This Privacy Policy describes how Lamp Post collects, uses and shares personal information in connection with the application and related services (the Service). The Service is operated by {{COMPANY}}, the data controller for the personal information described here. Questions about this policy can be sent to support@postalamp.com.
Information we collect
We collect the following categories of personal information:
| Category | Description |
|---|---|
| Account information | The user's name, email address and the sign-in identifier from their authentication provider (Apple, Google or a one-time code sent to the email address). We never receive a password. |
| Content the user provides | What the user creates in the Service, their settings, the posts the user saves (visible to the user alone), and any information the user chooses to make public. |
| Posts and their location | The photos the user takes inside the Service, the exact coordinates and the accuracy the device reported at the moment of the shot, the time of the shot, the caption, and the likes and comments the user adds. A post, its coordinates, its caption and its comments are public by design: every visitor can see them, with the user's handle and display name. The photo is re-encoded on the device before upload and carries no metadata. Each upload is recorded with its time, and an upload that never becomes part of a post or a profile picture is removed after a day. Deleting a post removes it and its photo. A post our moderators hide stops being shown to anyone but the user, who sees the reason, and its photo leaves public view. The post and its photo are kept for a review until the user deletes the post or the account. |
| Usage and device information | The user's IP address and an approximate location derived from it, which our hosting provider sees in its request logs (the Service itself stores no IP address), device and browser characteristics, and records of activity on the Service. |
| Payment information | Where the user buys a paid feature, transaction records processed by our payment provider or, in the iOS app, by Apple through our subscription management provider. We do not receive or store full payment card details. |
| Notification information | Where the user turns on push notifications, the device's push token and the user's account identifier, held by our notification delivery provider, together with the content of the notifications we send. The Service keeps the user's activity (who liked or commented on the user's posts, who followed the user or asked to, and who accepted the user's requests), deleting each item 90 days after it is read, the user's choice of which of these send a notification, and when a notification about the likes on a post last went. |
| Communications | Information the user submits through our support or data-request channels. |
How we use information
We use the information we collect to operate, maintain and improve the Service, to authenticate users and secure accounts, to prevent fraud and abuse, to process transactions, to communicate with users and to comply with legal obligations. Where required by law, we rely on the following legal bases: performance of our contract with the user, our legitimate interests in providing and improving the Service, the user's consent where we ask for it, and compliance with legal obligations. We do not sell personal information.
Who processes data on our behalf
We share personal information with the service providers below. They process it on our behalf and may use it only to provide their service to us.
| Vendor | Purpose | Data sent | Where it lives |
|---|---|---|---|
| Clerk | Authentication and account identity | Email address, name, the sign-in identity from Apple or Google, sessions | the United States |
| Supabase | Database and file hosting | The application database (accounts, posts with their coordinates, likes, comments, saved posts, the activity, profiles, follows, reports, settings, logs) and the photos store (every post's photo and thumbnail, and the profile pictures, which are public, and, out of public view, the photos of posts our moderators hid) | the United States |
| Vercel | Application hosting and edge network | Request logs, IP address, an approximate location derived from it | the United States |
| RevenueCat | App Store subscription and purchase management | An anonymous app user id, purchase receipts from Apple, entitlement status | the United States |
| OneSignal | Push notification delivery | The device push token, the account identifier, the content of the notifications sent | the United States |
| Resend | Transactional email delivery | Email address and the content of the emails sent | the United States |
How we share information
We may also disclose information where required by law, to enforce our Terms of Service, or to protect the rights, safety and security of our users and the Service. We do not sell personal information.
International transfers
The Service is operated from the United States. A user who accesses it from elsewhere has their information transferred to and processed in the United States. Where required, such transfers are made under appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission.
Data retention
We retain personal information for as long as the user's account is active or as necessary to provide the Service. Following account deletion, public content is removed immediately and personal information is deleted within 30 days, except where retention is required for legal, accounting or security purposes.
Rights and choices
Depending on their location, the user may have the right to access, correct, delete or obtain a copy of their personal information, and to object to or restrict certain processing. The user can delete their account on the account deletion page and download a copy of their data on the data export page, or send a request to support@postalamp.com. Users in the European Economic Area or the United Kingdom may also contact their local data protection authority.
Age
The user must be at least 16 years old, or older where the law of the user's country sets a higher age of digital consent. We do not knowingly collect personal information from anyone below that age, and will delete it if we become aware of it.
Security
We implement reasonable technical and organizational measures designed to protect personal information, including isolation of every account's data at the database level, server-side checks on every action, and secrets held only on the server.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email, and the date above will be updated accordingly.
Questions about this document can be sent to support@postalamp.com. Please also read the Terms of Service.