Privacy Policy

Last updated November 3, 2026

Postahoy turns a photo into a printed postcard and mails it. To do that we need the card itself and the address it's going to. This page explains exactly what we collect, why, and who sees it. The short version: there's no account, no ads, no tracking, and we never sell your information.

What stays on your phone

• Your photos. You choose a photo from your library or take one with the camera. Postahoy reads only the photo you pick. The card is designed on your phone.
• Your contacts. If you use "Pick from contacts", your phone's contact picker hands Postahoy only the contact you tap. Postahoy never reads your whole contact list.
• Your address book and return address. People you've sent cards to are saved on your phone so you can send to them again.

What we receive when you order

• The finished card. The two printed sides of your postcard (front and back), as image files.
• Mailing details. Each recipient's name and address, your return address if you add one, and the send date you choose.
• Order details. The price, the order's status, and delivery tracking updates from the post office.
• A device session. When you first open the app it creates a random session key, so your phone can see its own orders without an account. We store only a scrambled (hashed) copy of that key, plus a hashed copy of your IP address, which we use to limit abuse.
• Address checks. When you save an address, we check it with our printing partner to catch typos before you pay.

We don't receive your card number. Payment happens in Stripe's secure payment sheet, and Stripe handles your card details directly.

Who we share it with

We share information only with the companies that make the service work, and only what each one needs:

• Lob prints and mails the postcards, and checks addresses. Lob receives the card images, the recipient's address and your return address. See Lob's privacy policy.
• Stripe processes payments (cards, Apple Pay and Google Pay). See Stripe's privacy policy.
• Cloudflare hosts our servers, where orders and card images are stored. See Cloudflare's privacy policy.
• The postal service, which needs the address on the card to deliver it.

We may also disclose information if the law requires it. We do not sell or rent personal information, share it for advertising, or use it to build profiles.

Analytics and ads

Postahoy has no ads, no analytics or tracking tools, and no third-party advertising code.

How long we keep it

We keep order details and card images for as long as we need them to mail your cards, handle refunds and questions, and keep the business records the law requires. You can ask us to delete your orders and card images at any time (see below). Information on your phone is removed when you delete the app.

Your choices and rights

• You can use Postahoy without giving it access to your contacts or camera, and you can turn those permissions off at any time in your phone's settings.
• You can ask us for a copy of your order information, to correct it, or to delete it. Email support@postahoy.com and include the order number shown in the app, so we can find it without an account.
• Depending on where you live (for example California), you may have additional rights under local law. We'll honor them, and we won't treat you differently for using them.

Security

All traffic between the app and our servers is encrypted. Card images are only reachable through short-lived signed links, and each device can see only its own orders.

Children

Postahoy isn't directed at children under 13, and we don't knowingly collect information from them. If you think a child has sent us information, email us and we'll delete it.

Where we operate

Postahoy mails postcards within the United States, and our service providers process information in the United States.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll also mention it in the app.

Contact

Questions about privacy? Email support@postahoy.com.