Privacy Policy

1. Information We Collect

When you use Stamp Letter, we collect the following information:

• Account information: Email address, username (@handle), and profile picture you provide during registration.
• Authentication data: Encrypted password (for email accounts) or OAuth tokens (for Apple/Google sign-in).
• Photos and stamps: Photos you take within the app to create stamps. These are stored on our servers so you can use them in letters.
• Location data: GPS coordinates captured when you take a stamp photo, used to display the stamp's origin location (city, country).
• Letters and messages: The content of letters you compose and send to other users.
• Contacts and social data: Your friend list, friend requests, and contact categories within the app.
• Device information: Push notification tokens, device type, and operating system version.

2. How We Use Your Information

• To provide and maintain the Stamp Letter service, including sending and receiving letters.
• To display location information on your stamps (city and country from GPS data).
• To enable social features like finding friends, sending friend requests, and managing contacts.
• To send push notifications for new letters and friend requests.
• To improve and optimize the app experience.

3. Data Storage and Security

Your data is stored on secure servers hosted in Europe. Photos and stamps are stored using encrypted object storage (S3-compatible). Passwords are hashed using bcrypt and are never stored in plain text. All communications between the app and our servers use HTTPS encryption.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your data is shared only in the following cases:

• With other users: When you send a letter, the recipient can see your stamp, message, and display name.
• With your consent: If you explicitly allow sharing (e.g., making your profile searchable by username).
• Legal requirements: If required by law or to protect our rights and safety.

5. Your Rights

You have the right to:

• Access your personal data stored on our servers.
• Correct inaccurate information (email, username, profile picture).
• Delete your account and all associated data. You can do this from the app's Profile screen or by visiting our account deletion page.
• Export your data by contacting us at [email protected].

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data — including stamps, letters, contacts, and profile information — is permanently removed from our servers within 30 days.

7. Children's Privacy

Stamp Letter is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at [email protected].

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this privacy policy, contact us at [email protected].