Last updated: 3/1/2026. Postscrypt ("we," "us," or "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information. For questions about this policy, contact us at hi@postscrypt.app.
Your vault content is stored in secure cloud storage. No one has access to view or control the data in our storage systems other than our automated systems, which access it only as necessary to operate the service. All data is encrypted using 4096-bit RSA keys. These encryption keys are stored and managed in a way that prevents any human access.
We collect account information (email, name, authentication provider data), usage metadata (app version, platform, device information), push notification tokens, and support communications. We do not have access to view or decrypt your vault content; only our automated systems can operate on the stored data as needed to deliver the service.
We use your information to provide and improve our services, authenticate your account, send important notifications (including check-in reminders and vault release alerts), troubleshoot issues, and comply with legal obligations.
We use third-party services to operate Postscrypt: cloud storage (AWS), authentication (Google, Apple), push notifications (Expo/FCM), and hosting infrastructure. These providers process data on our behalf under contractual obligations. We do not sell your personal information to third parties.
We retain your account data for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period. Vault content may be retained in backup systems for a limited time before permanent deletion. We may retain certain data as required by law.
Depending on your location, you may have the right to access, correct, delete, or export your personal data. You may also object to or restrict certain processing. To exercise these rights, contact us at hi@postscrypt.app. If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Postscrypt after changes constitutes acceptance of the updated policy.