This is the privacy policy for Posthaste, an iOS application. It describes what data the app accesses, how it's used, and the choices you have. We have written this short and clear because Posthaste's privacy story genuinely is short and clear: nothing leaves your device.
Posthaste stores everything you create — your saved senders, recipients, custom layouts, and printer calibrations — on your iPhone, in the encrypted local database iOS provides to all apps (SwiftData / Core Data, backed by SQLite, encrypted at rest with the device passcode).
Posthaste does not transmit your data to our servers, to any analytics provider, to any advertising network, or to any third party. Posthaste has no servers that store user data.
The only data that ever leaves your device is:
That's it.
The Bulk Import feature lets you import a screenshot of an order page and have Posthaste extract every recipient address from it. This works entirely on your iPhone using Apple's Vision framework (VNRecognizeTextRequest).
When you tap "Screenshot or photo" in Bulk Import:
The image is never uploaded. The OCR is never sent to a cloud service. The image data is released from memory as soon as the addresses have been extracted and the screen is dismissed.
The Photos picker uses iOS's "limited photo library" experience by default — Posthaste only sees the single image you pick, not your photo library.
When you import a CSV file (such as a TCGplayer or eBay order export), Posthaste reads the file from the location you select via the iOS Document Picker. The file is parsed entirely on your device. Posthaste does not upload the CSV. After import the CSV reference is released — Posthaste keeps only the recipient addresses you choose to save.
If you upload an image as a sender logo, that image is downsampled to a maximum 400-pixel edge and stored as a JPEG inside Posthaste's local SwiftData store. It never leaves your device.
Posthaste uses Apple's StoreKit 2 framework for the one-time Pro unlock. When you purchase, the transaction is processed entirely by Apple. We do not see your name, your billing address, your payment method, or your Apple ID. We can confirm only one thing: whether your purchase is currently active. That confirmation comes from Apple, on your device.
To remove any ambiguity:
There is no Posthaste account, no Posthaste login, no Posthaste backend.
If you have iCloud Backup enabled in iOS Settings, Apple will include Posthaste's local database in your encrypted iCloud Backup. This backup is end-to-end encrypted by Apple if you have Advanced Data Protection enabled. We never have access to your iCloud backup.
A future Posthaste version (1.1) may offer optional iCloud Sync of your senders and recipients across your own devices using Apple's CloudKit. This would also be end-to-end encrypted via Apple's infrastructure. We would never see the data.
Posthaste is rated 4+. We do not knowingly collect data from anyone, including children. We hold none.
Because Posthaste stores your data only on your device, you can exercise every data right yourself:
If you have questions, email support@getposthaste.com.
If Posthaste ever changes to collect or transmit user data — for example because we add a server-backed feature — we will:
We will never silently begin collecting data.
Email: support@getposthaste.com