Privacy Policy

From Here lets you send real, printed postcards from your photos, and keep a private journal if you want one. This policy describes what we collect, why, and what we do with it — in plain language, because that's how we'd want it explained to us.

What we collect

Account information. When you create an account we collect your email address and name via our authentication provider, Clerk. If you sign in with Apple or Google, we receive the name and email those services share with us.

Your journal. Entries, photos, videos, captions, tags, and any locations you attach are stored on our servers so your journal syncs across your devices. A location is attached only when you choose one, or when a photo you import already carries the place it was taken; you can remove it. The location data inside the photo file itself is stripped before the photo is uploaded. The app does not track your location in the background.

Postcard information. When you send a postcard we collect the recipient's name and mailing address, your message, and the photo you chose, because they are required to print and mail the card.

Payment information. Postcard payments are processed by Stripe and From Here Plus subscriptions are processed by Apple. We never see or store your card number. We keep a record of your postcard purchases (what was charged and for which postcard).

Postcard emails. When a postcard you paid for goes to print, we email you a confirmation at your account's email address, with a picture of the card, who it's going to, and when it should arrive. The email is sent through Resend, which receives your email address and the email's contents and nothing else.

Subscription status. If you subscribe to From Here Plus, we store which plan you are on, when it expires, and the identifier Apple gives the subscription. That identifier is how we recognise renewals and cancellations Apple tells us about. We receive no payment details from Apple.

Unsplash photos. If you search for a photo from Unsplash, your search words are sent to Unsplash through our server, and the photos you browse are loaded directly from Unsplash, as Unsplash requires. When you use one, we tell Unsplash it was downloaded. Unsplash receives no account details from us.

Weather. If you attach a location to an entry, the app asks Open-Meteo for the weather at that point, which means those coordinates are sent to Open-Meteo. Nothing else about you or the entry goes with them.

Addresses you look up. When you type a recipient's address, what you type is sent to Google Places to suggest and verify addresses, and to our printing and mailing partner to check the finished address is deliverable. When you search for a place to attach to an entry, the search runs through Apple Maps on your iPhone.

What stays on your iPhone

App Lock. If you turn on App Lock, Face ID or Touch ID is checked by iOS on your iPhone. We never receive your face or fingerprint data, or anything about the check other than whether it succeeded, and that answer never leaves the device.

Postcard drafts. A postcard you save for later is stored only on your iPhone, including any photos it uses, until you send it or delete it. Signing out removes your drafts from the device.

Who we share it with

We share data only with the services that make the product work: Clerk (sign-in), Supabase (database hosting), Fly.io (application hosting), Cloudflare (photo and video storage), Stripe (postcard payments), Resend (postcard confirmation emails), Apple (subscription payments and subscription status), Google Places (address suggestions), Unsplash (photo search, when you use it), Open-Meteo (weather for a location you attach), and our printing and mailing partner (they receive the card design, your message, and the recipient's address, and they and their print and mail partners handle the physical card). We do not sell your data, show ads, or share your journal with anyone else.

This website

fromherejournal.app uses Google Analytics to count visits and see how people find us: pages viewed, the site that sent you, and your approximate region, device and browser. Analytics cookies are only set if you choose Accept in the cookie banner; until then, Google receives cookieless pings that can't identify you or link your visits together. You can change your choice any time with the Cookies link at the bottom of the homepage. The website never sees your journal, and nothing from the app is sent to Google Analytics.

What we don't do

No advertising, no data brokers, no third-party analytics reading your journal. Your entries are yours.

How long we keep it

Your journal, photos, and postcard history are kept for as long as you have an account, so they can sync and be restored on a new device. Anything you delete in the app is removed from our servers. You can ask for a copy of your data, or ask us to correct or delete it, by emailing us at the address below.

Deleting your data

You can delete your account any time in the app (Account → Delete account). This permanently removes your journal entries, photos, postcard history, and account from our systems. Records held by our payment processor (Stripe) and printing and mailing partner are retained by them as required for financial and postal record-keeping. Postcards already in the mail cannot be recalled. A From Here Plus subscription is held by Apple, not by us — deleting your account does not cancel it, so cancel it in your Apple Account settings as well.

Data security

Data is encrypted in transit (TLS) and stored with providers that encrypt at rest. Access to production systems is limited to the people who operate From Here.

Children

From Here is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes materially, we'll update the date above and note the change here before it takes effect.

Contact

Questions? Email support@fromherejournal.app.