems
- Monitor app performance
- Comply with applicable laws and legal requirements
We do not use your personal information for purposes unrelated to the operation of Poralab unless permitted by law or with your consent where required.
3. Messages and Communications
If Poralab provides messaging or communication features, messages and related information may be processed and stored to provide those features.
We may process communication data for purposes such as:
- Delivering messages
- Maintaining message history
- Synchronizing messages across supported devices
- Preventing abuse and protecting platform security
- Troubleshooting delivery or technical problems
We do not intentionally access private communications except when necessary to provide the service, maintain security, comply with law, or when required by the operation of the relevant feature.
4. Photos, Files, and Other Content
If you choose to upload a photo, file, or other content to Poralab, the content may be processed and stored as necessary to provide the feature you requested.
You should only upload content that you have the right to share.
You may be able to delete content through the App, depending on the relevant feature.
5. How We Share Information
We do not sell your personal information.
We may share limited information with service providers that help us operate Poralab, such as providers for:
- Cloud hosting and databases
- Authentication
- Push notifications
- Analytics and diagnostics
- Security and fraud prevention
- Other infrastructure required to operate the App
These providers may process information only as necessary to provide services to us and are expected to protect the information they process.
We may also disclose information when reasonably necessary to:
- Comply with applicable laws or legal processes
- Respond to lawful requests from authorities
- Protect the rights, safety, and security of Poralab, our users, or others
- Detect or prevent fraud, abuse, or security threats
6. Data Security
We take reasonable technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction.
However, no electronic storage or transmission method can be guaranteed to be completely secure. Therefore, we cannot guarantee absolute security of your information.
7. Data Retention
We retain personal information only for as long as reasonably necessary to provide our services, maintain account functionality, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate interests.
When information is no longer required, we may delete or anonymize it in accordance with our applicable data retention practices.
8. Account and Data Deletion
You can request permanent deletion of your Poralab account and the personal information stored with it, without opening the app, at https://poralab.com/delete-account/. You may also email support@poralab.com from the address on your account.
Some information may need to be retained for a limited period when required by law, security requirements, fraud prevention, dispute resolution, or other legitimate purposes.
9. Children's Privacy
Poralab is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be at least 13 years old to create an account or use the App. If you are under 18, use Poralab only with a parent or guardian's permission.
If you believe a child under 13 has given us personal information, email support@poralab.com. We will delete that account and the information that came with it.
10. Third-Party Services
Poralab may use third-party services to help provide, maintain, secure, and improve the App.
Such third-party services may independently collect or process information according to their own privacy policies.
Where applicable, we will identify relevant third-party services and provide appropriate information about their role in our services.
11. Advertising
Poralab may display advertisements from Google AdMob, Unity Ads, Meta Audience Network (Facebook), Pangle (TikTok for Business), and Start.io. These providers may collect and process certain information, including IP address, device and account identifiers (such as the Android advertising ID), app interaction information (such as ad views, taps, and app launches), and diagnostic or performance information. This information may be used for advertising, analytics, fraud prevention, and ad measurement.
Google may use cookies, mobile advertising identifiers, or similar technologies to provide and measure ads and, where permitted by law and based on your consent choices, to personalize advertising. Unity Ads and Meta Audience Network may use the advertising ID and similar device information to deliver, measure, and, where permitted, personalize ads. We do not provide Google, Unity, or Meta with the content of your private messages for advertising.
You can manage or reset your Android advertising ID and certain ad-personalization settings through your device settings. Where required by applicable law, including in the EEA and UK, we will request consent and offer privacy choices before serving applicable ads. For more information about how Google uses information from apps and sites that use its services, visit How Google uses data when you use our partners' sites or apps. Unity's privacy information is at Unity Privacy Policy. Meta's privacy information, including Meta Audience Network, is at Meta Privacy Policy. Pangle's privacy information is at Pangle Privacy Policy. Start.io's privacy information is at Start.io Privacy Policy.
12. Permissions
Depending on the features you use, Poralab may request the following Android runtime permissions. Each permission is requested only when you trigger the corresponding feature — never at install-time for features you don't use. You can manage or revoke any permission at any time through your device Settings → Apps → Poralab → Permissions.
| Android Permission | Requested When? | Exact Usage | Data Collected | Shared? | Play Data Safety Category |
|---|---|---|---|---|---|
Cameraandroid.permission.CAMERA |
User taps the camera icon to snap a photo for post/avatar/story/chat attachment OR to scan a QR code | Camera preview opens inside the app; the captured photo is uploaded to your Poralab account (R2 storage) as the content you choose to share | Photo bytes + EXIF (stripped server-side for avatars) | Only you + the audience you share with (friends/post audience). Never sold. | 📷 Photos or videos · User-initiated content |
Photo / Media LibraryREAD_MEDIA_IMAGES (Android 13+)READ_EXTERNAL_STORAGE (≤Android 12) |
User opens gallery picker from post/story/avatar/chat compose UI | Lets you choose an existing photo from your device to upload as content to Poralab | The specific photo(s) you select | Only you + the audience you share with. Never sold. | 📷 Photos or videos · User-initiated content |
Contacts (Read Only)android.permission.READ_CONTACTS |
User taps "Find friends from phonebook" feature toggle in Chat Settings | Matches the SHA-256 hash of your contacts' phone numbers against registered Poralab user phone hashes on our server (raw contacts never leave the device) | SHA-256 hashes of phone numbers (client-side computed before upload) | Sent to our server for hash-match only; never stored long-term; never sold; never shared with third parties. | 📒 Contacts · Social feature · Matched server-side, not retained |
Push Notificationsandroid.permission.POST_NOTIFICATIONS (Android 13+) |
First login / app launch (rational dialog shown); can be toggled from App Settings | Delivers Firebase Cloud Messaging (FCM) push notifications for chat messages, friend requests, likes, comments, exam reminders, account alerts | FCM device push token, notification text (transient) | Token sent to our backend only (never sold). Notification text is delivered to your device only. | 🔔 Device or other IDs · Push token |
Internet / NetworkINTERNET, ACCESS_NETWORK_STATE |
Always required — requested at install (normal permission, no runtime prompt) | Communicates with our Cloudflare Workers API backend, R2 media storage, Firebase Authentication, Google Sign-In | Standard TLS network traffic metadata (IP anonymized after 24 h) | Standard server-side logs (deleted after 90 days). Never sold. | 🌐 Standard normal permission — no user prompt required |
Permissions NOT Currently Used
The following features are planned but not yet active in the current production release. The corresponding dangerous permissions have been removed from the AndroidManifest until the feature code is actually wired up. They will only be re-added with a clear in-app permission rationale exactly when you trigger the feature:
- SYSTEM_ALERT_WINDOW / Chat Head (floating bubble) — The settings toggle exists but there is no actual overlay rendering code yet. Permission will be re-added once a real overlay package (e.g.
flutter_overlay_window) is integrated. - ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION — Planned for "Nearby Friends / Campus Events" feature. Permission will be requested only when you open that feature, as "while-in-use" foreground-only, never background.
- RECORD_AUDIO / Microphone — Planned for Voice Note / Audio Message feature. Permission will be requested only when you tap the record button in chat composer; audio never auto-records.
Permissions are requested only when needed for the corresponding functionality. You can manage certain permissions through your device settings.
13. Your Privacy Choices and Rights
Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:
- Request access to certain personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Withdraw consent where applicable
- Object to or restrict certain processing
- Request information about how your data is processed
To exercise applicable rights, contact us using the contact information below.
14. International Data Processing
Your information may be processed or stored on servers located in countries other than your country of residence.
Where required by applicable law, we take appropriate measures to protect personal information when it is transferred or processed internationally.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy. Where required by law, we may provide additional notice of significant changes.
We encourage you to review this Privacy Policy periodically.
16. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
- App Name: Poralab
- Email: support@poralab.com
- Developer / Company: RAMIM
By using Poralab, you acknowledge that you have read and understood this Privacy Policy.