Privacy Policy

This Privacy Policy explains how Michael Carolan, an individual doing business as To You, Love Me (“we,” “us,” or “our”), collects, uses, and shares information when you use the To You, Love Me mobile app and our website at toyoulove.me (together, the “Service”).

If you do not agree with this policy, please do not use the Service. Questions? Contact us at privacy@toyoulove.me. See also our Terms of Service.

Summary

• We collect the information you give us to create your account, build your profile, and mail postcards — such as your name, email, mailing address, photos, and the messages you write.
• We share that information only with the service providers that run the app (for example, our database provider, payment processor, and the print shop that mails your cards). We do not sell your personal information, and we do not run advertising.
• Postcards you mark as public, and the profile name and photo on them, can be seen by other users.
• You can delete your account in the app at any time. We keep the records of postcards you already paid for (for example, the order that was mailed), but we remove your profile and content.

1. Information we collect

Information you provide

• Account information. Your name, email address, and password. If you sign in with Google, we receive your name, email address, and profile photo from Google instead.
• Profile information. Your display name, mailing address (street, city, state, ZIP code), a short bio, an optional profile photo, an optional birthday, and a public user ID.
• Postcard content. Photos you upload, the messages you write to recipients, captions, and whether a postcard is public or private.
• Contacts and connections. The people you follow or connect with, notes you save about them, and a list of offline contacts you create for people who do not use the app.

Information about other people

To mail a postcard, you give us the recipient’s name and mailing address. If the recipient uses the app, we use the address saved on their profile. If they do not, you enter their details yourself. You must have the right to share this information, and you should only provide it so that we can send the postcard you requested.

Payment information

Payments are handled by Stripe. Your full card number and security code are entered directly into Stripe’s secure fields and go to Stripe, not to us. We receive and store only a payment method reference and limited details such as the card brand, last four digits, and expiry date, plus your subscription status. See the payment section below.

Information collected automatically

Like most apps, we collect limited technical information needed to run the Service and keep it reliable:

• Error and diagnostic data. If the app crashes or a request fails, we send an error report (including the error, the app version, and the device type) to Sentry. These reports do not include your password or access token.
• Server logs. Our servers record basic request details (such as the request path, response status, and timing) to monitor the Service. These logs do not include the contents of your messages.

We do not use advertising identifiers, and we do not collect your location, contacts from your phone, or browsing history.

2. How we use your information

• Create and manage your account and sign you in.
• Print and mail the postcards you send.
• Process payments and manage your plan or subscription.
• Show your profile and public postcards to other users.
• Provide support and respond to your questions.
• Keep the Service secure, prevent abuse, and fix problems.
• Comply with legal obligations, such as tax and financial records.

3. How we share information

We do not sell your personal information. We share it only with the service providers that help us run the Service, and only as needed:

• Supabase — hosting for our database, file storage, and the app’s backend.
• Stripe — payment processing and subscriptions.
• Google — optional Google sign-in, and the web fonts used on our website.
• Sentry — error monitoring.
• Our print and mailing vendor — the postcard details needed to print and mail your cards (the photo, message, and the sender and recipient names and addresses).

Our team can access order and account information to fulfill orders, provide support, and keep the Service running. We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users or the public.

What other users can see

Postcards you mark as public, along with your profile name, photo, and caption, appear in the app’s feed and can be seen by other users. Uploaded images are stored with public web addresses, which means anyone with the exact link could view them. Postcards you mark as private are not shown in the feed, but the image is still stored the same way. Do not upload anything you are not comfortable sharing.

Payment details

Your card is charged through Stripe. We never see or store your full card number or security code. You can remove a saved card, and if you delete your account we detach your saved cards so they cannot be charged again.

4. Cookies and tracking

The Service does not use advertising or cross-site tracking cookies. Our website loads fonts from Google, and the app stores your login session on your device so you stay signed in. We do not track you across other apps or websites, and we do not use your data for targeted advertising.

5. How long we keep information

We keep your account and profile information while your account is open. When you delete your account, we delete your profile, authentication record, connections, contacts, and uploaded images.

We keep records of postcards you have already paid for and sent (including the sender and recipient names and addresses) so orders can be fulfilled and for our financial and tax records. These records are kept even after your account is deleted, and the link to your account is removed. We also retain payment records as required by law.

6. Security

We use reasonable technical and organizational measures to protect your information, including encrypting data in transit. No method of storing or sending information is completely secure, so we cannot guarantee absolute security.

7. Children

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. You must confirm that you are at least 13 to create an account. If we learn that a child under 13 has provided us with personal information, we will delete it. If you believe a child under 13 is using the Service, please contact us at privacy@toyoulove.me.

8. Your choices and rights

• Access and update. You can view and edit most of your information in your profile.
• Delete your account. You can delete your account in the app under your profile settings. This is a permanent deletion, subject to the records we must keep described above.
• Email us. You can contact us at privacy@toyoulove.me to ask about your information.

Depending on where you live, you may have additional rights under state privacy laws, such as the right to know what we collect or to request a copy or deletion. We do not sell personal information or use it for targeted advertising. To make a request, contact us at privacy@toyoulove.me.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date above and, for significant changes, take reasonable steps to let you know. Continuing to use the Service after an update means you accept the revised policy.

10. Contact

Questions about this policy or your information? Email privacy@toyoulove.me.