Privacy Policy
Effective 15 October 2026 · Postklar for iPhone
Your name and address, ID and bank numbers are masked on your phone — and you see exactly what's sent, every time, before it leaves.
1. Who is responsible
Özgür Çetintaş, Rotterdam, the Netherlands ("we") is the controller of the personal data described here. Contact: support@postklar.app.
2. The short version
- Postklar has no account and never stores your letters on its servers. Your letters, photos and explanations stay on your phone, and in your own iCloud if you turn iCloud backup on.
- To explain a letter, the app sends the letter's text after masking it on your phone. You see exactly what will be sent before you send it.
- We count, not read: usage statistics are counts and codes, never what a letter says.
3. What we process, why, and for how long
| What | Why, and the legal basis | How long |
|---|---|---|
| The masked text of a letter you choose to have explained, with the language you want and the country the letter is from | To write the explanation you asked for (performance of our agreement with you, GDPR Art. 6(1)(b)). Our server passes it to OpenAI and keeps none of it. | Not kept by us. OpenAI keeps it for up to 30 days to detect abuse and does not use it for training (section 5). |
| A random install identifier created on your phone, an App Attest key that proves the request comes from the genuine app, and monthly counters | To count the free letters and Pro's fair use, and to keep the service from being abused (Art. 6(1)(b) and our legitimate interest in security, Art. 6(1)(f)). | Counters for the month they count; the key while the app is installed and attested. |
| Your App Store purchase, as Apple signs it: the transaction's identifier, product, dates and environment | To give you Pro, and to limit one subscription to five devices in thirty days (Art. 6(1)(b)). Apple processes the payment; we never see payment details. | Until the subscription ends, plus the 30-day device window. |
| Request records: time, duration, status and error category, token counts, and short one-way hashes of the identifiers above. Never the letter's text, and never headers | To run the service, find faults and stop abuse (Art. 6(1)(f)). | Kept by our hosting provider's log system for its standard retention period. |
| A report you choose to send when an explanation was wrong: your verdict and, only if you tick that you agree to share it, the masked letter text and your correction | To improve the explanations (your consent, Art. 6(1)(a); you can send a report without sharing any text). The text is checked again for personal details before it is stored, and refused if any are found. No identifier is attached. | Deleted after 24 months, or earlier once used to build a test case. |
| Usage statistics: which screens were seen, which permissions were given, which plan was chosen. Codes and counts only, under a random identifier that exists only for this, is replaced every month and is not linked to you | To see where the app is hard to use. Only if you agree (Art. 6(1)(a)); you can change this in Settings. | Kept by TelemetryDeck under its retention policy. |
4. What we do not do
- We do not keep your letters, and we do not sell or share personal data for advertising.
- We do not track you across apps or websites, and the app shows no ads.
- No decision with legal or similarly significant effect is made about you by automated means. An explanation is information about your letter, not advice and not a decision.
5. Who else processes data for us
- OpenAI, L.L.C. (United States) writes the explanation from the masked text, under a data processing agreement. It does not use the text for training and keeps it for up to 30 days for abuse monitoring.
- Cloudflare, Inc. runs our server, which handles each request in Europe where possible.
- TelemetryDeck GmbH (Germany) receives the usage statistics described above.
- Apple provides the App Store, payments and, if you turn it on, iCloud. Apple's own privacy policy applies to those.
Where data is transferred outside the European Economic Area (OpenAI, Cloudflare), the transfer relies on the EU–US Data Privacy Framework where the recipient is certified, and on the European Commission's standard contractual clauses otherwise.
6. Your rights
You can ask us for access to, correction or deletion of personal data about you, restriction of or objection to its processing, and its portability. Where processing relies on your consent, you can withdraw it at any time. Write to support@postklar.app.
Because there is no account, we usually cannot tell which of the little data we hold belongs to you. Write to us and we will tell you what we can find and how. Deleting the app deletes your letters, and the install identifier, from your phone; data in your own iCloud is managed in your Apple Account.
You may also complain to a data protection authority, in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the one where you live.
7. Sharing a letter yourself
When you use "Share this letter", you send it yourself through your phone's share sheet, with your real details in it. It does not pass through us.
8. Children
Postklar is not meant for children under 16.
9. Changes
If this policy changes in a way that matters, the app will say so before the change applies. The date at the top is the version in force.