Privacy and retention

What we keep

The emails sent or forwarded to the mission's address, photos and videos you add, what PdayPost understands from them (people, places, events, with links to the exact words in the letter), the creations you make, and your account details: email address, languages and roles. We never read the location data in photos, and copies we show have none.

How we use it

Only to build and show your mission memory, recaps, books and creations to the people you invite. No advertising, no selling or sharing of data, and no training of AI on your content. Analytics count events and never contain mission content.

AI and consent

AI reads a mission only after the missionary authorizes it, or a returned missionary agrees when they sign up. Until then mail is stored and never parsed by AI. Only models whose terms forbid training on your data are used. Withdrawing consent stops all processing at once.

Who sees it

Members of the mission, by role, and the people you share an item with privately, who must sign in. Nothing is ever public. People taught, health matters and minors are hidden from Viewers. PdayPost staff can read a mission only through support access the family opens, for at most 72 hours, and every look is shown to the family.

Your choices

Export everything at any time. Members delete what they uploaded or created. The Archive Owner deletes the whole mission. Anyone mentioned in letters can ask to be removed: they disappear from every page, book and creation, and are never used in a creation again. You can delete your account.

Children

Accounts are for adults (18 and older). Mail from unknown senders is held for review, never processed automatically. If we learn that mail came from a child under 13, it is not processed and is deleted.

Questions

Write to privacy@pdaypost.com. Requests from people mentioned in letters are handled by the mission's Archive Owner or Mission Custodian, or by us.

How long we keep it

• Mail waiting for the missionary's authorization: deleted after 30 days.
• A deleted mission: can be restored for 14 days, then purged from the database and storage.
• Backups: deleted data leaves them within 35 days.
• A private share sent to someone who never signs in: closed after 90 days.
• Export files: deleted 7 days after they are ready.
• A mission whose plan ended stays read-only and is kept. If that ever changes, the Archive Owner and Custodians will be told well before anything is deleted.
• After consent is withdrawn: what PdayPost understood is deleted, unless the missionary keeps it; original emails and photos stay until the mission is deleted.