Portre (“we”) reads the photo library you grant access to and writes a persona from it. Two people can compare their personas. This policy describes what we collect, why, and how long we keep it.
What we collect
- Account: Sign in with Apple identifier; display name; birthday; gender; optional background answers (education and where you studied, outlook, religion, children). Birthday is also used for the optional sign pairing shown with a comparison.
- Photos you grant access to. Full Access lets us read your library. Limited Access lets you pick which photos. We upload those photos over HTTPS so an automated worker can build your persona. The worker also picks a small profile grid from stills that show your verified face; you can reorder, replace, or add to that grid. Someone you compare with sees only that grid — never the rest of the library.
- Derived persona data: scene labels, lifestyle traits, an embedding used for your uniqueness score and for comparisons, approximate places (a café or park name from an offline map extract, or a city; photo GPS is discarded after naming), named-venue visit windows used only to tell two people who compared that they have been to the same place, and a face embedding used only to tell which face in a photo is yours and to keep profile photos of you.
- Uniqueness: a percentile of how distinctive your persona embedding is among current members. It is shown to you on your Persona screen. Other people do not see your uniqueness score.
- Compare: invitation keys and links you send, pending requests, and the comparison result if both of you accept (shared scenes, aligned and contrasting traits, optional map overlay and shared places). Keys expire after seven days. When two phones are held together, the comparison starts over the devices’ own radios; nothing about that handshake is stored beyond the comparison itself.
- Device push token, if you enable notifications.
The AI that writes your reading
Your persona is built on our own servers. The sentences you read are written by Claude, an AI model made by Anthropic, and that is the one place your data goes outside our infrastructure. The app asks before this happens and you can refuse; refusing is not the end of the persona, only of the written reading, which then comes from our own templates. You can change the answer at any time in Settings.
What we send to Anthropic: the facts derived from your library — scene labels and their shares, lifestyle ratios (how your days, weeks and seasons run), the named places you return to with visit counts and the months you were first and last there, your character archetype and trait scores, how many photos were read, and your sun sign. For a comparison, the same for both people, and only when both have allowed it.
What we never send: your photos, your name, your email or Apple identifier, your exact coordinates, your messages, or anything that identifies you by name to the model. Anthropic processes the request to return the text and, under its commercial terms, does not use it to train its models. Anthropic’s own privacy policy is at anthropic.com/legal/privacy.
How compare works
You hand a key or a link to someone you already know, or you hold the two phones together; either way they must accept before a comparison is written. Opening a compare link may briefly hit our web host so the app or the App Store can open.
What we do not do
- We do not sell your data.
- We do not use your photos or persona to advertise.
- We do not score how attractive you are.
- Analysis of your library is automated. Staff do not browse your camera roll.
- We do not send your exact GPS to anyone or to outside mapping services.
Third parties
Photos and derived signals are processed on our servers solely to provide Portre. The one exception is the reading, described above: the derived facts go to Anthropic (Claude), with your permission, to be written up. Notifications go through the device’s push service. Compare invitation pages are served from our website. Place names are resolved from an offline map extract on our servers.
Retention
Library photos used to build the persona are deleted from our servers once analysis finishes. We keep the derived persona (traits, taste graph, embeddings, uniqueness inputs), the profile photos in your grid, and your compare history. Delete Account in Settings removes the rest, except records we may need to keep for safety or law. You can turn off photo access in iOS Settings; we will not take new library photos after that. You can turn off notifications in Settings.
Contact
Questions or deletion requests: waitlistsupport@gmail.com