- There are no accounts. We don't know your name or email.
- The photo you pick is sent once to paint the illustration and is not stored by us.
- Your postcards and the notes you write on them stay on your iPhone.
- No ads, no tracking across apps, and we don't sell data.
Who is responsible
Postalia is made by Pedro Rodríguez Garrido. Contact: [email protected].
What happens to your data
The photo you choose
Postalia uses the iPhone's photo picker, so it never has access to your library: only the photo you pick. On your iPhone, the photo is reduced to 1024 pixels and its metadata (location, date, camera) is removed. That copy is sent over an encrypted connection to our server, which passes it to OpenAI to paint the illustration and then discards it. We don't store your photos.
OpenAI first checks the photo for content that breaks its policies and then paints it. If a photo is refused, we keep only a count of refusals for that anonymous identifier for one day, to stop repeated attempts. To help OpenAI detect abuse, each request carries a code derived from the anonymous identifier, which doesn't reveal it.
OpenAI processes the photo to return the illustration. Under its API policy it may keep the request for up to 30 days to detect abuse, and it does not use it to train its models. See OpenAI's privacy policy.
Place and date
To name the place, the app reads the location and date stored in the photo on your iPhone. The coordinates are sent to Apple (MapKit) to find the place name; they are not sent to our server. The place name and date are saved with your postcard on your iPhone.
Your postcards and notes
Postcards, including the illustration and what you write on the back, are stored on your iPhone. When iCloud backup is available and you turn it on, they are copied to your private iCloud account, which we cannot access. They only leave your iPhone when you choose to share them.
An anonymous identifier
When you first open the app it creates a random identifier, stored on your iPhone. It is not linked to your name, email or Apple ID. Our server uses it to keep track of your credits: whether you've used the free postcard, how many postcards you've painted this month, any extra postcards you've bought, and, for 7 days, a reference to each painting so you can ask for another version.
Purchases
Subscriptions and purchases are processed by Apple; we never see your payment details. We use RevenueCat to manage subscriptions. RevenueCat receives the anonymous identifier, what you bought and when, and technical data such as your country and device type. See RevenueCat's privacy policy.
Our server
Our server runs on Cloudflare. Like any web service, Cloudflare processes your IP address to deliver requests and protect the service from abuse. We don't keep logs of your IP address.
When you write to us
If you email us or report a postcard, we receive your email address, your message and, for reports, the postcard's reference and your anonymous identifier. We use them only to answer you and to look into the report.
Why we use your data
- To provide the service you ask for: painting postcards and managing your credits and subscription.
- To keep the service safe: preventing abuse of free postcards and refusing content that breaks our terms.
Where it is processed
OpenAI, RevenueCat and Cloudflare may process data in the United States and other countries. Where data leaves the European Economic Area, they rely on the European Commission's standard contractual clauses or equivalent safeguards.
How long we keep it
- Photos: not kept by us.
- Painting references: 7 days.
- Credit records linked to the anonymous identifier: while you use the app. Deleting the app doesn't delete them, because we can't tell who you are; write to us from the app if you want them removed.
- Emails: as long as needed to answer you.
Your rights
You can ask us to access, correct or delete your data, to restrict or object to its use, or to transfer it. Because we don't know who you are, write to us from the app (Settings → Write to Us) so we can find your anonymous identifier. If you are in the EU, you can also complain to your data protection authority; in Spain, the AEPD.
Children
Postalia is not directed at children under 13, or under 14 in Spain. We don't knowingly collect data from them.
Changes
If we change how the app uses data, we'll update this page and the date above before the change takes effect.