Privacy Policy

PostyGallery is a private postcard album for iPhone, iPad, and Mac. It stores the postcards and details you add, including postcard images, sender names or handles, countries, cities, states, postmark dates, postcard IDs, notes, favorites, review state, and share settings.

On-device storage and iCloud

Your album is stored on your device. When iCloud is available, PostyGallery uses CloudKit to sync your album across your Apple devices using your Apple account. PostyGallery does not receive your Apple ID. If iCloud is unavailable, the app falls back to local-only storage and shows that state in Settings.

AI enrichment

When postcards need processing, PostyGallery sends the postcard front and back images to the PostyGallery API to read details such as postcard IDs, sender information, country, city, state, postmark, color, and stamp regions. The API may use third-party inference providers to process the image. AI results can be wrong, so uncertain details are shown for review.

If you enter your name and mailing address in Settings, that text is sent to the PostyGallery API alongside the images with each processing request. It is used solely to tell postcards you sent apart from postcards you received, by matching the addressee block on the card against your identity. It is included in the request to the third-party inference provider that reads the card, and is not stored server-side beyond processing that request.

Hosted share links

You can share postcard images directly from your device without creating a web link. If you choose to create a hosted share link, selected postcard images and share metadata are uploaded to PostyGallery's server so the link can be opened in a browser. Sharing a postcard back requires an extra confirmation because backs may contain addresses, handwriting, or private notes. You can revoke hosted share links from the app. During beta, hosted share pages and images are not cacheable, so every request checks the current revocation state. Revocation stops public display but does not immediately delete the stored R2 objects.

What PostyGallery does not do

PostyGallery does not sell your data, use your postcard data for advertising, track you across apps or websites owned by other companies, or connect to your Postcrossing.com account.

Service data

The server and hosting providers may process ordinary technical data needed to operate the service, such as request time, endpoint, status code, and IP address. This data is used for security, debugging, reliability, and abuse prevention.

Export, deletion, and contact

The app can export a .postygallery backup package, CSV metadata, and PDFs. You can delete local library data from Settings. For hosted share deletion or privacy requests, contact support@postygallery.com.