Privacy

Privacy Policy

Effective September 10, 2026

PhotoParcel is operated by Jeremy Nichols, a sole proprietor doing business as PhotoParcel in Missouri, United States. This policy explains what I collect, why, who receives it, how long I keep it, and how you delete it. Privacy requests: privacy@photoparcel.co. Support: support@photoparcel.co.

What PhotoParcel is

PhotoParcel is an iPhone app that helps you choose photos, approve a print set, pay, and mail physical borderless 4×6 prints inside the United States. I am a one-person business. There is no public photo feed, social graph, or comment system. Other customers cannot see your photos, notes, or addresses in the app.

This policy covers the iPhone app, www.photoparcel.co, and the servers I use to take payment, store approved print files, and fulfill orders. The public website does not use advertising or analytics cookies, advertising pixels, or analytics scripts. Cloudflare may set a strictly necessary security cookie to distinguish legitimate traffic from automated abuse; it is not used by PhotoParcel for advertising or cross-site tracking.

Information I collect

On your iPhone, before you approve

Until you approve a set, photo dates, thumbnails, crops, and unapproved photo selections stay on your device. They are stored in protected app storage that is excluded from iCloud backup. Broad photo-library analysis, if you allow it, stays on your device. You can refuse library access and still pick photos with Apple’s system photo picker. I do not run face recognition or identity analysis.

When you create and approve an order

Delivery and payment details are sent when checkout begins. Photo contents are sent only after you approve the exact print set:

• Print files: the print-ready photos in that approved set. Camera location and other EXIF metadata are stripped before upload. These private files also let you review the photos in parcel history after signing in on another device.
• Delivery details: recipient name, optional relationship, optional personal note, and U.S. postal address.
• Account: a PhotoParcel user ID. Monthly and yearly plans require Sign in with Apple so the plan can be restored on a new phone, managed, and deleted. Additional one-time envelopes stay associated with that account. I store the Apple user identifier and an encrypted Apple refresh token solely so I can revoke PhotoParcel’s Apple authorization when you delete your account. Apple may give me a private-relay email address. I do not get your Apple password.
• Orders: plan type (monthly or yearly), print count, extra-print charges, extra envelopes, shipment credits, status, carrier tracking when I have it, and support history.
• Payment: Stripe and Apple Pay collect and process card and Apple Pay credentials. I do not receive or store raw card numbers, CVV codes, or Apple Pay token secrets. I receive payment status, amount, currency, and provider references needed to run and refund the order.
• Invitations: if you invite someone to pay for their own envelope, the link identifies the invitation only. It does not contain photos. Referral links work the same way. I store a one-way hash of the token, not a copy of your camera roll.
• Reminders: the optional monthly reminder is scheduled on your iPhone. I do not send that reminder’s contents through my servers.
• Optional analytics: off unless you turn them on in Settings. If enabled, I send typed product-interaction events to PostHog. Events never include photos, photo identifiers, names, addresses, notes, emails, order IDs, tracking numbers, or payment details. Session replay, automatic screen capture, advertising profiles, surveys, and cross-app tracking are disabled.
• Support mail: whatever you choose to send to support@photoparcel.co or privacy@photoparcel.co.
• Technical logs: servers may record timestamps, success or failure of a request, and coarse network data needed to keep the service up and to investigate abuse. Logs are not used for advertising.

I do not collect precise GPS location, contacts, microphone audio, or the camera besides the photos you pick. I do not use the advertising identifier. I do not show an App Tracking Transparency prompt because I do not track you across other companies’ apps or websites for advertising.

How I use information

I use information only to:

• help you review and approve a set on your iPhone;
• charge for physical prints and mailing;
• print, pack, and mail the order you approved;
• show your approved parcel photos in private order history;
• restore and manage a monthly or yearly plan;
• prevent fraud, abuse, and failed or duplicate charges;
• answer support requests;
• keep tax, accounting, refund, and dispute records the law requires;
• improve PhotoParcel in ways that do not require using your photos as training data or advertising creative.

I do not sell personal information. I do not rent it. I do not use your photos, notes, or addresses for advertising. I do not use your photos to train machine-learning models, mine, or anyone else’s.

Who I share it with

I share only what a provider needs to do its job, under contracts that require them to protect it and to use it for that job:

• Supabase: account records, orders, and private storage for approved print files. Hosted in the United States.
• Stripe: payment processing, invoices, refunds, and the customer billing portal.
• Apple: Sign in with Apple and Apple Pay. Apple’s privacy policy covers Apple ID and Apple Pay.
• U.S. photo labs I use to print an approved order: the print files, recipient name, and mailing address needed to produce that order. I do not send your full camera roll.
• The U.S. Postal Service and other carriers: name and address for mailing, plus tracking when the carrier provides it.
• PostHog: optional analytics, only if you enable it in Settings.
• Cloudflare: website delivery, network security, and automated-abuse protection, including a strictly necessary security cookie.
• Email hosting: messages you send to support or privacy addresses.

I may also disclose information if required by law or a valid legal process, to protect a person from serious harm, or if I transfer the business. A buyer would have to keep protecting the information at least as carefully as this policy. I do not sell, rent, or share information for cross-app or cross-site advertising.

Retention and deletion

• Unapproved photos: never uploaded. They remain on your iPhone until you remove them from the set or delete the app or its local data.
• Approved print files: kept to fulfill and support that order, then deleted when you delete your account, or sooner if I no longer need them for fulfillment, reprints, or a dispute.
• Addresses and recipient details: kept while your account is open so you can send again, and removed with account deletion except where an already-mailed order record must remain.
• Order, payment, and tax records: kept as long as U.S. tax, accounting, refund, and dispute rules require, often several years, even after account deletion. Those leftover records are limited to what the law requires. They are not used for marketing.
• Apple revocation token: deleted after I revoke PhotoParcel’s Apple authorization as part of account deletion.
• Invitation and referral tokens: expire on their own. Hashes are removed or become unusable after expiry or account deletion.
• Support email: kept as long as needed to finish the request and keep a support history.
• Technical logs: kept for a short period for security and debugging, then deleted or overwritten.
• Optional analytics: stop when you turn analytics off. I delete or de-identify stored analytics events when I reasonably can.

In the app, Delete Account deletes private uploaded photos, cancels active recurring billing, revokes Sign in with Apple when I have the token to do so, removes the PhotoParcel account, and clears local app data. It does not delete photos in Apple Photos. Photo labs and carriers may keep copies under their own policies for the time they need to print, ship, or handle claims.

If you no longer have the app, email privacy@photoparcel.co from the Apple private-relay or other address tied to your Sign in with Apple account and ask me to delete the account.

Your choices and rights

• Decline photo-library access and still pick photos with Apple’s picker.
• Leave analytics off, or turn them off later in Settings.
• Cancel future renewals in Settings or from Manage your plan.
• Delete your account in Settings.
• Ask me for access, correction, export, or deletion of service data at privacy@photoparcel.co.

I may need to verify that a request is yours. I will not require you to create a new paid order just to make a privacy request. Complaints can also go to your state attorney general. If you are in the EEA or UK, I serve U.S. customers; contact me first and I will tell you if a European supervisory authority applies to your request.

California privacy rights

If you are a California resident, the CCPA/CPRA applies. In the last 12 months I have collected these categories, only as described above:

• Identifiers (account ID, Apple user ID, private-relay email if Apple provides one).
• Customer records (recipient name and postal address).
• Commercial information (orders, plan type, amounts, shipment status).
• Visual information (approved print photos you chose to upload).
• Internet or electronic activity (optional analytics events, and payment-related product interaction processed by Stripe).

I do not collect Social Security numbers, precise geolocation, biometric identifiers, or contents of text messages. Photos and home addresses can be sensitive. I use them only to print and mail the order you approved.

I do not sell personal information. I do not share personal information for cross-context behavioral advertising. Because I do not sell or share in those senses, there is no “Do Not Sell or Share” toggle. If that ever changes, I will update this policy and give you a way to opt out before it starts.

You may request to know, delete, or correct personal information, and to receive a copy of it. You will not be discriminated against for exercising those rights, including by being charged a different print price for asking. I will respond within 45 days, or tell you if I need more time (up to 45 additional days) as the law allows. An authorized agent may email privacy@photoparcel.co with proof of authority. If you disagree with my response, reply to that email and I will review it.

I do not disclose personal information to third parties for their own direct marketing, so California “Shine the Light” disclosures do not apply beyond this statement.

Children, security, and transfers

PhotoParcel is for adults in the United States. You must be 18, or the age of majority where you live, to buy a plan. It is not directed to children. I do not knowingly collect personal information from children under 13. If I learn that I have, I will delete it.

I protect information with encryption in transit, access limited to me and the providers listed above, private photo storage, short-lived download links, encrypted storage for Apple revocation tokens, and device storage that is excluded from backup. No method is perfect. If I learn of a breach that affects you, I will notify you and regulators as required by law.

Some providers process information on servers outside Missouri, including elsewhere in the United States and, for Stripe and Apple, in other countries as their services require. They remain bound to protect it. I do not store print files in a public bucket.

Material changes to this policy will be posted here with a new effective date. If a change materially expands how I use photos or addresses, I will also notice it in the app when I can. Continued use after the new date means you accept the updated policy, except where the law requires your extra consent.

Jeremy Nichols, d/b/a PhotoParcel, Missouri, United States. privacy@photoparcel.co.

← Back to PhotoParcel