Privacy Policy

This policy explains how Penypost ("we", "us", "our") collects, uses, shares and protects personal data when you use our mobile app, the website at https://www.penypost.com, and related services.

• Developer and privacy contact: hello@penypost.com
• Terms of Service: https://www.penypost.com/terms
• Privacy Policy: https://www.penypost.com/privacy
• Account deletion: https://www.penypost.com/delete-account
• Minimum age: 13

Account and profile data. Nickname, email address, date of birth (to check age), profile photo or avatar, continent or region, bio and interest tags.

Content you create. Letters, messages, feed posts, "dear" names, and your choices of envelopes, stamps, stickers and papers. Images in letters are stored on our cloud storage and delivered through our CDN.

Purchase data. When you buy Digital Items, Google Play processes the payment. We and our subscription tool, RevenueCat, receive a purchase record: which item you bought, price, date, country and a transaction ID. We do not receive your card or bank details.

Technical and usage data. IP address, device brand and model, operating system version, app version, unique app or device identifiers, crash and performance logs, and how you use the app (for example screens viewed, features opened, letters sent, and shop activity). Your approximate country and city are derived from your IP address. Penypost does not ask for your precise GPS location.

Notifications. If you allow notifications, we store a push token for your device so we can send them.

Reports and safety records. Reports you submit or that are made about you, and moderation actions taken.

Messages to us. Emails you send to hello@penypost.com and any information they contain.

We use personal data to:

• Deliver letters, run the feed and show your profile to other users as you choose
• Suggest penpals based on shared interests and region
• Process and record purchases, and unlock the items you bought
• Keep Penypost safe: detect spam, abuse, harassment and fraud, and review reports
• Fix bugs, measure performance, and understand which features people use so we can improve the app
• Send notifications you have allowed, and reply to your emails
• Meet legal obligations

We do not feature your letters or posts on Penypost's social media accounts, website or any other channel for promotion. If this ever changes, we will ask for your permission first.

We do not sell or rent your personal data to data brokers, advertisers or marketers, and we do not use it for third-party advertising.

We share personal data only with companies that help us run Penypost, and only as needed for the purpose shown. They act on our instructions and are bound by their own privacy and security terms.

• Google Play: payments and app distribution (purchase and device information, handled by Google)
• RevenueCat: purchase records and entitlements (account ID, purchased items, price, date, country)
• Firebase and Google Analytics: authentication, app analytics, crash reports (identifiers, device data, usage events, approximate location from IP)
• Cloudflare: image storage (R2), CDN, DNS and email routing (images in letters, IP addresses, email sent to hello@penypost.com)
• Railway: application server and database hosting (account, profile and content data)
• Vercel: website and account deletion portal (IP address and request logs)
• Google ML Kit: optional translation of letters, done on your device. The letter text is not sent to us or to a translation server; the app only downloads the language model to your device.

We may also disclose information when required by law, a court order or a valid government request; to protect the safety, rights or property of Penypost, our users or the public; in a merger, acquisition or sale of the business, with notice to you if your data is affected; or with your consent.

Other users see only what you choose to share, such as your nickname, avatar, bio, region and the letters and posts you send.

Penypost has users in many countries, and our service providers may process data in countries other than yours, including the United States and other regions where their servers are located. Where required, we rely on safeguards such as contractual protections from these providers. By using Penypost, you understand that your data may be transferred and processed outside your country.

We keep your data while your account is active. When you delete your account, we delete or anonymize your profile, posts and personal data within 7 days, except for what we must keep:

• Purchase and transaction records, kept as required for tax, accounting and fraud prevention
• Reports and moderation records needed to protect other users or defend legal claims
• Backups, which are overwritten on their normal cycle

Letters you already sent may remain in the recipient's mailbox, shown as from a deleted user.

1. In the app: Profile Settings, then Account, then Delete My Account

2. On the web: https://www.penypost.com/delete-account

3. By email: hello@penypost.com, from the address registered to your account

We also delete the data of any account we learn belongs to a child under 13.

Penypost is not for children under 13. We do not knowingly collect personal data from them. If we learn that an account belongs to a child under 13, we delete the account and its data. If you believe a child under 13 is using Penypost, email hello@penypost.com.

Users aged 13 to 17 may use Penypost only with permission from a parent or guardian, where required by local law. We do not use teens' letters or posts for promotion, and we do not use their data for advertising. Parents and guardians can contact hello@penypost.com to ask about, correct or delete a teen's data.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and get a copy
• Correct inaccurate data (you can edit most profile data in the app)
• Delete your data and account
• Object to or restrict certain processing, and withdraw consent you gave
• Data portability, meaning a copy in a common format
• Complain to your local data protection authority

These rights come from laws such as the EU and UK GDPR, the California CCPA/CPRA, the Philippines Data Privacy Act of 2012 (where you may also contact the National Privacy Commission), and Indonesia's Personal Data Protection Law (UU PDP). To use any of them, email hello@penypost.com from your registered address. We may need to verify your identity, and we will reply within the time required by law, generally within 30 days.

We do not sell or share personal data for cross-context behavioral advertising.

Our website and web portal log basic technical data (IP address, browser, pages requested) to deliver the pages, keep them secure and fix errors. The website does not use advertising cookies.

In the app, we use Firebase and Google Analytics to measure usage and crashes. You can limit this by resetting your advertising ID in your Android settings.

Security. We use measures such as HTTPS/TLS encryption in transit, access controls on our databases and storage, and limited staff access. No system is completely secure, so please use a strong, unique password and tell us right away if you suspect your account was accessed without permission.

Changes. We may update this policy. For important changes we will notify you in the app before they take effect, and we will update the "Last Updated" date above.

Contact. Privacy questions, data requests and complaints: hello@penypost.com · https://www.penypost.com