MailPalPrivacy Policy
- MailPal reads photos of your mail so it can tell you what each piece is and whether it is a scam. That is the only reason we see them.
- Our server does not save your photos or what they say. It sends the photo to our AI provider, returns the answer to your phone, and keeps nothing.
- Your scanned mail is kept on your phone, inside the app, for as long as you choose (or not at all). You can clear it any time.
- We never sell your data, never show ads, never track you across other apps, and never let anyone use your mail to train AI.
- You can delete your account and everything we hold about you from inside the app.
Who we are
MailPal is made by Andrews Collective LLC, 1832 Christian Valley Rd, Auburn, CA 95602, United States ("we", "us"). Questions about privacy: support@mailpal.app.
What we collect, and why
| What | Why | How long we keep it |
|---|---|---|
| Photos of your mail (inside or the outside of an envelope) | To read the mail and give you a verdict. Sent over an encrypted connection. | Our server keeps nothing after the answer is sent. Our AI provider may hold it briefly; see "Who helps us" below. |
| The analysis (what the mail is, amounts and due dates printed on it, scam signals) | Shown to you and used for bill reminders. | Stored only on your phone, for the period you choose in the app (none, 30 days, 90 days, or 1 year). Never stored on our server. |
| Name and email (only if you sign up) | To verify your email, give you a MailPal ID, restore your account, connect the Family plan, and, only if you opt in, send occasional product news. | Until you delete your account. |
| MailPal ID and account token | To identify your account securely, for example when a family member links to you or when Premium is gifted to you. | Until you delete your account. |
| Family plan links | To record who you have approved to watch for scams in your mail, and whom you watch for. | Until either person removes the link, or deletes their account. |
| Family scam alerts | If you have approved a family member, and MailPal flags a likely scam in your mail, we send them a short summary: the AI's title for the piece, the kind of warning, and a one-sentence explanation. Never the photo, amounts, account numbers, or addresses. Bills, medical and personal mail are never shared. | 90 days, then deleted automatically. |
| Notification token | To deliver family alerts and weekly family recaps to your device. | Until you delete your account or the token stops working. |
| Subscription status | To know whether you have Premium. Payment is handled entirely by Apple; we never see your card. | As long as you have an account or subscription. |
| Stamp counters | Anonymous totals of how many people earned each collectible stamp. No identity attached. | Indefinitely, as totals only. |
| Basic server logs | Security and keeping the service running (for example, the time of a request and whether it succeeded). Logs never contain your photos or what your mail says. | A short period, then overwritten. |
You can use MailPal without signing up. If you never enter your email, we hold no name, email, or account for you at all.
What stays on your phone
Your scanned mail, its photos, your settings, and your protection stats are stored inside the MailPal app on your iPhone, where iOS protects them with your device passcode. In Settings → Privacy & scan history you can choose how long mail is kept, clear it all, or export a plain-text copy for yourself.
Who helps us run MailPal
We use a small number of service providers. Each receives only what it needs to do its job.
- Anthropic (AI analysis): receives the photo of your mail to read it. Under its commercial terms Anthropic does not use this data to train its models. It may retain inputs for a limited period for safety and abuse monitoring, as described in its own policies.
- Hetzner (server hosting, United States): runs our server and stores the account information described above.
- Apple (App Store and payments): processes subscriptions. We never receive your payment details.
- RevenueCat (subscription management): receives an anonymous app ID (or your account ID once you sign up), your purchase history, and basic device information, to confirm whether you have Premium.
- Resend (email): sends verification codes and, if you opted in, occasional emails.
- Expo (notification delivery): passes family alerts and recaps to Apple's notification service.
What we never do
- Sell or rent your information.
- Show ads or use advertising or analytics tracking SDKs.
- Track you across other companies' apps or websites.
- Use your mail, or let anyone use it, to train AI models.
- Share your everyday mail with family members. They only ever see likely scams, and only after you approve them.
Your choices and rights
- Delete everything: Settings → Delete account permanently removes your account, family links, alerts, and notification tokens from our server, and wipes MailPal's data from your phone. If you subscribe, cancel in your App Store settings too so Apple stops billing you.
- Clear history: Settings → Privacy & scan history → Clear scan history.
- Export: Settings → Privacy & scan history → Export my data.
- Marketing email: it is optional; you can switch off "Keep me posted" when you sign up. To stop it, use the unsubscribe link in any such email or write to support@mailpal.app.
- Family links: remove anyone in Settings → Family plan at any time.
- Notifications: turn any of them off in Settings → Notifications.
Depending on where you live (for example California under the CCPA/CPRA, or the EU and UK under the GDPR), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. Email support@mailpal.app and we will respond within 30 days. We do not sell or "share" personal information as those laws define it. Where the GDPR applies, we process account information to provide the service you asked for (contract) and send marketing email only with your consent.
Security
All traffic between the app and our server is encrypted. Account data on our server is accessible only to us. On your phone, MailPal's data is protected by iOS data protection and your passcode. No system is perfect; if we ever learn of a breach affecting you, we will tell you promptly.
Children
MailPal is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has signed up, contact us and we will delete the account.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app before the change takes effect.
Contact
Andrews Collective LLC · 1832 Christian Valley Rd, Auburn, CA 95602 · support@mailpal.app