Parent Privacy Notice

Last updated: August 18, 2026

You are reading this because you were asked to approve a desk for a child under 13. This page tells you exactly what Postmello collects from that child, what we do with it, and how you can see it or delete it at any time. It is short on purpose.

Who we are. Postmello is operated by Postmello LLC, Palo Alto, California, USA. You can reach a person at support@postmello.com.

This notice sits alongside our full Privacy Policy. Where the two overlap, this page is the plain-language version for parents; the Privacy Policy is the complete one.

What we are asking you to approve

We would like to collect a small amount of information from your child so they can write and receive letters. We will not collect it, use it, or share it until you approve and we have verified that you are an adult. Until then the desk exists but does nothing: it cannot send, cannot receive, and nothing your child draws on it leaves the iPad.

What we collect from a child

• A first name for the desk — typed by you, not by the child. It is a label on a mailbox. It does not have to be their real name.
• The letters they write — images of handwriting and drawings. We store them as pictures. There is no text recognition, so we do not know and cannot search what a letter says.
• Who they wrote to and when — the delivery record needed to actually deliver a letter, limited to the contacts you approved.
• The names they give their contacts — the nicknames on the stickers, like "Grandma."

What we never collect from a child

• No birthday and no age. We ask you one yes-or-no question — is this desk for a child under 13 — and we store only that answer.
• No email address, phone number, or postal address.
• No location, no advertising identifier, no contact list.
• No photographs or camera access, and no microphone access.

What we do with it

We deliver letters to the contacts you approved, and we keep them so your child can reread their own mail. That is the whole purpose. We do not build a profile, we do not use any of it for advertising, and we do not sell or rent it. Postmello contains no third-party advertising and no analytics or tracking SDKs.

Who else sees it

Only the service providers who make the app work, and only for that purpose:

• Supabase — hosting, database and file storage (United States, AWS US West).
• Apple and Google — only if you chose Sign in with Apple or Google for your own account.
• Sentry — crash and error reports, so we can fix problems. Not used for profiling.
• Resend — email sent to you, the adult. We never email a child.
• Kids Web Services (Epic Games) — checks that you are an adult. They receive your email address and nothing about your child.

About the grown-up check

To approve a child's desk you confirm you are an adult through Kids Web Services, a verification service run by Epic Games and used by many children's apps. They will email you and ask you to confirm using a card, an ID document, or a similar method depending on your country.

None of that reaches Postmello. We never see or store an ID document, a card number, a Social Security number, or a selfie. We receive one fact back: that an adult was verified. If a card is used, some countries require a small temporary charge — around five cents — which is refunded or never actually taken.

You do this once. If you set up a desk for another child later, you approve that desk but you do not verify yourself again.

Your choices, and how to use them

You do not need to write to us to do any of these. They are all in the app, in the admin area behind your Admin PIN:

• Review what we hold. Every letter a desk has sent or received is visible to you in the app.
• Remove a contact. Mail to and from that person stops immediately — our servers refuse it, so it is not merely hidden.
• Delete the desk, or delete the whole account (Settings → Delete Account). Deleting stops any further collection and removes your child's desk, profile and mailbox.
• Refuse or withdraw consent. If you decide not to approve, simply do not finish the check — the desk never opens and nothing is collected. To withdraw consent later, delete the desk or the account.

If you would rather we did it, or you want a copy of what we hold, write to support@postmello.com and a person will answer.

One thing worth knowing before you delete: a letter that has already been delivered stays with the person who received it, the same way a posted letter does. If you need a child's letters removed from other people's mailboxes as well, tell us at the address above — we can do that, and we will where the law requires it.

If you do not respond

If you start the check and never finish it, nothing happens: the desk stays closed and collects nothing. We delete the pending verification request and the contact details we collected in order to ask you.

How long we keep things

Letters stay while the account does, because rereading old mail is the point of the product. When you delete an account we scrub the desk, profile and mailbox and purge the stored files, with a 30-day window in case the deletion was a mistake. Full detail is in the Privacy Policy.

Changes

If we change what we collect from children or what we do with it, we will ask you again rather than quietly widening what you already agreed to.

Questions, or anything that looks wrong: support@postmello.com.