Privacy policy

La Postina lets you design real cards on your phone, and we print and mail them. To do that, we need some personal information about you, and the name and address of each person you send a card to. This page says what we collect, why, who helps us, and the choices and rights you have.

This Privacy Policy explains how [Legal entity name] (“La Postina,” “we,” or “us”) collects, uses and shares personal information when you use the La Postina app, this website, and the cards we print and mail (together, the “Service”).

What we collect

• Your account. Your email address, and your name if you share it when you sign in with Apple. If you choose Hide My Email, we get Apple's relay address instead of yours. Signing in with Apple also gives us an ID that Apple makes for your Apple Account to use with La Postina.
• Your return address, which is printed on the envelope of every card you send.
• The people you add. Their names and mailing addresses, and, if you like, how you know them and their birthdays, so we can mail your cards and remind you before birthdays. You add people one at a time; we never read your whole address book.
• Your cards. The designs you choose, the words you write and the photos you use. When you upload a photo, we remove the details stored inside it, such as where and with what camera it was taken.
• Payments. Stripe handles payment. We see whether a payment went through and for how much, never your full card number.
• Your phone, if you allow notifications. A code that lets us send notifications to it, and its time zone, so we don't send them at night.
• Basic records. Like any online service, our servers note requests, such as an IP address and the time, to keep La Postina secure and working.
• Diagnostics. When the app or our servers run into an error, a technical report of it, and how long some screens and requests take, with a random ID for your copy of the app so we can tell how many phones a problem reaches. None of it says who you are.

Most of this comes from you. A recipient's name and address come from the person who sends them a card. Apple shares your name and email address when you sign in with Apple, if you let it. Basic records and diagnostics are collected automatically as you use the Service.

If someone sent you a card

The person who sent you a card gave us your name and address so we could mail it. Your name and address stay in the sender's contacts, so the sender can mail you another card and, if they add your birthday, get a reminder before it. We don't email you, market to you or sell your information.

The page that the code inside your card opens shows the card's front and the sender's first name and last initial. If you claim the card there, we add it to your account and add the sender to your contacts, so replying takes a minute.

To have your name and address taken off our records of the card, choose “Remove my info” on the page the code opens, before the card is claimed, or write to support@lapostina.com. We'll do it within a few days. The sender's own list of people is theirs, like an address book, so your entry there stays unless they remove it.

How we use it

• To print and mail your cards, show you where they are, and take payment.
• To check the addresses you enter, so a typo doesn't send a card astray.
• To send you sign-in codes, messages and notifications about your orders, and the birthday reminders you ask for.
• If you turn on Promotions in the app, to tell you now and then about new cards and seasonal ideas. It's off until you turn it on, and you can turn it off in the app, or with the link in any promotional email, at any time.
• To keep La Postina secure and prevent abuse, such as fraud involving rewards.
• To answer you when you write to us.
• To follow the law, and to enforce our Terms of Service.

We don't sell personal information or share it for cross-context behavioral advertising, as California law defines those terms, and we haven't in the past 12 months. We don't use it for advertising or to build profiles about you.

Who helps us

We share only what each of these services needs to do its job for us:

• Click2Mail prints and mails the cards. It receives the card's images, the recipient's name and address, and your return address. It also checks each address you enter for a card or a contact against the Postal Service's records, as you enter it, before you pay and even before you sign in. For that it receives only the street, city, state and ZIP code, never the name.
• Stripe processes payments and emails your receipts. Its payment form in the app also sends Stripe details about your phone, to screen for fraud.
• Resend delivers the emails we send, including what they say, which can include the name of the person a card is addressed to.
• Expo delivers notifications to your phone, through Apple. Expo and Apple receive the code for your phone and what the notification says, which can include the name of the person a card is addressed to. Expo also delivers updates to the app, and sees your phone's IP address when the app checks for one.
• Fly.io runs our servers and our database.
• Sentry receives the diagnostics: what went wrong and where in our code, how long some screens and requests took, the model of phone and its system version, the app's version, and your copy's random ID. It never gets your name, your email, the addresses on your cards or what you write in them, and it doesn't keep your IP address.
• Tigris stores the photos you upload and the files we print from.
• Apple provides Sign in with Apple, and delivers notifications to iPhones.
• Cloudflare runs our domain and forwards the email you send us to our inbox, which Google hosts.

We may also share information when the law requires it, or when it's needed to protect someone from harm.

If La Postina is part of a merger, acquisition, financing or sale of its assets, personal information may be transferred as part of that deal. It stays covered by this policy, and we'll tell you before it becomes subject to a different one.

This website

This website uses no analytics or advertising cookies. Signing in on the page a card's code opens sets a sign-in cookie, and the page signs you out once it has tried to claim the card.

Because we don't sell or share personal information, a “Do Not Track” or Global Privacy Control signal has nothing to opt you out of. If that ever changes, we'll treat Global Privacy Control as a request to opt out.

How long we keep it

We keep your information while your account is open. When you remove someone from your contacts, their details go with them, except the name and address on cards already sent, which stay with those orders.

Signing in on a device keeps you signed in there until you sign out, delete your account, or go 400 days without opening La Postina on it. While you're signed in, we keep a record of the sign-in with the IP address and the kind of device it came from. Signing out deletes it, and one that runs out is deleted within a day. Sign-in codes are deleted within a day of expiring. The email and IP addresses we note to limit how often someone can ask for codes or sign in are deleted within two days.

If something we do in the background, such as emailing you or sending a card to the printer, fails and we stop retrying, we keep a record of the failure for two weeks to work out what went wrong, then delete it. The record can include part of what we were sending, and it's kept for those two weeks even if you delete your account.

When you delete your account, everything that names you goes at once: your account, the people you saved, the names and addresses on your cards, your designs and photos, your points, and the codes for sending notifications to your phones. Cards that can still be stopped are canceled and refunded; a card already at the printer still arrives. We keep a record of each order with only its amounts and dates, because we have to keep financial records. Stripe, Click2Mail and Resend keep their own records of payments, print jobs and emails under their own policies, and anyone who claimed a card from you keeps you in their contacts.

If we close an account because it broke our Terms of Service, we delete it the same way. To keep the same person from opening a new account, we keep a hashed form of its email address and of the ID Apple gives us for its Apple Account. It doesn't store the address or the ID as written, but it lets us recognize them if they're used to sign up again. We keep it with the date, the reason and who closed the account, until we lift the ban.

Your choices

• Edit or remove the people you've saved, and turn birthday reminders off, in the app.
• Choose what we tell you about in the app, under Account. Turn notifications off entirely in your phone's settings; signing out stops them too.
• Delete your account in the app, under Account → Delete my account. Or write to support@lapostina.com from the email address you sign in with, and we'll delete it for you.
• To get a copy of your information or correct it, write to support@lapostina.com from the email address you sign in with.

Your privacy rights

Depending on where you live, including California and other states with privacy laws, you may have the right to:

• know what personal information we have about you, and get a copy of it;
• correct it if it's wrong;
• have it deleted;
• opt out of its sale, its sharing for targeted advertising, and profiling, none of which we do;
• limit how we use sensitive personal information, which we use only to provide the Service;
• not be treated differently for using any of these rights.

To use them, write to support@lapostina.com from the email address you sign in with, or delete your account in the app. We confirm a request comes from you by answering at that address, and we reply within 45 days, or tell you if we need longer. Someone you authorize can ask for you, with your signed permission, and we may ask you to confirm it. If we turn a request down, you can appeal by replying to our answer, and if we turn the appeal down, you can contact your state's attorney general.

California notices

In the past 12 months we've collected these categories of personal information, from the sources and for the purposes above, and disclosed them to the services above to do their jobs for us: identifiers (names, email addresses, postal addresses, IP addresses, the ID Apple gives us for your Apple Account, and the ID for your copy of the app); customer records (your return address and the people you add); characteristics of protected classifications (the birthdays you add for the people you save); commercial information (your orders and payments); internet or other network activity (requests to our servers, and diagnostics); audio, electronic, visual or similar information (the photos you upload); and sensitive personal information (the words you write on your cards). We keep each for as long as “How long we keep it” says.

We don't share personal information with anyone for their own direct marketing (California Civil Code Section 1798.83).

Children

La Postina isn't meant for children under 13, and we don't knowingly collect information about them. If you think a child under 13 has given us personal information, write to support@lapostina.com and we'll delete it.

Keeping it safe

Everything travels encrypted between your phone and our servers. Photos and print files are kept in private storage that only the people who run La Postina can reach. Click2Mail receives the files it prints, and whoever holds a card can see its front on the page its code opens. No system is perfect; if something goes wrong that affects your information, we'll tell you.

Where we work

La Postina is for people in the United States, and it mails cards only to addresses there.

Changes

When we change this policy, we'll update the date at the top. If a change matters, we'll also tell you in the app or by email before it takes effect.

Contact

Write to support@lapostina.com, and a person will read it and reply. By mail: [Legal entity name], [Mailing address].