Skip to content
Postflight Get the app
MENU

Privacy

Last updated: 26 October 2026

Postflight is an app for sending photo postcards to friends. A courier carries each one across the map and it lands after a while, like real post. This page says, in plain words, what we keep, why, who helps us run it, and how to get your data or delete it.

Who we are. Postflight is made by Andrei Palacean, Romania ("we"). We decide what happens to your data (the "controller" under the GDPR). Write to us any time: bragi.support@gmail.com.

What we keep, and why

  • Your account: your email address (to send your sign-in code), or your Google account's email and first name if you sign in with Google. Why: to sign you in and keep your passport yours.
  • Your passport: the name you choose, your @handle, your home city and the town or neighbourhood you pick, your time zone, the stamp, colours, short line and signature you draw. Why: friends see it so they know it's you, and your city is where your couriers set off from and land.
  • Your postcards: the photo, the words, who it's to, when you sent it, the courier and its route, when it landed and whether it was opened, and the stamps (reactions) on it. Why: to carry the card to your friend. A card stays sealed on our server until it lands; only you and the friend it's for can see it.
  • Friends: who you're friends with, invitations you made or used, people you blocked, and your "lamps" (days in a row you've written to each other). Why: Postflight only sends between friends.
  • Help notes: what you write to us at Pip's help window, plus the case tag shown on the note (app version, phone model and Android version) and our replies. Why: to answer you. Notes reach our support mailbox as an email, and replies come back to you in the app and by email.
  • The Courier Yard: the practice runs you finish with your couriers (which courier, which game, the day, and whether the run was clean) and the levels they add up to. Why: to keep your couriers' levels and the looks they earn, on every phone you sign in on.
  • Notifications: a push token for your phone. Why: to tell you when a card lands or a friend replies. You can turn each kind off in the app or in Android's settings.
  • The Postmaster ticket: if you buy it, the Google Play purchase token, plan, state and dates. We never see your card or payment details; Google Play handles the payment. Why: to unlock Postmaster and keep it right when it renews or ends.
  • Things that stay on your phone: your camera shots before you send them, your passport photo, the outbox of cards waiting for a signal, and settings like sounds and themes.

We don't sell your data, we don't show ads, and we don't use your photos or words to train anything.

Location. We never use your precise location. To pre-pick your country and town, the app looks at your phone's settings (network, SIM, language, time zone). If you tap "Near me" and allow it, the app also reads the approximate location your phone already has (network-based, about town-sized). All of this happens on your phone: the location itself is never sent to us or kept, only the town you choose. You can say no, turn the permission off any time in Android's settings, or simply pick your town by hand.

Our legal reasons (GDPR)

  • To give you the app you signed up for (contract): your account, passport, postcards, friends, notifications you allowed, and the Postmaster ticket.
  • Our legitimate interest in keeping Postflight safe and working: fixing problems, stopping abuse, and the case tag on help notes.
  • The law, where we must keep purchase records.

Who helps us run Postflight

These companies process data for us, only to do their part:

  • Supabase (database, sign-in and photo storage), servers in the EU (Ireland).
  • Google: Firebase Cloud Messaging (notifications), Google Play (purchases), Google Sign-In (if you use it), and Gmail (our support mailbox).
  • Resend (sends your sign-in code email).
  • Map and weather: map tiles come from OpenFreeMap (OpenStreetMap data) and the weather for your city from the Norwegian Meteorological Institute (MET Norway). They see the request, like any website, but no account details; weather is asked for your city's centre, not your position.

Some of these companies are outside the EU. Where data leaves the EU, it's covered by the EU's Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

  • Your passport and postcards: while you have an account.
  • When you close your passport (Settings, Leaving, Remove my data), it's held for 14 days in case you change your mind, then deleted for good, with your photos. Cards you already gave friends can stay with them as "from someone who left", without your name, handle, face or city, unless you chose to take them back. Backups forget everything within 30 more days.
  • Help notes: up to 2 years after the last message, so we can follow up.
  • Purchase records: as long as the law requires.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to move it, or to stop or limit something we do with it. Most of it you can change yourself in the app (your passport, notifications, friends). For anything else, write to bragi.support@gmail.com from the email address of your account, and we'll answer within a month. You can also complain to your data protection authority (in Romania, the ANSPDCP).

Deleting your account

In the app: Settings, Leaving, Remove my data. Without the app, see tornink.com/delete.

Children

Postflight is for people aged 13 and over. If you think a younger child has an account, tell us and we'll delete it.

Changes

If we change this page in a way that matters, we'll say so in the app before it applies.