Thank you for using Lost Post. This policy explains what we collect, why, and how you can manage your data. We keep things simple.
1. About Lost Post
Lost Post lets users anonymously share stories, prompts, and memories with people around the world.
2. What data we collect
We collect only the information needed for the app to work:
- Required: name, email address, and general location (not precise GPS)
- Optional: age range and gender
- Automatically: basic usage data and technical logs (via third-party services)
3. Why we collect data
We use data to create and manage accounts, provide core features, personalize your experience, improve the app, and promote the app as described in Section 4.
4. Promoting the app
We may use the following in marketing and promotional materials for Lost Post — including our website, App Store listing and screenshots, social media accounts, press materials, newsletters, and paid advertising:
- The writing you post, in whole or excerpted.
- Your age range and gender, where you have provided them, shown alongside your writing in the same way they appear in the app.
- The postcard design you create.
We never use your name or email address in promotional materials. Age range and gender are shown only as broad, non-identifying labels, in the same form the app already displays them to other users.
Our legal basis for this use is our legitimate interest in promoting the app. You have the right to object to it at any time, and you can do so — with no effect on your account — by emailing hello@daydrift.design. If you object, or if you delete a post or your account, we will stop using that content in new promotional materials, though materials already published may remain in circulation.
The corresponding licence you grant us is set out in Section 3 of our Terms of Service.
5. Storage & security
Your data is stored on your device and on third-party services (we use Supabase). We rely on industry-standard security measures provided by those services, including encrypted transfers and access controls.
6. Legal basis (EU/GDPR)
For EU users we rely on consent, legitimate interests (to operate, improve, and promote the app), and performance of a contract (use of the app). Where we rely on legitimate interests, including the promotional use described in Section 4, you have the right to object.
7. Your rights
You can:
- Access your data
- Correct or update your data
- Request deletion of your data
- Withdraw consent
To make a request, email: hello@daydrift.design.
8. Age
Lost Post is not intended for children under 13. We do not knowingly collect information from children under 13 — if we learn we have, we will delete it.
9. Sharing & selling data
We do not currently sell or share personal data with third parties. We may do so in the future; if that changes we will update this policy and provide opt-out options where required by law.
10. Third-party services
We use Supabase for authentication, storage, and analytics. Supabase's privacy and security practices apply to data stored through their services.
11. Data retention
We keep personal data only as long as needed to operate the app. If you request deletion, we will remove your data within a reasonable time.
12. Contact
If you have questions or requests about your data, contact us at hello@daydrift.design.
13. Changes to this policy
We may update this policy occasionally. We will post the effective date at the top and notify users of significant changes.