Legal

Privacy Policy

Effective October 14, 2026

This Privacy Policy explains how Michael Carolan, an individual doing business as To You, Love Me (“we,” “us,” or “our”), collects, uses, and shares information when you use the To You, Love Me mobile app and our website at toyoulove.me (together, the “Service”).

If you do not agree with this policy, please do not use the Service. Questions? Contact us at [email protected]. See also our Terms of Service.

Summary

We collect the information you give us to create your account, build your profile, and mail postcards — such as your name, email, mailing address, photos, and the messages you write.
We share that information only with the service providers that run the app (for example, our database provider, payment processor, and the print shop that mails your cards). We do not sell your personal information, and we do not run advertising.
Postcards you choose to share are visible only to you and to your contacts — the people you've connected with both ways. There is no public feed, and your mailing address is never shown to other users.
You can delete your account in the app at any time. We keep the records of postcards you already paid for (for example, the order that was mailed), but we remove your profile and content.

1. Information we collect

Information you provide

Account information. Your name, email address, and password. If you sign in with Google, we receive your name, email address, and profile photo from Google instead.
Profile information. Your display name, mailing address (street, city, state, ZIP code), a short bio, an optional profile photo, an optional birthday, and a public user ID.
Postcard content. Photos you upload, the messages you write to recipients, captions, and whether you've chosen to share a postcard with your contacts.
Contacts and connections. The people you follow or connect with, notes you save about them, and a list of offline contacts you create for people who do not use the app.
Newsletter information. Your email address if you sign up for our newsletter on the website. Every email we send includes a link to unsubscribe.

Information about other people

To mail a postcard, you give us the recipient’s name and mailing address. If the recipient uses the app, we use the address saved on their profile. If they do not, you enter their details yourself. You must have the right to share this information, and you should only provide it so that we can send the postcard you requested.

Payment information

Payments are handled by Stripe. Your full card number and security code are entered directly into Stripe’s secure fields and go to Stripe, not to us. We receive and store only a payment method reference and limited details such as the card brand, last four digits, and expiry date, plus your subscription status. See the payment section below.

Information collected automatically

Like most apps, we collect limited technical information needed to run the Service and keep it reliable:

Error and diagnostic data. If the app crashes or a request fails, we send an error report (including the error, the app version, and the device type) to Sentry. These reports do not include your password or access token.
Server logs. Our servers record basic request details (such as the request path, response status, and timing) to monitor the Service. These logs do not include the contents of your messages.

We do not use advertising identifiers, and we do not collect your location, contacts from your phone, or browsing history.

2. How we use your information

Create and manage your account and sign you in.
Print and mail the postcards you send.
Process payments and manage your plan or subscription.
Show your profile and the postcards you share to your contacts.
Provide support and respond to your questions.
Send the newsletter you signed up for.
Keep the Service secure, prevent abuse, and fix problems.
Comply with legal obligations, such as tax and financial records.

3. How we share information

We do not sell your personal information. We share it only with the service providers that help us run the Service, and only as needed:

Supabase — hosting for our database, file storage, and the app’s backend.
Stripe — payment processing and subscriptions.
Google — optional Google sign-in, and the web fonts used on our website.
Sentry — error monitoring.
Our print and mailing vendor — the postcard details needed to print and mail your cards (the photo, message, and the sender and recipient names and addresses).

Our team can access order and account information to fulfill orders, provide support, and keep the Service running. We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users or the public.

What other users can see

Your mailing address is never shown to other users. This includes the people you connect with. We use it only to route postcards through the mail on your behalf — you never need to give a contact your address, and you will never see theirs.

A postcard you choose to share is visible only to you and to your contacts. There is no public feed and no discovery: someone who is not your contact cannot see your postcards, your caption, or your profile. Your profile name, photo, and a short bio are shown to people you are connected with.

Uploaded images are stored with public web addresses, which means anyone who obtains the exact link could view the image. The link is not shown to other users, but please do not upload anything you would not want a recipient of a misdirected link to see.

Payment details

Your card is charged through Stripe. We never see or store your full card number or security code. You can remove a saved card, and if you delete your account we detach your saved cards so they cannot be charged again.

4. Cookies and tracking

The Service does not use advertising or cross-site tracking cookies. Our website loads fonts from Google, and the app stores your login session on your device so you stay signed in. We do not track you across other apps or websites, and we do not use your data for targeted advertising.

5. How long we keep information

We keep your account and profile information while your account is open. When you delete your account, we delete your profile, authentication record, connections, contacts, and uploaded images.

We keep records of postcards you have already paid for and sent (including the sender and recipient names and addresses) so orders can be fulfilled and for our financial and tax records. These records are kept even after your account is deleted, and the link to your account is removed. We also retain payment records as required by law.

6. Security

We use reasonable technical and organizational measures to protect your information, including encrypting data in transit. No method of storing or sending information is completely secure, so we cannot guarantee absolute security.

7. Children

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. You must confirm that you are at least 13 to create an account. If we learn that a child under 13 has provided us with personal information, we will delete it. If you believe a child under 13 is using the Service, please contact us at [email protected].

8. Your choices and rights

Access and update. You can view and edit most of your information in your profile.
Delete your account. You can delete your account in the app under your profile settings. This is a permanent deletion, subject to the records we must keep described above.
Unsubscribe. You can stop the newsletter at any time using the unsubscribe link in any email.
Email us. You can contact us at [email protected] to ask about your information.

Depending on where you live, you may have additional rights under state privacy laws, such as the right to know what we collect or to request a copy or deletion. We do not sell personal information or use it for targeted advertising. To make a request, contact us at [email protected].

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date above and, for significant changes, take reasonable steps to let you know. Continuing to use the Service after an update means you accept the revised policy.

10. Contact

Questions about this policy or your information? Email [email protected].