Privacy Policy

Last updated: April 14, 2026

1. Information We Collect

When you use Postcards, we collect information you provide directly:

• Account information: email address, display name, profile photo, bio, and home city.
• Content: postcards you create (photos, videos, captions, locations), comments, and messages.
• Location data: places you tag on postcards and, with your permission, your device location for the Explore map.
• Usage data: interactions such as likes, saves, follows, and swipe activity.
• Device information: device type, operating system, and push notification tokens.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Postcards app.
• Personalize your experience, including the Discover feed and Explore map.
• Send push notifications for messages, likes, comments, and follows (with your permission).
• Process physical postcard printing orders via our printing partner.
• Generate AI-assisted captions when you use the AI writing feature.
• Enforce our Terms of Service and protect against abuse.

3. Information Sharing

We do not sell your personal information. We may share information with:

• Other users: your public profile, postcards, and collections are visible to other users unless your account is set to private.
• Service providers: hosting, CDN, email delivery, print fulfillment (Lob), and AI processing (OpenAI) — all bound by data processing agreements.
• Legal requirements: when required by law, regulation, or valid legal process.

4. Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently remove all your personal data, postcards, messages, and associated content within 30 days. Some anonymized analytics data may be retained.

5. Your Rights

You have the right to:

• Access, correct, or delete your personal information.
• Export your postcards and data.
• Opt out of push notifications at any time.
• Delete your account permanently from Settings.
• Request data portability (GDPR, CCPA).

6. Children's Privacy

Postcards is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication tokens, and access controls to protect your information.

8. Third-Party Services

Our app integrates with third-party services that have their own privacy policies:

• OpenAI (AI caption generation)
• Lob (physical postcard printing)
• RevenueCat (subscription management)
• Nominatim/OpenStreetMap (geocoding)

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the app or via email. Continued use of Postcards after changes constitutes acceptance.

10. Contact Us

For questions about this privacy policy or your data, contact us at:

[email protected]