Privacy

Postcard privacy

Last updated 19 October 2026. Covers Postcard Video, the Postcard iPhone app, including the TestFlight beta, and this website.

Postcard is made by one person, Adam Raabe. If anything here is unclear, email hi@postcardvideo.app and ask.

The chat

The chat's helper is Agnes (you can rename her), an AI that runs on Claude, made by Anthropic. When you send a message (or finish a take, if you turn on Comment after each take, on Agnes's page), the app sends text to a server I run so Agnes can answer. It sends your message, the recent conversation, the lines on your Telepad, the words in any files or photos you add (photos, scans and PDFs are read to text on the phone), what the phone heard you say in your takes (the words, never the audio), the three notes you can write for her (About me, About this project and About Agnes), her name and the project's name. Never your video or audio. That is the whole list.

The app asks before the chat sends anything. On the first screen you can choose to use it without the chat, and you can turn the chat off or on any time with the Chat with Agnes switch, first on her page (More, then Agnes, or the star at the end of the chat box). With it off, nothing is sent.

The server passes that text to Anthropic's Claude API for the answer and sends the answer back. Anthropic's commercial API terms say they do not train their models on API traffic; their policy is at anthropic.com/legal/privacy. My server keeps no copy of your messages. It does keep a count of chat messages and roughly what they cost me, so the free part can be counted. That count is kept against the ID Apple gives the app on your phone, a random ID the app keeps for itself, and, once Apple confirms it, the app's purchase ID from Apple: a number Apple gives this app for your Apple Account, the same on all your devices, so the free part is counted once per person and not once per install. I never see your name, email or Apple Account itself, only that number.

The server runs on Cloudflare, so Cloudflare sees what any web server sees: an IP address and a time. Those logs are not used to build a profile of anyone.

Your videos

Every take is recorded on your phone and saved to your Photos library (you can turn that off in More, then Videos). The app never uploads a video, audio or picture on its own; the only way one leaves is if you attach it to a bug report yourself. The transcription of what you said runs on the phone with Apple's on-device speech recognition; the audio does not leave the phone for that either.

Share sends the takes you choose as videos, and Export makes a folder on your phone with the takes, their transcripts, the chat and your Telepad. Either goes only where you send it, with AirDrop or the share sheet.

Counts

Once a day the app sends my server a few numbers about the day before: whether the app was opened, and how many takes, shares and chat messages there were. Never what was in them. They go with a random ID the app makes only for this, so I can see whether people come back, and with the app's version and whether it came from TestFlight or the App Store. That ID is not your Apple Account, not the chat's ID and not your phone's, and a reinstall makes a new one. The numbers are stored with Cloudflare and used only to see how the app is used. You can turn this off in More, under Anonymous counts; switched off, nothing is sent and what was waiting is deleted.

Bug reports

In the app, More has Tell me anything, and this website has a feedback form. If you send one, it goes to a server I run and I read it. It carries your words, anything you attach (a screenshot, a screen recording, or a take), your name and email if you give them, and from the app also the app version, the phone model and the chat ID above, so I can lift the chat limit for you if you ask. Reports are kept in a private GitHub repository and attachments in private Cloudflare storage, behind links only I can open. Claude, the AI Agnes runs on, reads each new report first, including the words of a voice memo, and drafts a reply for me. I read every one, and only I send a reply. Nobody else reads them.

Permissions

The app asks for the camera and the microphone to record, and for Photos to save your takes there and to pick a photo to add to the chat. It reads nothing else from your library.

Update check

Now and then the app asks whether a newer version is out, so it can tell you. It asks Apple's App Store (which version is live) and this website (a small file with the newest beta build). Those requests carry nothing about you; Apple and the website's host see an IP address and a time, as for any web request.

The beta

While the app is in beta it is installed through Apple's TestFlight. TestFlight collects crash logs from beta builds and lets you send me feedback and screenshots if you choose to. If you do, I see what you wrote, the screenshot, and the device and iOS version it came from. Apple's own privacy policy covers TestFlight itself.

This website

postcardvideo.app counts visits with PostHog, so I can see how many people come by and which pages they read. It records pages viewed, the site that sent you, your browser and a rough location from your IP address. It is not used for advertising and is not linked to the app. The site is hosted on Vercel, which keeps ordinary server logs.

What is not here

No accounts. No analytics inside the app beyond the daily counts above. No advertising. Nothing is ever sold. Nothing is shared beyond what this page says: the chat's text goes to Anthropic for the answer, reports and attachments sit with GitHub and Cloudflare, and the counts sit with Cloudflare. That is the whole list.

How long things are kept

The chat's text: my server keeps no copy. Anthropic does not train on it and deletes it within 30 days. The count of your chat messages, against the IDs above and with no words in it, stays as long as the app does, so the free part keeps working. Reports and anything you attach to them stay until you ask, so I can come back to a bug when I fix it; the daily counts stay too, and nothing in them points to you. To have a report, an attachment or your chat count deleted, email feedback@postcardvideo.app. I delete it by hand and write back when it is done.

Changes

If this page changes, the date at the top changes with it.