Privacy Policy
fizz·gram is operated by Jason Peterson. This policy describes what information fizz·gram collects, why, and who it is shared with. If anything here is unclear, email support@fizzgram.com.
What fizz·gram collects
Apple sign-in identifier
When you sign in with Apple, fizz·gram receives an opaque user identifier that Apple generates specifically for this app. fizz·gram does not request your name, email address, or any other profile information from Apple.
How it is used: to create your account, track your credit balance, and associate your sent postcards with your account.
Photos you select
fizz·gram accesses only the specific photos you choose through the system photo picker. It does not access your full photo library.
How they are used: your selected photo is rendered into a print-ready PDF on your device, then uploaded to our server so it can be forwarded to our printing partner for mailing. The photo is also analyzed on your device (scene classification, horizon detection) to improve cropping and to generate optional metadata for your postcard message. This analysis happens entirely on your iPhone; no analysis data is sent to any server.
Who can see your photo: after your postcard is submitted to Lob, the photo and the message you wrote are visible to fizz·gram's operator (Jason Peterson) in the Lob account dashboard, and to Lob employees who have access to that dashboard for printing, fulfillment, customer support, and abuse review. fizz·gram does not routinely view individual postcards and never uses them for marketing, training, or analytics, but you should be aware that the technical ability to view them exists.
Once it is in the mail: a postcard is unenclosed mail by design. USPS sorting equipment, mail handlers, your recipient's letter carrier, and anyone who reaches the recipient's mailbox before they do can read the message and see the photo on the back. That is true of any postcard, not just fizz·gram's. If something is sensitive, send a sealed letter instead.
Recipient mailing addresses
You enter (or import from your Contacts) the name and mailing address of each person you want to send a postcard to.
How they are used: addresses are stored locally on your device so you can reuse them. When you send a postcard, the recipient's name and address are transmitted to our server and then to our printing and mailing partner (Lob) so the postcard can be printed and delivered. Addresses may also be sent to Lob for verification before sending.
Payment information
Payments are processed by Stripe through Stripe Payment Links. fizz·gram never receives, processes, or stores your credit card number or other payment credentials. After you complete a purchase, fizz·gram receives only a Stripe checkout session identifier, which it uses to confirm the purchase and credit your account.
Photo location and date
If your selected photo contains GPS coordinates and a date in its metadata, fizz·gram uses them on your device to look up a place name (via Apple's geocoding service) and historical weather conditions (via the Open-Meteo API). These are used to generate optional context lines on your postcard ("Liberty Park, Salt Lake City" or "72°F, sunny"). The GPS coordinates and date are sent to Open-Meteo to retrieve weather data, but are not stored by fizz·gram's servers.
What fizz·gram does not collect
- fizz·gram does not collect your email address, phone number, or real name.
- fizz·gram does not access your Contacts unless you explicitly tap "Choose from Contacts" to import a recipient's address. When you do, only the selected contact's name and postal address are read.
- fizz·gram does not track your location. Photo GPS data, if present, is read from the photo's metadata on your device.
- fizz·gram does not collect browsing history, device identifiers, or advertising data.
- fizz·gram does not use analytics, crash reporting, or advertising SDKs.
- fizz·gram does not track you across other apps or websites.
Because fizz·gram does not engage in tracking as Apple defines it, the app does not present an App Tracking Transparency prompt.
Third-party services
fizz·gram relies on the following third-party services to operate:
- Apple (Sign in with Apple): authenticates your identity. Apple's privacy policy.
- Stripe (payments): processes credit card payments. fizz·gram never handles your card details. Stripe's privacy policy.
- Lob (printing and mailing): prints your postcard and delivers it via USPS. Lob receives the postcard PDF and the recipient's mailing address. Lob's privacy policy.
- Cloudflare (backend hosting): our server runs on Cloudflare Workers. Your account data and order history are stored in Cloudflare KV. Cloudflare's privacy policy.
- Open-Meteo (weather data): provides historical weather information based on a photo's GPS coordinates and date. This call is made from your device, not from our server. Open-Meteo's terms.
Data retention
- Order records (recipient name, city, state, delivery status, and the Lob postcard identifier) are kept on our server as long as your account exists, plus a reasonable period afterward for accounting purposes.
- Postcard PDFs uploaded to Lob are retained by Lob according to their own retention policy. fizz·gram's server does not store a copy of the PDF after it has been forwarded to Lob.
- On-device data (recipient addresses, send history, preview images) is stored locally on your iPhone and can be deleted by uninstalling the app.
- Account deletion: you can delete your account at any time from inside the app: Settings → Delete Account. Deletion is immediate and permanent: your user record and all associated order records are purged from our server. You may also email support@fizzgram.com to request deletion, in which case we will act within 30 days.
Your rights
You can delete your account and all associated data at any time from inside the app: Settings → Delete Account. The deletion is immediate and permanent.
You can also email support@fizzgram.com to request a copy of the data we hold about you, to request account deletion if you no longer have access to the app, or with any other privacy question. We will respond within 30 days.
Children
fizz·gram is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
If we make material changes to this policy, we will update it here and revise the effective date at the top. We encourage you to review this page periodically.
Contact
Questions about this privacy policy? Email support@fizzgram.com.