Corporate Privacy Architecture

We operate a strict, registration-free checkout workspace to maximize global data compliance. This document outlines how recipient parameters flow through our processing infrastructure.

What We Collect

When an enterprise partner initiates a bulk campaign or a manual domestic checkout, we capture the final recipient names and physical delivery addresses exclusively to facilitate shipping and logistics.

Information Collected Automatically

• Photographs: Selected by you from your camera roll. Transmitted to our image host Cloudinary for temporary storage, then to our print partner Prodigi for fulfillment. All photo assets are permanently deleted from Cloudinary within 30 days of the date of payment.
• Push notification token: Generated by your device when you grant notification permission. Stored to enable delivery confirmation notifications.
• Masked sender identifier: A privacy-preserving identifier derived from your cardholder first name, last initial, and the last 4 characters of your payment transaction ID (e.g., "Alex C. (#3A4F)"). Stored in our order database for support and dispute resolution purposes.
• Content moderation data: Photographs you select are submitted as low-resolution thumbnails to Google Cloud Vision SafeSearch for automated content moderation before printing. Google processes these images according to their own privacy policy. Images are not retained by Google after moderation.

How We Use Your Information

We leverage incoming transactional metrics strictly to run our automated systems, executing the following functions:

• To process and fulfill your photo mail orders through our print partner Prodigi
• To process payments through Stripe
• To validate delivery addresses through Smarty API
• To screen photographs for prohibited content via Google Cloud Vision
• To send you a push notification when your order is delivered
• To maintain order records for damage claim processing and dispute resolution
• To improve and maintain the app

How We Share Your Information

We do not sell your personal information. We share your information only with the following service providers who are necessary to deliver the service:

• Prodigi: Print and mail fulfillment. Receives recipient addresses and photo files solely to print and mail your order.
• Stripe: Payment processing. Handles all payment transactions and tax calculation. Stripe's privacy policy governs their handling of payment data.
• Cloudinary: Temporary image hosting. Stores your photos between upload and Prodigi submission. Photos are deleted within 30 days of payment.
• Smarty: USPS address validation. Receives recipient addresses for standardization and verification.
• Google Cloud Vision: Content moderation. Receives low-resolution photo thumbnails for SafeSearch screening before printing.
• Expo: Push notification delivery. Receives your device push token to deliver order status notifications.

We may disclose your information if required by law or to protect the rights, property, or safety of Turtle Mail, our users, or the public.

Data Storage and Retention

• Recipient addresses: Stored locally on your device only. Never stored on our servers beyond what is required to submit a specific order.
• Photo assets: Deleted from Cloudinary within 30 days of the date of payment. One reprint is permitted per order within this window. After deletion, reprints are not possible.
• Order records: Retained in our database for legal compliance, damage claim processing, and dispute resolution. Records contain order ID, masked sender identifier, recipient name and address, and order status.
• Push tokens: Retained until delivery is confirmed or the order record is archived.

Your Address Book Security

Your address book is stored exclusively on your device and is protected by a 4-digit PIN secured with SHA-256 hashing, optional Face ID or Touch ID biometric authentication, automatic lock when the app is minimized, and rate limiting with lockout after failed attempts.

Children's Privacy

Turtle Mail is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has used our service please contact us immediately.

Your Rights

You have the right to access, correct, or request deletion of your personal information. To exercise these rights please contact us at privacy@turtlemail.app. We will respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or on our website. Your continued use of Turtle Mail after changes are posted constitutes your acceptance of the updated policy.