Privacy

Last updated date of publication

The short version: Postproof works entirely on your iPhone and your videos are never uploaded. You don't need an account. If you choose to make one, to buy videos on this website, we keep only what's needed to run it.

Who we are

Postproof is made by trading name or "Patrick Sibale", geographic address in the UK ("we"). We are the data controller for the limited personal data described below. Contact: privacy email address.

The app

Postproof converts videos on your device. It does not send your videos, photos or any information about them to us or to anyone else.

• When you choose a video, iOS gives Postproof only that video. The app cannot see the rest of your library.
• If you save a video to Photos, Postproof asks for permission to add videos only.
• There are no analytics, no advertising and no tracking. An account is optional (see below).
• To count your free video each week and any 5-video packs bought through Apple, the app stores the date of your last free video and the number of pack videos left in your iPhone's Keychain. They stay on your device.

Purchases through Apple

Postproof Pro and 5-video packs in the app are sold through Apple's App Store. Apple processes the payment under its own privacy policy. We do not receive your name, email or payment details; the app only learns from Apple what you bought.

Your account (optional)

You only need an account to buy videos on this website and use them in the app. You sign in with Apple, on the website and in the app. We store:

• the identifier Apple gives us for your Apple ID, and the email address Apple shares (which can be a private relay address if you choose to hide yours);
• how many videos are left on your account;
• a record of each payment: its reference, amount, date and whether it went through.

We use this to give you the videos you paid for. The lawful basis is the contract between us. Your account details are kept until you delete your account, which you can do in the app (Settings, Delete Account) or on the Buy videos page. Payment records are kept for retention period for accounting records, e.g. 6 years after the payment, without your account attached, because we must keep financial records.

Accounts are stored by Supabase, as our processor, in its data centre in Ireland. The UK recognises the EU as giving adequate protection, so no further safeguards are needed for this. Signing in is provided by Apple.

Paying on this website

Payments on this website are handled by PayChangu (Malawi), which takes your mobile money or card payment and sends us only the payment's status, reference and amount. PayChangu handles your phone number, card and payment details under its own privacy policy; we never see your PIN or card number. Decide and state the transfer basis for data shared with PayChangu in Malawi (UK IDTA or Addendum, or another Article 49 basis) and whether PayChangu acts as an independent controller.

This website

The website sets no cookies and uses no analytics. The Buy videos page loads Supabase's sign-in library from jsDelivr and, once you sign in, keeps your session in your browser's local storage so you stay signed in. That storage is strictly necessary for the sign-in you asked for, and signing out removes it. Our host, Vercel, keeps standard server logs (such as IP address and time of visit) for security, for retention period. The lawful basis is our legitimate interest in keeping the site secure.

When you email us

If you contact support, we use your email address and message to reply. The lawful basis is our legitimate interest in answering you. We keep emails for retention period, then delete them. Email provider stores them for us, in a country outside the UK under an adequacy decision, the IDTA or the UK Addendum, as applicable.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Email us to use any of these rights. You can also complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to help first.

Children

Postproof is not aimed at children. The app collects no personal data unless someone chooses to make an account.

Changes

If this policy changes, we'll update the date above.