Privacy Policy

1. Introduction

Trip Wizard LLC ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use the Postmarks mobile application and website (together, the "Service"). By using the Service, you acknowledge the practices described here.

2. Information We Collect

2.1 Health and Fitness Data

With your permission, Postmarks reads step count from Apple HealthKit on iOS or Health Connect on Android. We use it to calculate daily totals and route progress. Postmarks does not request heart rate, sleep, weight, calories, or other health metrics. Raw health records are processed on-device; the Service syncs resulting gameplay data such as daily totals, applied steps, progress, and streak state rather than maintaining a separate medical record.

2.2 Account Information

When you create an account, we collect your email address through Firebase Authentication, an optional display name, account timestamps, and a unique account identifier. We use this information to authenticate you, sync progress, provide support, and personalize the Service.

2.3 Journey and Collection Data

We store the information needed to preserve your Postmarks experience, including:

• Daily step totals, goals, streak history, and steps converted into route progress
• Current and completed routes, pacing choices, Day or After Dark mode, cities, secret stops, and route history
• Stamps, souvenirs, Trail Find events, achievements, certificates, and collection state
• Journal entries, including notes you write and system-generated journey events
• Edition and add-on entitlements, equipped cosmetics, and Kintsugi token activity
• Settings, onboarding state, walker registration number, and feature preferences

2.4 Location Data

When you allow location access, Postmarks can show your position on the map and attribute a Trail Find to where it occurred. Live device location is used for the active map experience. A souvenir’s first-find coordinates and route context may be stored with your journey so Postmarks can show where you discovered it. You can revoke location permission in device settings, although related map and Trail Find details may be reduced.

2.5 City Guestbook

If you leave a city guestbook entry, other Postmarks users can see your display name and selected arrival message. Unless you hide arrival statistics, the entry may also show your route pace and leg duration, steps, or streak days at arrival. Guestbook messages use presets rather than unrestricted free-form text.

2.6 Friends and Traveler Cards

Walking with Friends uses private invitations. We store friend invitations and relationship status, blocked-user records, your Traveler Card settings, and the collectibles you choose to feature. Accepted friends may see your display name, Traveler Card, aggregate collection counts, featured stamps, achievements or souvenirs, current route and Day or After Dark mode, journey activity, and a coarse projected position along the route. This is not a precise live location.

You can separately control whether accepted friends see your weekly step total and when you last logged. Removing a friend ends the relationship; blocking also prevents future invitations from that account.

2.7 Feedback and Support

If you contact us or send in-app feedback, we store the message, account identifier, response history, and technical context needed to answer or diagnose the issue.

2.8 Usage, Device, and Website Data

We may collect device type, operating-system and app versions, screens and features used, lifecycle events, purchase events, crash reports, stack traces, and diagnostic logs. Our website uses Google Analytics and Ahrefs Analytics, which may process browser, device, referral, and page-interaction information according to their own policies.

2.9 Purchase Information

When you buy an edition, cosmetic, Kintsugi token, or other in-app product, RevenueCat and the relevant app store provide transaction identifiers, product and entitlement status, price and currency metadata, and restore information. We do not receive or store your full payment-card details.

3. How We Use Information

We use information to:

• Provide, secure, maintain, and improve Postmarks
• Calculate progress and unlock routes, stamps, souvenirs, and achievements
• Sync your journey across devices and restore earned history
• Operate guestbooks, invited friendships, Traveler Cards, and privacy controls
• Deliver reminders, milestone notifications, support, and service communications
• Measure product performance and diagnose crashes or syncing problems
• Verify purchases and manage non-consumable and consumable entitlements
• Prevent abuse, fraud, artificial progress inflation, and unauthorized access

4. Third-Party Services

Postmarks relies on service providers that process information for their stated function:

• Firebase (Google) — authentication, Cloud Firestore, Cloud Storage, server functions, and release-build crash reporting
• RevenueCat — in-app purchase and entitlement management
• Apple App Store and Google Play Store — payment processing
• Apple HealthKit and Health Connect — on-device step data with your permission
• PostHog — product analytics and lifecycle events
• Mapbox — interactive maps and associated map telemetry
• Google Analytics and Ahrefs Analytics — website measurement

These providers handle information under their own privacy policies and contractual obligations.

5. Storage, Retention, and Security

Your account, journey, collection, social, guestbook, and support data may be stored in Firebase and synced with a local copy on your device for offline use. We retain information while your account is active and as reasonably necessary to provide the Service, meet legal obligations, resolve disputes, prevent abuse, and enforce agreements. Expired invitations and operational records may be removed or de-identified on a different schedule.

We use reasonable administrative and technical safeguards, including encryption in transit and at rest where supported. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

6. How Information Is Shared

We do not sell personal information. We share information only as follows:

• Service providers: with the providers listed above when needed to operate the Service
• Public features: city guestbook entries and associated visible arrival details
• Accepted friends: Traveler Card and journey information described in Section 2.6
• Legal and safety: when required by law or reasonably necessary to protect users, the public, our rights, or the Service
• Business transfers: as part of a merger, financing, acquisition, or sale, subject to appropriate notice and safeguards
• With your direction: when you intentionally export or share a stamp, certificate, invite, or other content

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information. You can change permissions in device settings, manage social visibility controls inside Postmarks, remove or block friends, and delete your account from the app’s Settings screen. Account deletion removes active account data from our systems, subject to limited legal, security, and backup retention.

For requests that are not available in the app, contact hello@getpostmarks.com. We may need to verify your identity.

8. Device Permissions

Depending on your device and the features you use, Postmarks may request:

• Health or Health Connect: read step count
• Location while in use: map position and Trail Find attribution
• Motion and Fitness: motion-related functionality such as map orientation
• Notifications: reminders and journey milestones
• Photo Library, add only: save images you export
• Android alarm or boot permissions: reminders and widget updates

You can revoke permissions in device settings. Some features may stop working as a result.

9. Children’s Privacy

Postmarks is not intended for children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.

10. Changes to This Policy

We may update this policy as Postmarks changes. We will post the revised policy here, update the date above, and provide additional notice when a change is significant or legally required.

11. Contact Us

Questions or privacy requests can be sent to:
hello@getpostmarks.com
Trip Wizard LLC