Parent Privacy Notice

Last updated: September 21, 2026

You are reading this because you were asked to approve a desk for a child under 16. This page tells you exactly what Postmello collects from that child, what we do with it, and how you can see it or delete it at any time. It is short on purpose.

Who we are. Postmello is operated by Postmello LLC, Palo Alto, California, USA. You can reach a person at [email protected].

This notice sits alongside our full Privacy Policy. Where the two overlap, this page is the plain-language version for parents; the Privacy Policy is the complete one.

What we are asking you to approve

We would like to collect a small amount of information from your child so they can write and receive letters. Before your consent is completed, a desk for a child under 16 cannot send or receive letters or transmit anything your child creates. The desk exists but does nothing, and nothing your child draws on it leaves the device. Until you approve and we have verified that you are an adult, the only information we hold about the desk is what you entered yourself when you set it up: the name you gave it, your answer that it is for a child under 16, and the contact details we collected in order to ask you.

What we collect from a child

• A first name for the desk - typed by you, not by the child. It is a label on a mailbox. It does not have to be their real name.
• The letters they write - images of handwriting and drawings. We store them as pictures. There is no text recognition, so we do not know and cannot search what a letter says.
• Who they wrote to and when - the delivery record needed to actually deliver a letter, limited to the contacts you approved.
• The names they give their contacts - the nicknames on the stickers, like "Grandma."
• Technical records of app problems - when the app crashes or runs slowly, we record what it was doing at the time. These notes identify a desk by an internal code, never by name, and contain nothing your child wrote or drew.

What we never collect from a child

• No birthday and no exact age. We ask you one yes-or-no question - is this desk for a child under 16 - and we store only that answer.
• No email address, phone number, or postal address.
• No location, no advertising identifier, no contact list.
• No photographs or camera access, and no microphone access.

What we do with it

We deliver letters to the contacts you approved, and we keep them so your child can reread their own mail. That is the whole purpose. We do not build a profile, we do not use any of it for advertising, and we do not sell or rent it. Postmello contains no advertising and no tracking SDKs.

Who else sees it

Only the service providers who make the app work, and only for that purpose:

• Supabase - hosting, database and file storage (United States, AWS US West).
• Apple and Google - only if you chose Sign in with Apple or Google for your own account.
• Sentry - crash reports, performance timings, and short notes about what the app was doing when a problem occurred, so we can fix it and decide what to improve. It never receives your child’s letters, drawings, or the names on their stickers. Not used for profiling.
• Resend - sends our email. Two kinds: notices to you, the adult; and, when your child writes to a friend you approved who is reached by email, an email telling that adult a letter is waiting. That email carries a picture of the envelope and a private link - the letter itself is read on a web page, not sent by email. We never send email to a child - a child has no email address in Postmello.
• Postmark - receives mail from that friend, so it can arrive on your child's desk as a letter. Mail we cannot confirm came from the approved address is held for you to review first.
• Kids Web Services (Epic Games) - checks that you are an adult. They receive your email address and nothing about your child.

About the grown-up check

To approve a child's desk you confirm you are an adult through Kids Web Services, a verification service run by Epic Games and used by many children's apps. They will email you and ask you to confirm using a card, an ID document, or a similar method depending on your country.

None of that reaches Postmello. We never see or store an ID document, a card number, a Social Security number, or a selfie. We receive one fact back: that an adult was verified. If a card is used, some countries require a small temporary charge - around five cents - which is refunded or never actually taken.

You do this once. If you set up a desk for another child later, you approve that desk but you do not verify yourself again.

If the check goes wrong - the email never arrives, or verification fails and you cannot tell why - Kids Web Services runs its own support team for exactly that, at support.kidswebservices.com. They answer within one working day, in fourteen languages. They can see what happened on their side; we cannot. For anything about Postmello itself, write to us at [email protected].

Your choices, and how to use them

You do not need to write to us to do any of these. They are all in the app, in the Admin Portal behind your Admin PIN:

• Review what we hold. Every letter a desk has sent or received is visible to you in the app.
• Remove a contact. Mail to and from that person stops immediately - our servers refuse it, so it is not merely hidden.
• Delete the desk, or delete the whole account (Settings → Delete Account). Deleting stops any further collection and removes your child's desk, profile and mailbox.
• Refuse or withdraw consent. If you decide not to approve, simply do not finish the check - the desk never opens and nothing is collected. To withdraw consent later, delete the desk or the account.

If you would rather we did it, or you want a copy of what we hold, write to [email protected] and a person will answer.

One thing worth knowing before you delete: a letter that has already been delivered stays with the person who received it, the same way a posted letter does. If you need a child's letters removed from other people's mailboxes as well, tell us at the address above - we can do that, and we will where the law requires it.

If you do not respond

If you start the check and never finish it, nothing happens: the desk stays closed, and nothing your child makes on it ever leaves the device. We delete the pending verification request and the contact details we collected in order to ask you.

How long we keep things

Letters stay while the account does, because rereading old mail is the point of the product. When you delete an account we scrub the desk, profile and mailbox and purge the stored files, with a 30-day window in case the deletion was a mistake. Full detail is in the Privacy Policy.

Changes

If we change what we collect from children or what we do with it, we will ask you again rather than quietly widening what you already agreed to.

Questions, or anything that looks wrong: [email protected].