Privacy Policy
Last updated: December 2025
Unposted ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.
Information We Collect
We collect information you provide directly to us:
- Account Information: When you create an account, we collect your email address and username. If you sign in with Apple, we receive your Apple ID identifier and, optionally, your email address.
- Photos: Photos you upload to share with your groups, including EXIF metadata such as the date and time the photo was taken.
- Group Information: Information about groups you create or join, including group names, descriptions, and membership details.
- Device Information: We collect device tokens for push notifications to keep you updated about group activity, such as when timelines unlock or when you're invited to a group.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Create and manage your account
- Enable photo sharing within your private groups
- Send you push notifications about group activity (which you can disable in your device settings)
- Enforce our photo submission rules (e.g., verifying photos were taken during the current period)
- Respond to your comments, questions, and support requests
- Protect against fraudulent or illegal activity
Your Photos Stay Private
Photos you upload are only visible to members of the groups you share them with. We do not use your photos for advertising, machine learning training, or any purpose other than displaying them to your group members.
Information Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties. Your photos are only visible to members of the groups you share them with.
We may share information in the following limited circumstances:
- With your consent or at your direction
- To comply with legal obligations or valid legal processes
- To protect and defend our rights and property
- With service providers who assist in operating our app (such as cloud storage providers), who are bound by contractual obligations to keep your information confidential
Data Storage and Security
Your data is stored securely using industry-standard encryption and security practices:
- All data is transmitted over encrypted HTTPS connections
- Photos are stored in secure cloud storage (Cloudflare R2) with access controls
- Passwords are hashed using secure one-way hashing algorithms
- Authentication tokens are securely generated and stored
Data Retention
We retain your information for as long as your account is active or as needed to provide you services:
- Account information is retained until you delete your account
- Photos are retained until you delete them or delete your account
- When you delete your account, we delete your personal information and photos from our active systems
- Some information may be retained in encrypted backups for a limited period for disaster recovery purposes
Your Rights
You have the right to:
- Access: View the personal information we hold about you through the app
- Correction: Update your username and account information at any time
- Deletion: Delete individual photos, leave groups, or delete your entire account and all associated data
- Portability: Your photos remain accessible to you through the app
- Opt-out: Disable push notifications at any time through your device settings
Deleting Your Account
You can delete your account at any time from Profile → Account Settings → Delete Account. This will permanently remove your account, all your photos, and remove you from all groups. If you're the only member of a group, that group will also be deleted.
Third-Party Services
Our app integrates with the following third-party services:
- Apple Sign In: For secure authentication without passwords. Apple's privacy policy applies to information collected through Sign In with Apple.
- Firebase Cloud Messaging: For delivering push notifications. Google's privacy policy applies to this service.
- Cloudflare R2: For secure photo storage. Cloudflare's privacy policy applies to data stored in their infrastructure.
Children's Privacy
Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information from our systems.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your information remains protected.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date at the top
- Sending you a notification through the app for significant changes
Contact Us
If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your data, please contact us: