privacy policy

1. Who we are

postcat is published by Victor Yan, entrepreneur individuel, operating under the trade name Caralatte Studio. Victor Yan is the data controller for the information described here.

• SIREN: 878 082 486
• SIRET: 878 082 486 00027
• Registered business address: 34 Boulevard de Picpus, 75012 Paris, France
• Privacy contact: hello@postcat.me

This page covers the postcat app and postcat.me.

2. What we hold

The things you make

We store the drawings you send so they can reach your partner’s widget and stay on your shared memory wall. Photos added to a drawing become part of that image. We also store the reactions sent back to a drawing.

We do not sell your drawings, use them to train models, or publish them. Private sharing is not a promise of end-to-end encryption: the service providers below process information to run the app, and information may need to be accessed to handle your support request, protect the service, or meet a legal obligation.

The little that identifies you

No email or password is needed to get started. We create an account identifier to connect you to your shared space. It is linked to your display name and activity, so it is personal data, not an anonymous record.

• Your account and shared-space identifiers, display name, app language, and pairing or recovery information
• Information your partner shares in your space, such as their name, drawings, and reactions
• Your email address and message if you contact us by email

Things the app needs to work

• Device push tokens and notification choices, for drawing delivery and messages you allow
• Whether the postcat widget is installed
• Send history and streak information
• Your plan status and the number of live postcats available to you and your partner
• Device model, operating system, app version, and technical request or error information, which can include an IP address

3. Payments, analytics, and crashes

Apple, or Google Play on Android where available, handles store payments; we do not receive your full card details. RevenueCat manages subscription access using your shared-space identifier, purchase status, and member names and identifiers. An analytics identifier can link subscription information to app activity.

PostHog receives events such as opening a screen, sending a postcat, or viewing plus, linked to your account identifier and display name. Device details, shared-space identifiers, plan, widget, and streak information help us understand how the app is used. PostHog also estimates an approximate location, such as your country or region, from your IP address for audience analytics. This does not use GPS or request device-location access. Sentry receives crash reports, technical logs, and performance diagnostics; its iPhone configuration allows personal information in those reports.

On the postcat.me homepage, PostHog receives one storage-free pageview when the page loads and a small set of interaction events when you start drawing, use a main button, or simulate sending a postcat. Those events can include the button name and placement, store platform, page address, referring site, browser and device details, and an approximate location. We do not send your drawing, its strokes, or anything you write to PostHog. Automatic click capture, session replay, and person profiles are turned off.

The current app starts analytics and diagnostics automatically and does not offer a separate in-app analytics switch. You can contact us about these uses or exercise your rights below. This notice, a camera permission, or accepting our terms is not consent to optional tracking.

Invitation pages also send a page visit and events for preview availability, store clicks, attempts to open the app and successful code copies. These use a random identifier kept only for the page visit, the generic path /join/, language and platform. We never send the invite code, private invitation URL, sender name or drawing with these events.

Website analytics requests pass through e.postcat.me, a PostHog-managed reverse proxy using Cloudflare, before reaching PostHog in the EU. This changes how these requests are delivered, not the events we collect.

4. Why we use it

• To provide postcat: pairing, delivering drawings and reactions, memories, recovery, and subscription access use the data needed to perform our agreement with you.
• To keep it working safely: handling support requests, preventing abuse, and investigating faults serve our legitimate interests in running a reliable, secure service.
• To meet legal duties: handling applicable record-keeping obligations, valid legal requests, and privacy rights requests.

Optional tracking that requires consent needs a separate, freely given choice. Product analytics is not necessary to deliver a drawing, and including it in these terms does not make it so.

Account and pairing information are needed to connect your space. Photos, reactions, and a subscription are your choice; you can draw without adding a photo or buying plus.

5. The services that help us

We do not sell your data, share it with advertisers, or run advertising in postcat.

Some providers operate outside the European Economic Area, including in the United States. An EU server location alone does not rule out overseas processing or support access. Contact us for information about the providers and applicable transfer arrangements; we do not claim that everything stays in France or the EU.

6. How long we keep it

• Drawings stay until you delete them or the shared space is deleted. A postcat leaves the widget after 24 hours but remains on the memory wall.
• Account and shared-space information is kept to maintain the space and recovery, unless the account or space is deleted. Leaving a device is not a deletion request.
• Device tokens are kept for delivery and are removed during account deletion or when the delivery provider reports that they are invalid.
• Analytics, diagnostics, support messages, and purchase records have separate retention from your drawings. Deleting the app or your postcat account does not automatically erase all of those records.

There is currently no verified automatic deletion deadline covering all analytics and diagnostic records. Contact us to request their deletion or ask what remains associated with you. Records needed for a specific legal obligation or dispute may have to be retained, and we will explain that when responding.

7. Your choices and rights

Under applicable data protection law, you can request access, correction, deletion, or restriction of your data. You can object to processing based on legitimate interests and request a portable copy where that right applies. Where processing relies on consent, you can withdraw it without changing the lawfulness of earlier processing.

Email hello@postcat.me. We may need limited information to find your account and verify the request, since we do not ask for an email when you start. Please do not send your password, access token, or intimate drawings.

We normally respond within one month. If a request is complex or there are many requests, the GDPR allows up to two extra months; we will explain any extension within the first month. You can complain to the CNIL or your local data protection authority.

8. Deleting your data

Leaving this device detaches it and keeps your shared space available for recovery. It does not delete your account or drawings.

Deleting your account in Settings removes your account, profile, device tokens, and the records of postcats you authored from the shared service. Your partner keeps their own drawings. If nobody remains, the shared space is removed too.

The service attempts to delete the stored image files after removing the database records. Those are separate operations: a file-cleanup failure can leave an image stored until it is cleaned up. We do not promise instant deletion from every system or backup.

The account-deletion action does not automatically request erasure from PostHog, Sentry, or RevenueCat. Email us to include those records in a privacy request. We cannot erase screenshots or copies your partner saved outside the app.

Deleting a postcat account does not cancel a store subscription. Cancel it in the Apple or Google account used to pay.

9. Your camera and this website

When you choose a library photo, the system picker gives postcat the image you select, not access to your whole library. Camera access is used to take a photo for your postcat. You can change camera and notification permissions in your phone’s settings.

The drawing demo on this website stays in your browser. Its send animation does not upload your drawing or deliver it to another person. The homepage sends one pageview and the limited button, drawing-start, and simulated-send events described above to PostHog. Automatic interaction capture and replay are turned off. PostHog keeps its temporary identifier in page memory only and does not store cookies or local or session storage on this website. Cloudflare receives technical request information, such as IP address and browser information, to serve and protect the website. If you email us, your email provider handles that message too.

10. Age and updates

postcat is not for children under 13, or below a higher minimum age that applies locally. Contact us if you believe an underage child is using it.

For online processing based on consent, France requires the joint consent of a child under 15 and their parent or guardian. Other countries have different thresholds. This is separate from the rules about agreeing to a contract; a sentence in our terms does not replace any consent we must obtain.

We will keep this page dated and explain material changes through appropriate notice as required by law. A revised policy does not itself give permission for new consent-based processing.