Privacy Policy

Effective April 1, 2026 · Last updated March 31, 2026

Post ("we," "our," or "us") operates the Post mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.

By using Post, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

• Phone number: Used to create your account and verify your identity via SMS. We do not share your phone number with other users unless you send them a letter.
• Display name: The name that appears on letters you send. You choose this during sign-up.
• Date of birth: Used solely to verify you are 13 years of age or older. We do not store your exact date of birth after verification.
• Profile photo and bio: Optional. Displayed on your profile within the App.
• Letter content: The text of letters you write and send through the App.
• Device contacts: If you grant permission, we access your phone contacts to help you identify known senders. Contact data is processed on-device and is not uploaded to our servers.

Information Collected Automatically

• Device information: Device type, operating system version, and unique device identifiers for push notification delivery.
• Usage data: App opens, screens visited, and feature interactions. This data is aggregated and not tied to your identity.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Send and deliver letters between users
• Verify your identity via SMS
• Send push notifications for letter arrivals (if you opt in)
• Detect and prevent abuse, spam, and violations of our Terms of Service
• Improve the App's functionality and user experience

We do not:

• Sell your personal information to third parties
• Read the content of your letters for advertising purposes
• Use your data to build advertising profiles
• Share your phone number publicly or with other users without your action

3. How Letters Work

When you send a letter through Post, the letter content is stored on our servers until it is delivered to the recipient. Letters are delivered based on the delivery schedule you choose.

Post employees do not read your correspondence. Letter content is accessed only when required by law or to investigate reports of abuse.

4. Third-Party Services

We use the following third-party services to operate the App:

• Supabase (database and authentication): Stores your account data and letters. Hosted in the United States. Privacy Policy
• Twilio (SMS delivery): Sends verification codes to your phone number. Privacy Policy
• RevenueCat (subscription management): Manages in-app purchases and subscription status. Does not receive your letter content. Privacy Policy
• Apple Push Notification Service (APNs): Delivers push notifications to your device.

5. Data Retention

• Account data: Retained as long as your account is active. When you delete your account, all associated data is permanently deleted.
• Letters: Stored for the duration of the conversation. Recalled letters are deleted immediately.
• Verification codes: Expire automatically and are not stored after use.

6. Data Security

We take reasonable measures to protect your information, including:

• All data transmitted between the App and our servers is encrypted using TLS/SSL.
• Database access is restricted by row-level security policies, ensuring users can only access their own data.
• Authentication tokens are stored securely on your device.

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Children's Privacy

Post is not intended for children under the age of 13. We require date of birth verification during sign-up to enforce this restriction. If we become aware that we have collected information from a child under 13, we will delete that account and associated data promptly.

8. Your Rights

You have the right to:

• Access your personal data through your profile in the App.
• Update your display name, bio, profile photo, and phone number at any time.
• Delete your account and all associated data through the Settings screen. Deletion is immediate and irreversible.
• Opt out of push notifications through your device settings.
• Deny contacts access without affecting your ability to use the App.

If you are a resident of California, the European Economic Area, or another jurisdiction with applicable data protection laws, you may have additional rights. Contact us to exercise them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via other communication. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: hello@trypost.app