Privacy notice

Controller & scope

Privacy contact: [email protected]. Include “Poshie” in the subject. This notice covers this website and the Poshie Android app for adults 18+. Cloud AI creation and purchases are unavailable in the current app version. An account or consent does not automatically unlock them.

This website

The website presents product information, fictional illustrations and these legal pages. It has no account sign-in, photo upload, checkout, advertising or analytics SDKs, and sets no cookies or browser storage itself. Fonts and images are served with the website.

The intended website host is Vercel. When a page is requested, hosting infrastructure processes necessary request information such as IP address, requested path, time and browser/device information to deliver and secure the website. This is separate from optional app analytics. The website code includes no visitor analytics or visitor logging. Vercel may retain necessary request and security logs under the hosting configuration.

Contact and deletion forms only prepare a draft in your email application. The operator and relevant email services receive your message only if you send it there. There is no form-submission backend or automatic delivery. External links lead to independent services with their own privacy information.

Information in the Android app

A signed-in Poshie account is required for photo features, including local templates. Help and legal information remain available before sign-in. The Android app offers Google sign-in; general email-code delivery is not currently configured. Native Apple sign-in belongs only to the iOS integration and is not an Android sign-in method. A public iPhone release is currently unavailable.

Local editing and templates run on your device and do not automatically upload your photos. Selected copies, local drafts, edits and My photos records are kept in app storage. Saving to My photos, exporting to your photo library and sharing are separate actions. A future available cloud operation requires a separate selection and confirmation of its inputs and purpose. Signed-in, selected save workflows can sync recipe/intention metadata without photo files to Convex. Independent device or exported photo backups are separate from Poshie account deletion.

Google sign-in does not give Poshie access to your Google Photos library, contacts or Gmail messages. The app does not send photos or email addresses as identity fields to OneSignal or Sentry; it uses an opaque account identifier. Providers still see network request information, including an IP address. An SDK privacy filter is not a promise of fully anonymous processing.

Purposes, legal bases & choices

Necessary account and requested app functions are used to provide the service you request under Article 6(1)(b) GDPR. Security, abuse prevention and secure website delivery serve the legitimate interest in a safe service under Article 6(1)(f). Legally required retention may rely on Article 6(1)(c). Correspondence is handled for your requested service or the legitimate interest in responding, depending on its content.

Optional push notifications and crash diagnostics start disabled for each account and rely on your separate consent under Article 6(1)(a). You can switch them off in app settings to disable new optional collection and identity use. In-flight requests, provider retention and technical logout/consent-reset requests remain separate. Withdrawal does not undo earlier lawful processing, and this choice does not control ML Kit diagnostics or necessary account security. Android notification permission is an additional device choice. PostHog analytics is disabled for this app version. Declining an optional service does not prevent necessary account functions.

You choose the photos you select and information you send. Information required for a particular account or cloud feature is needed for that feature. Poshie does not make decisions about you with legal or similarly significant effects through solely automated processing.

Retention & deletion

• Local photos and drafts remain in app storage according to the selected retention choices until you remove them or an expiry cleanup applies. Independently exported photo-library or shared copies are separate.
• Existing cloud-file rules provide 24 hours for processing inputs and 30 days for recoverable outputs. These concern Poshie file storage, not every provider log or backup. Cloud AI remains closed.
• Integrity challenges expire after five minutes. Rotating security counters expire after 48 hours and aggregate verification reason/count records after seven days. A recurring bounded cleanup removes expired records. Google sign-in tokens and emails are not stored in these audit records.
• Account deletion freezes the account and starts paginated deletion of owned cloud files, account data and sign-in sessions. Limited payment/refund events and hashed anti-replay records may remain for reconciliation, fraud prevention and required evidence. The current implementation has no fixed automatic expiry for those records.
• Account deletion queues removal requests for linked RevenueCat/OneSignal accounts; provider calls run when the required configuration is available. Missing configuration, provider failures or conflicting aliases require later handling. An accepted asynchronous request is not proof of final erasure. The queue retains the opaque target account identifier until handled; acceptance/completion receipts without the raw target ID, but retaining a pseudonymous owner digest, expire after 30 days. Sentry requests require manual handling through the privacy contact. Google, ML Kit and email records remain separate provider processing. Instant erasure of every provider or backup copy is not promised.

The account-deletion page provides a request route without app access. An email becomes a request only after you send it. We may need to verify account ownership. Cancel any store subscription separately.

Service providers & international processing

Services used, or configured depending on the feature, are Google (sign-in, Play Integrity, ML Kit and applicable Firebase Cloud Messaging), Convex (backend and files), Vercel (website), OneSignal (optional notifications), Sentry (optional diagnostics), RevenueCat and the relevant store (purchase reconciliation), and Resend (configured email codes only). The configured Poshie backend uses an EU West 1 endpoint. This does not establish that all infrastructure, support or third-party processing stays in the EEA.

Providers may process information outside the EEA. Where required, transfers must rely on an applicable adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses. Contact us for information about recipients and safeguards for a particular processing activity. We do not sell your photos or account information. This website contains no advertising trackers.

Your rights

Subject to legal conditions, you may request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests and withdraw consent for the future. Contact [email protected]; do not send passwords or verification codes. We may request information needed to verify your identity.

You may complain to a data-protection supervisory authority, particularly where you live, work or believe an infringement occurred. The supervisory authority for Lower Saxony is the Landesbeauftragte für den Datenschutz Niedersachsen. App availability does not limit statutory rights or deadlines.

Adults, photos & changes

Poshie is intended for adults 18+. Do not upload images of minors, unlawful intimate content or people without the necessary rights and permission. Local photo-suitability checks do not verify identity or age. Website examples show fictional adults and are not verified customer results.

New features, providers or purposes require an updated notice before the corresponding use, and additional consent where appropriate.