Privacy Policy
Postly Photo Resize is built with privacy as a first-class feature, not an afterthought. This policy describes what we collect, why, and your control over it.
1. Who we are
Operator: Postly Photo Resize team. Contact: support@phomate.pro.vn. We're an indie team based in Vietnam, not affiliated with any larger entity.
2. Data we collect
Account information
- Email address (for sign-in and security)
- Display name and optional avatar
- Locale preference
Content you create
- Virtual crush profiles you create
- Messages you send to virtual companions
- Letters you draft (never auto-sent)
- Wall posts (anonymized publicly)
- Coach profiles describing real-world crushes
Privacy-preserving identifiers (Secret Match)
For Secret Match, we store ONLY a SHA-256 hash of your normalized phone or social handle, salted with a global server secret. We never store the plain text. We cannot derive the original from the hash.
Technical data
- Device platform (iOS), app version, locale
- Approximate region from IP for rate limiting (not stored long-term)
What we do NOT collect
- Location (no GPS access requested)
- Camera or microphone (no permissions requested)
- Photos (no library access requested)
- Contacts (no address book access)
- Advertising identifier (no IDFA, no ATT prompt)
3. Why we collect it
- Provide the core service (chat, letters, wall, secret match)
- Authenticate you securely (account)
- Comply with content moderation rules (PII detection, self-harm screening)
- Detect abuse and rate-limit attacks
- Restore your data on a new device after sign-in
4. How long we keep it
Account-linked data: until you delete the account. After deletion, we permanently remove within 30 days. Backup retention up to 90 days under encryption. AI request logs: 30 days.
5. Subscriptions and one-time purchases
Apple processes all payments. We never see or store your card details. Receipt validation happens server-side via Apple's official receipt API. Subscription auto-renews until cancelled in iPhone Settings.
7. Third parties
- Apple - payments, push notifications, app distribution
- OpenAI - text generation for virtual crushes (no training)
- Google Cloud - voice synthesis when you enable daily voice notes
None of these third parties receive personally identifiable information beyond what's strictly required (e.g., a hashed user id for log correlation).
8. Your rights
Under GDPR, CCPA, and Vietnam Cybersecurity Law you have the right to: access your data, correct it, delete it, export it, restrict processing, object to processing, and withdraw consent. Email support@phomate.pro.vn to exercise any right. Response within 30 days.
9. Children
Postly Photo Resize is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has registered, contact us immediately.
10. Changes
If we materially change how we handle data, we will notify you in-app and by email at least 14 days before the change takes effect.