Privacy policy

This policy explains how Patr handles information when you use the Android app and these account pages. Patr is intended for adults aged 18 or older.

Information we handle

• Account details: your email, handle, display name, adult confirmation and sign-in identity. Passwords are stored as hashes. Google sign-in uses Firebase to verify your identity.
• Your chosen correspondence address: city, postal code, country, time zone and associated coordinates. These help calculate the simulated journey and appear on envelopes. Device location, when you choose to use it, helps find an address.
• Letters, drafts, stationery choices, delivery status, friendships, invitations, blocks and reports. Letter content is stored on Patr's server and is available to its sender and recipient according to delivery status.
• Purchase identifiers, entitlements and receipts used to verify purchases, issue rare stamps and prevent reuse. Google Play handles payment details; Patr does not receive your card number.
• Firebase notification tokens, app diagnostics, crash reports and app usage events. Diagnostics may include an opaque account identifier, device and app information. We do not put letter bodies into analytics events or notifications.

Why we use it

We use this information to run accounts and correspondence, save drafts, deliver notifications, fulfil purchases, recover accounts, investigate reports and improve reliability. Drafts are also saved in app-private storage on your phone. Saved-letter selections and reading and appearance preferences are stored on the device.

Services and sharing

Patr uses Google/Firebase for sign-in, notifications, analytics and crash diagnostics; Google Play and RevenueCat for purchases; hosted servers and databases for correspondence; an email provider for account links; and place-data services including LocationIQ, GeoNames and OpenStreetMap for address lookup. These providers process information needed for those services and may process it outside your country. Your chosen envelope details are visible to your correspondents. We do not sell personal information.

Security and access

Connections to the production server use HTTPS and access requires authenticated requests. Patr does not offer end-to-end encryption: the service stores and processes letters, and authorised service operators may access data for support, security or report review. Choose carefully what you send.

Retention and deletion

Your account and correspondence remain until you remove them or close the account. Closing an account deletes its profile, addresses, authentication sessions, device tokens, friendships, drafts and letters it sent or received. This also removes those letters from the other party's account. Independently earned stationery remains while your account exists; membership access lasts only while verified membership is active.

Numbered stamp serials and unresolved purchase or refund records can remain as anonymous records after deletion to avoid reissuing serials and complete refunds. Reports can retain the reported content and context for moderation and security, even if an account closes. Operational logs, provider records and existing backups follow their own retention and removal cycles. We do not promise immediate erasure from those systems.

Request data deletion without closing your account

To request deletion of specific data while keeping your Patr account, email nineteenlat@outlook.com from your account email. Include your Patr handle and identify the data you want removed, such as a draft or diagnostic data. Do not send your password. We verify the account and explain what can be deleted and any records that must be retained for security, moderation or purchases. The retention limits described above also apply to these requests.

Your choices

You can edit profile and address details, block people, control notification permission, and delete your account in Post Office or using our web deletion page. For other privacy requests, contact the address below. Changes to this policy will be posted here.