Postie Privacy Policy

Last updated: November 9, 2026 Effective date: April 29, 2026

This Privacy Policy describes how Infinite Improbabilities LLC, a North Carolina limited liability company doing business as Postie ("Postie," "we," "us," or "our"), collects, uses, shares, and protects personal information in connection with the Postie mobile application, the websites at trypostie.com and app.trypostie.com, and all related services (collectively, the "Service").

This Policy is incorporated into, and forms part of, our Terms of Service. Capitalized terms not defined here have the meanings given to them in the Terms of Service.

Quick summary. We collect what we need to send physical postcards on your behalf and run a stable, secure consumer service: your email and sender profile (including a verified mobile number), the contact information for the recipients you tell us about, the photos and messages you choose to put on a postcard, payment-tokenization references (we don't store card numbers), and standard product-analytics and error-diagnostics data. We don't sell or rent personal information for money, we don't run advertising, and we don't share data with data brokers or ad networks. We don't track you across other companies' apps or websites. The Service is offered only in the United States.

1. Scope

This Policy applies to:

• Users. People who create a Postie Account and use the Service to send Postcards or otherwise interact with the app or websites.
• Recipients. People to whom Users direct Postcards or Address Requests. We process limited information about Recipients on behalf of Users (Section 4.2 and Section 6.2).
• Gift recipients. People for whom a User buys Given Credits (Terms of Service, Section 6.8) and whose name and email address the User gives us (Section 4.4).
• People who pay through a request link. People who open a link a User sends them asking them to buy Posties or a plan for that User, and who pay or decline without signing in to an Account (Section 4.5).
• Visitors. People who browse the marketing website at trypostie.com without creating an Account.
• Correspondents. People who email us at any of our addresses (including addresses at trypostie.com, i21s.com and fable.fyi) or reply to our emails, whether or not they have an Account.

This Policy does not apply to (a) third-party apps, websites, or services that integrate with or link to the Service, which are governed by their own privacy practices, or (b) personal information that we hold in an employer / employee, contractor, investor, or commercial-counterparty capacity.

2. Geographic Scope

The Service is offered only to users and Recipients located in the United States. Postcards are printed and mailed to addresses in the United States; we do not mail Postcards to addresses in other countries. We do not knowingly direct the Service to, or accept Accounts or addresses from, persons outside the United States. The data practices described in this Policy are intended to satisfy applicable U.S. federal and state privacy laws.

3. Information We Collect

3.1 Information you give us directly

3.2 Information collected automatically when you use the Service

3.3 Information processed on your device

The Service performs certain processing entirely on your device. The following data stays on your device, except a photo you put on a Postcard or save in a draft (see "Drafts" in Section 3.1) and a contact you add as a Recipient:

• 3D Postcard preview. The interactive Postcard preview renders on your device.
• Photo-library access and photo suggestions. When you give Postie access to your photos, the app shows them on your device so you can pick one. Photo suggestions are on unless you turn them off. While they're on, the app also reviews those photos on your device to suggest good ones for a Postcard. It looks at how each photo looks, when and where it was taken, whether it has people in it, and how clearly their faces were captured. It does not recognize faces, identify anyone or keep any record of what a face looks like. The results stay on your device. Reviewing can also happen in the background while your device is charging and not in use. No photo leaves your device unless you put it on a Postcard, save it in a draft (see "Drafts" in Section 3.1) or attach it to an email to us. If you allow access to selected photos only, the app sees and reviews only those. You can turn suggestions off in the app's settings at any time; the app then stops reviewing your photos and deletes the results from your device.
• Contacts access. When you give Postie access to your contacts, the app reads them on your device to suggest Recipients, to find someone you mention to Otto (for example, "Mom") and, if you ask, to add their birthdays. If you allow access to selected contacts only, the app sees only those. You can also pick a single contact without giving access. A contact reaches our servers only when you add it as a Recipient, and then only the Recipient details listed in Section 3.1.
• Otto, Postie's virtual agent, in the app. In the app, Otto runs on your device. Where Otto uses a language model, it is the one built into your device's operating system. What you tell Otto in the app and what Otto writes for you there stay on your device, except what you ask Otto to keep, described under "People, dates and reminders" below, and a note you keep in a draft, which is saved with that draft (see "Drafts" in Section 3.1). We don't receive the rest, and neither does any AI provider. If you put a note Otto wrote on a Postcard, it is handled like any message you write (Sections 3.1 and 5.1). Email you send to Otto is handled as in Section 3.1. On every device, Otto's chat and what Otto shows you on Home work without that model. On a device that can't run that model, the rest of Otto isn't available in the app.
• People, dates and reminders. When you tell Otto who someone is to you (for example, "Mom" or "family"), a birthday or another date, or to remind you about one, the app saves it on your device and uses it only to suggest Postcards and remind you. We don't receive any of it. Your device's own backups include this information if you use them. Reminders are notifications your device schedules itself, and they go only to you. The app also remembers the suggestions you turn down, on your device. Deleting the app deletes it from your device. Deleting your Account deletes it from your device at once.
• Suggested Postcards. The app puts together suggestions (a photo, a person and a reason to send) on your device, from your photos, what you've told Otto, and your Postcard history. It works out a send-by date on your device from the mailing address you have for that person and current printing and mail times. Our product analytics never record who a suggestion or reminder was for, the date, or anything you told Otto.
• Age range. Where the law requires it, Postie asks Apple for your age range. The age range stays on your device and is never sent to us (see Section 11).

3.4 Information about Recipients

When you, as a User, add a Recipient or send a Postcard or Address Request, we receive and process information about the Recipient (name, mailing address, email address, mobile telephone number, the Postcards you direct to them, any address-confirmation responses they provide, any choice they make on our confirmation page not to receive further Address Requests, and the text of any replies they send to Postie's text messages). See Section 4.2 for how we treat this information and Section 8.5 for the rights Recipients can exercise.

3.5 Information we do not collect

We do not collect:

• Precise or background geolocation. The Service does not request location permissions and does not collect GPS or other precise location from your device. While photo suggestions are on, the app uses the location saved in your photos only on your device (Section 3.3).
• Biometric identifiers (such as fingerprints, face geometry, face templates, or voiceprints). The app does not recognize faces or identify anyone (Section 3.3).
• Health, fitness, or medical information.
• Government identifiers (such as Social Security numbers or driver's-license numbers).
• Audio recordings, except a recording you choose to attach to an email you send us (Section 3.1). Postie does not record audio and does not ask for access to your microphone.
• Cross-app or cross-site browsing activity. The Service does not use advertising identifiers (IDFA / GAID) and does not share data with advertising networks or data brokers.

4. How We Use Personal Information

4.1 Uses common to all Users

We use personal information to:

• Provide the Service — authenticate sign-in, process Postcard orders, calculate and apply Credits, manage your Subscription, send Address Requests on your behalf, and deliver delivery-status updates.
• Show Postcard pages and deliver replies. Show each Postcard you send on the page its QR code opens. Before sign-in, the page can show your first name. It asks the person who opens it to sign in and say they are the person you sent the Postcard to, then shows its photo, message and your first name, and the Recipient's name as printed on the Postcard, never the Recipient's address or your return address. Deliver to you the comments and reactions people send from that page, and show each person only their own.
• Process payments and taxes — charge your payment method through our third-party payment processor, calculate applicable sales tax at checkout based on your billing address, issue receipts, and handle refunds and disputes.
• Communicate with you — send transactional notifications by email and push about your Postcards, Subscription, Credits, Account, and referral activity, and, when you ask us to verify your mobile telephone number, a one-time code by text message. We do not send those notifications by text message. Send marketing email if you have not unsubscribed (you can unsubscribe at any time without affecting transactional messages).
• Provide customer support — answer your questions by email, look up your Account details to help.
• Operate, secure, and improve the Service — diagnose bugs, monitor system health, improve features, and detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations — including tax, accounting, anti-fraud, and consumer-protection requirements; respond to legal process; and enforce our Terms of Service.

4.2 Uses related to Recipients

For Recipients, we use the limited information you provide solely to:

• send the specific Postcard or Address Request you have directed to that Recipient, or create the Address Request link you send them yourself;
• show the Recipient, on our confirmation page, your first name, until the request is completed, declined or expires;
• honor a Recipient's choice on our confirmation page not to receive further Address Requests from you;
• if the Recipient confirms an address through the Address Request flow, store that address in your Account so you can reuse it for future Postcards to that Recipient;
• maintain records of what was sent to whom (for delivery tracking, fraud prevention, abuse investigation, and legal compliance);
• help you with a Postcard or Address Request you sent to that Recipient, including through customer support;
• show it to you in the reminders and suggestions the app puts together on your device; and
• honor any opt-out, suppression, or "do not contact" instructions we receive from the Recipient (Section 8.5).

We do not send Recipients marketing email or text messages, and we do not use Recipient information to market to them. If a Recipient creates their own Account, Section 4.1 applies to them as a User. After a Recipient adds their address on our confirmation page, that page may show a short invitation to try Postie, and the QR code printed on a Postcard, and the page it opens, may invite the person holding it to join Postie. These use nothing about the Recipient to market to them and add no one to any list unless they choose to sign up. We do not sell Recipient information for monetary consideration.

4.3 De-identified and aggregate information

We may de-identify or aggregate personal information (so that it no longer reasonably identifies any individual) and use that information for any lawful business purpose, including measuring product performance and reporting on aggregate Service usage.

4.4 Uses related to gift recipients

If a User buys Given Credits for you and gives us your name and email address, we use them only to: add the Credits to the Account that verifies that email address; tell you about them, by one email and at most one reminder if you have no Account, or in the app and by push notification if you do; handle cancellations, refunds, disputes and fraud; and honor a request from you to stop these emails. We show you the buyer's name and any note they wrote. The buyer can see whether the Credits have been added, which shows whether that email address has a Postie Account. We never tell the buyer your age. We do not market to gift recipients on our own behalf, we never text them about Given Credits, and we do not sell their information.

If someone pays for a plan on your Account (a gifted plan), we tell them whether it is waiting to start, active, ending or ended, its renewal dates and what they are charged. We never show them your Postcards, Recipients, addresses or Credit balance.

4.5 Uses related to request links

A User can ask someone to buy Posties or a plan for them by sending a link from their own phone or apps. We don't send it, and the contact they pick stays on their phone. If they send it as a text, we keep a coded form of the phone number they picked, not the number itself, and use it only to honor a request to stop and to protect against misuse. Whoever opens the link sees that User's first name and what they asked for, and nothing else about them. If you pay, we use your information only to take the payment, add what you bought to that User's Account, send you receipts and, for a plan, the renewal and cancellation emails, handle refunds, disputes and fraud, and meet our legal obligations. We don't tell that User your name, your email address or how you paid. If you decline or stop requests, we tell them only that the request wasn't paid. We don't market to you on our own behalf, and we don't sell your information.

5. How We Share Personal Information

We do not sell personal information for monetary consideration, and we do not share personal information with advertisers or data brokers. We do not engage in "cross-context behavioral advertising" or otherwise share personal information with third parties for their own advertising purposes.

We share personal information only as described below.

5.1 Service providers

We share personal information with the following service providers so they can help us run Postie. Each handles the data under the terms of its service. Some of them also use data for their own purposes, such as preventing fraud, keeping their services secure and improving their services, under their own terms; several rows below give examples.

We may, from time to time, change the specific service providers we engage within these categories.

5.2 Sharing at your direction

When you send a Postcard, we deliver the photo, message, return address, and Recipient address to our print and mail partner so that the Postcard can be physically printed and placed in the U.S. mail. The mailpiece is then handled by the United States Postal Service, which is independent of us. When you direct an Address Request, we deliver the corresponding email to the Recipient through the providers listed in Section 5.1. If you send an Address Request link yourself (Section 6.1), you send the message, not us. Anyone who opens the link sees your first name until the request is completed, declined or expires, so send it only to the Recipient. When you buy Given Credits, we show the person you name your name and any note you write, unless you buy through a request link: then we show them only that it was paid. If you pay for a gifted plan, we show the Account holder your name and that you pay for their plan, never your payment details, unless you paid through a request link: then we show them only that it was paid. If you send a request link, we show whoever opens it your first name and what you asked for.

Postcard pages. Anyone who opens a Postcard's page from its QR code sees a sign-in screen, which shows nothing from the Postcard except the sender's first name. Once you sign in and say you are the person the Postcard was sent to, we show you the name printed on the Postcard so you can say it, then that Postcard's photo and message and the sender's first name. If you send a comment or reaction from that page, we show it to the Postcard's sender with the first name you chose and a note that you said you are the person it was sent to; we never show them your email address. We can't check who you are. No other user sees what you send.

5.3 Compliance with law and protection of rights

We may disclose personal information when we reasonably believe doing so is necessary to:

• comply with applicable law, regulation, or valid legal process (such as a subpoena, court order, search warrant, or other lawful demand);
• enforce our Terms of Service or other agreements;
• detect, investigate, prevent, or respond to fraud, security incidents, abuse, or other illegal activity; or
• protect the rights, property, life, or safety of any person, including our Users, Recipients, employees, and the public.

5.4 Business transfers

If Postie is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, personal information may be transferred to the successor or acquirer as part of that transaction.

5.5 With your consent

We may share personal information for purposes not described in this Policy with your specific consent.

5.6 SMS consent and mobile information

Mobile telephone numbers and text-messaging opt-in data and consent are not shared with, or sold to, any third party or affiliate for marketing or promotional purposes. We use a mobile telephone number only to deliver the one kind of text message described in Section 3.1 of this Policy and in Section 10.3 of the Terms of Service (a one-time code, sent at a User's request, that verifies the User's own mobile telephone number), to keep a Recipient's contact details for the User who added them (Section 4.2), to address a link the User sends from their own messaging app (Section 6.1), and to honor a Recipient's choices (Sections 6.3 and 8.5). We do not send text messages to Recipients. We do not send Postcard, Subscription, Credit, or other Account notifications by text message. The service providers that receive a mobile telephone number are limited to the mobile messaging service that delivers those messages for us and the cloud infrastructure provider that stores your Account data. Each handles it under the terms of its service, and the mobile messaging service also uses it for its own purposes, such as preventing fraud and spam and meeting its legal obligations (Section 5.1). Sections 5.3 through 5.5 describe the only other circumstances in which we may disclose personal information at all — compelled legal process, a business transfer, or a disclosure you specifically consent to — and we do not disclose a mobile telephone number, or any record of a text-messaging opt-in or opt-out, to a data broker, an advertising network, or an affiliate for that party's own marketing or promotional purposes under any of them. Opt-out and suppression records are retained only so that we can continue to honor a STOP or suppression request (Section 9).

Message frequency and rates. Message frequency: one verification code each time a User requests one. We send no text messages to Recipients. Message and data rates may apply. Rates are set by the recipient's carrier or messaging service, not by us. Reply STOP to opt out, or HELP for help (Terms of Service, Section 10.3).

6. The Address Request Flow

6.1 What happens

If you, as a User, want to send a Postcard to someone whose mailing address you do not have, you can direct us to send an Address Request on your behalf to the email address you provide for that Recipient, or we can create a one-time link for you to send yourself, from your own messaging or email app. Either way, the Address Request:

• identifies you as the requester (on our confirmation page, by the first name in your sender profile);
• explains that the Recipient is being asked to provide a mailing address so that you can send them a Postcard;
• includes a one-time link to a confirmation page hosted at app.trypostie.com where the Recipient can voluntarily submit, edit, or decline to provide an address, and ask not to receive further requests from you; and
• includes opt-out instructions for messages sent to a mobile telephone number, where required by applicable law.

We do not send Address Requests by text message. A link you send yourself is your own message: we don't send it, it is not part of any text-messaging program of ours, and replies to it go to you.

6.2 Information about Recipients

We process the Recipient's name, email address, and mobile telephone number (as you provide them), the IP address from which a confirmation page is loaded (for security), any address the Recipient submits, and any choice the Recipient makes not to receive further requests, for the purposes described in Section 4.2. As the Recipient types an address on the confirmation page, we send what they have typed so far, and the IP address of their device, to our print and mail partner to suggest matching addresses sorted by approximate location. This happens even if the Recipient never submits an address. Address Requests expire if the Recipient does not respond within the request window; on expiration, any Credit used for the request is restored to the User and the request is cleaned up automatically.

6.3 Recipient choice

A Recipient is never required to confirm an address or create an Account. A Recipient may ignore an Address Request; decline on the confirmation page, which also stops us sending them further Address Requests from that User; or contact us at otto@trypostie.com to request that we suppress further Postie messages directed to them. Replying STOP to a message a User sent from their own phone goes to that User, not to us; use the confirmation page or email us instead.

7. Cookies and Similar Technologies

7.1 Mobile app

The mobile application does not use third-party advertising SDKs or cross-app tracking. It uses local device storage only for app-functionality purposes, such as session maintenance, draft state and the on-device features described in Section 3.3.

7.2 Websites

Our websites at trypostie.com and app.trypostie.com use the following limited categories of cookies and local-storage entries:

• Strictly necessary — sign-in and security cookies. Required for the site to function.
• Functional — remember your preferences (such as a sort order or theme).
• Analytics — measure aggregate site usage. We do not place advertising cookies, and we do not allow third parties to place tracking cookies via our websites.

You can clear or block cookies through your browser settings; doing so may affect your ability to sign in or use certain features.

We honor Global Privacy Control (GPC) signals received from supported browsers, treating them as an opt-out of "sale" or "sharing" of personal information for residents of states whose laws treat GPC as a valid opt-out signal.

8. Your Privacy Choices and Rights

8.1 Universal choices (available to all Users)

• Update your profile — update your sender profile, contacts, and notification preferences from within the app's settings.
• Email marketing opt-out — unsubscribe from marketing emails using the link in the email or by adjusting notification preferences in the app. Transactional messages are part of the Service and are sent regardless of marketing preferences (see Section 10 of the Terms of Service).
• Push notifications — disable through your device's operating-system settings or through the app's notification preferences.
• Text messages — reply STOP to opt out of further text messages from the Service. (See Section 10.3 of the Terms of Service for protocol-specific notes.)
• Permissions — revoke device-level permissions (camera, microphone, photo library, contacts, notifications) at any time through your operating-system settings. Some features will not work without certain permissions.
• Account deletion — from the Postie mobile app, open Settings → Delete account, type DELETE to confirm, and complete the flow. This cancels any active subscription, ends your access immediately, and removes your Account data from our live systems (subject to legal retention in Section 9). If you no longer have the app installed, you can request account closure on our public Delete your account page or by emailing otto@trypostie.com from the email address on your Account; we will verify your identity before processing.

8.2 Rights under U.S. state privacy laws

Depending on the U.S. state in which you reside, you may have one or more of the following rights with respect to the personal information we hold about you:

The states with comprehensive privacy laws as of the effective date of this Policy include California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Florida (FDBR), Montana (MCDPA), Iowa (ICDPA), Indiana (INCDPA), Tennessee (TIPA), Delaware (DPDPA), New Jersey (NJDPA), New Hampshire (NHPA), Minnesota (MCDPA), Maryland (MODPA), Kentucky (KCDPA), and Rhode Island (DTPPA).

8.3 How to exercise your rights

Send a written request to otto@trypostie.com with the subject line "Privacy Rights Request" and include:

• your full name and the email address associated with your Postie Account;
• a description of the right you wish to exercise; and
• enough information to verify that you are the person whose personal information is at issue.

We will respond to verifiable requests within the time required by applicable law (generally 45 days, with the possibility of one 45-day extension for complex requests). We will not charge a fee unless the request is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline the request as permitted by law.

You may use an authorized agent to submit a request on your behalf. We will require proof of the agent's authority and may require you to verify your identity directly with us.

If we deny your request in whole or in part, you have a right to appeal in any state where appeal rights apply. Send your appeal to otto@trypostie.com with the subject line "Privacy Rights Appeal." We will respond to appeals within the time required by applicable law (generally 60 days). If your appeal is denied, you may contact your state attorney general's office.

8.4 California-specific disclosures (CCPA / CPRA)

Categories of personal information collected, by source and purpose

In the preceding 12 months we have collected the following categories of personal information about California residents:

"Sale" and "sharing" of personal information

We do not sell personal information for monetary consideration, and we do not share personal information for cross-context behavioral advertising, in California or any other state. We do not have actual knowledge of selling or sharing the personal information of consumers under 16 years of age.

Sensitive personal information

We do not use or disclose "sensitive personal information" (as defined in the CPRA) for purposes other than providing the Service, performing services on your behalf, or as otherwise permitted under Cal. Civ. Code § 1798.121.

Retention

See Section 9.

Notice of financial incentive

We do not offer financial incentives or price/service differences in exchange for the retention or sale of personal information.

Shine the Light

California residents may request information about our disclosures of certain personal information to third parties for direct-marketing purposes under Cal. Civ. Code § 1798.83. We do not disclose personal information to third parties for their direct-marketing purposes.

8.5 Recipient rights (non-Users)

Recipients, gift recipients and people who pay through or receive a request link who are not Postie Account holders have the same rights described above with respect to information about them in our systems. To exercise those rights, email otto@trypostie.com and identify yourself by reference to (a) the email address or mobile telephone number to which the Postcard or Address Request was directed (or at which you received the link), or, for a gift recipient, the email address the Given Credits were bought for, and (b) where helpful, the date of the message and the sender's name as it appeared. We will verify the request and may ask for additional information before fulfilling it. You may also request that we suppress further Postie messages directed to your email address or mobile telephone number, and we will honor that request prospectively. On our confirmation page you can also stop us sending you further Address Requests from the User who asked; to lift that, email us.

8.6 No retaliation

We will not deny goods or services, charge different prices, or provide a different level or quality of service in response to your exercise of any privacy right.

9. Data Retention

We retain personal information only for as long as we have a legitimate business need or legal requirement to do so. The following table sets out our default retention periods, subject to extension where required for legal, accounting, audit, fraud-prevention, or dispute-resolution reasons.

9.1 Backups

Personal information may persist in encrypted backups for a limited period after deletion from active systems. We do not restore deleted personal information from backups except as necessary for disaster recovery, in which case we will re-apply pending deletion requests promptly.

10. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including:

• Encryption in transit using TLS for all client-server communications;
• Encryption at rest for personal information stored in our databases and object storage;
• Payment processing through a third-party payment processor (we do not store raw card numbers);
• Error reports stripped of personally identifying information, with no Account identifiers attached (Section 3.2).

No system can be guaranteed 100% secure. If you believe your Account or personal information has been compromised, contact us immediately at otto@trypostie.com.

11. Children's Privacy (COPPA)

The Service is not directed to, and is not intended for use by, children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will close the Account and delete that information from our systems.

If you are between 13 and the age of majority in your state of residence, you may use the Service only with the consent and supervision of a parent or legal guardian (Terms of Service, Section 3.1). You can't buy a Subscription or Credits until you reach the age of majority. An adult can buy Given Credits or a plan for you, and you can use the Posties, but you can't buy them for anyone, pay for a plan or move a plan's billing. We tell you about them in the app and by push notification, never with an offer to buy. You can ask an adult to buy Posties or a plan for you by sending them a link from your own phone. Whoever opens it sees your first name and what you asked for. We don't tell them your age, and we don't tell you who paid. If you ask for the Posties a draft needs, we keep that draft with your Account and send it for you once they're paid for. If the request isn't paid, we don't send it, and it stays in your drafts.

Age check. Where the law requires it, when you first open Postie on an iPhone or iPad, and from time to time after that, we ask Apple for your age range. The age range stays on your device: we don't store it on our servers, and we don't share or sell it. If it shows you are under 13, we don't create an Account, and we close any Account you already have and delete its information. If it shows you are between 13 and 17, we keep with your Account a note that you are a teen user, the identifier Apple assigns to your download of Postie, and a list of any updates waiting for your parent's or guardian's approval. We may also add the note if we learn your age another way. We use them only to turn off purchases (in their place, you can ask an adult to buy Posties or a plan for you), reminder and suggestion messages, and analytics linked to you, to choose which service providers check the messages on your Postcards, to ask your parent or guardian, through Apple, to approve significant changes to Postie, and to act if your parent or guardian withdraws consent. We don't share them with anyone except the cloud provider that stores your Account for us (Section 5.1), and we never sell them or use them for advertising. If your parent or guardian withdraws consent through Apple, Apple stops the app from opening, and we close your Account and delete its information as described in Section 9. When you turn 18 and Apple reports it, we remove the note. If we added the note because we learned your age another way, tell us when you turn 18 (Section 16) and we will remove it. If Apple tells us that a parent or guardian has withdrawn consent before we have matched that download of Postie to an Account, we keep only Apple's identifier for the download and the date of Apple's notice, for up to 24 hours, so that we can act on it if the download is matched to an Account in that time. We then delete it.

Removing what you've added. If you are under 18, you can remove the content you've added to Postie by deleting your Account (Settings → Delete account) or by emailing otto@trypostie.com. Postcards that have already been printed or mailed can't be recalled, so removal may not be complete.

We also recognize that Postcards may sometimes be addressed to minors. As described in Section 7.1 of the Terms of Service, Users may not send Postcards to children under 13 except where the User is the child's parent or legal guardian or has the express consent of a parent or legal guardian.

If you are a parent or guardian and believe a child has provided personal information to us or has received a Postcard or Address Request through the Service in a manner that concerns you, contact us at otto@trypostie.com and we will take appropriate action, which may include deletion of the information and suppression of further messages.

12. Marketing and Promotional Activity

• We send marketing communications only by email and only with appropriate consent or where permitted by applicable law. One exception: if you ask the app to remind you about an offer you have started, such as free Posties that are about to end, we send that reminder as a notification on your device. You can unsubscribe at any time via the link in the email or in the app.
• We don't send Recipients marketing email or text messages. If a Recipient creates their own Account, Section 4.1 applies to them as a User. After a Recipient adds their address, our confirmation page may show a short invitation to try Postie, and the QR code printed on a Postcard, and the page it opens, may invite the person holding it to join Postie (Section 4.2).
• The Service does not send marketing or promotional text messages to mobile telephone numbers — including by SMS, MMS, RCS, or any successor protocol (Terms of Service, Sections 10.3 and 25) — and does not share or sell mobile telephone numbers or text-messaging consent for anyone else's marketing (Section 5.6).
• We do not engage in cross-context behavioral advertising. We do not sell or share personal information with advertisers or data brokers.

13. Automated Decision-Making and Profiling

We do not use personal information to make decisions that produce legal or similarly significant effects about you (such as automated denial of service or credit) without meaningful human involvement.

14. International Users

The Service is offered only to users and Recipients located in the United States. We do not knowingly accept Accounts or address Postcards from outside the United States.

15. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you (for example, by email to the address associated with your Account or by an in-app notice) before the change takes effect, except that changes to address legal, regulatory, security, or fraud concerns may take effect immediately.

If a material change expands the categories of personal information we collect, the categories of recipients with whom we share personal information, or the purposes for which we use personal information, in a manner that the affected individual would not reasonably expect, we will obtain affirmative consent where required by applicable law.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. Prior versions are available on request to otto@trypostie.com.

16. How to Contact Us

The Service is operated by Infinite Improbabilities LLC, a North Carolina limited liability company doing business as Postie.

• Email (all privacy matters, including rights requests, suppression requests, complaints, and questions about this Policy): otto@trypostie.com
• Website: https://trypostie.com
• App: https://app.trypostie.com

Registered office (for service of process): Infinite Improbabilities LLC 4030 Wake Forest Road, Suite 349 Raleigh, NC 27609

Mailing address (for general correspondence): Infinite Improbabilities LLC 11552 US Hwy 15-501 N, Suite 202 #118 Chapel Hill, NC 27517

If you have a privacy concern that we have not addressed satisfactorily, you may also contact your state attorney general's office. California residents may, in addition, contact the California Privacy Protection Agency.