PostDo · Privacy
Privacy Policy for PostDo
This policy explains which data the PostDo app for iOS processes, when text from a letter leaves the device, and which external services are involved.
Controller
Refki Meholli · DevRef Softwareentwicklung, Cusanushof 54, 41812 Erkelenz, Germany.
Data on your device
Letters (photos, scans and PDF pages), the text recognised on the device, details such as sender and date, to-dos, notes, replies and settings are stored only on the device. The pages of your letters are stored encrypted; the key is kept in the keychain of your Apple account. Text recognition runs on the device. Photos and scans never leave the device, not even for the AI.
Deadline reminders are local iOS notifications. The app adds events to your calendar only when you ask it to. The app lock uses Face ID or the device passcode provided by iOS; PostDo receives no biometric data. The app creates a backup only when you start one and saves it wherever you choose.
What the AI may read
- Whole letter: the text recognised on the device is sent via our server to Google Gemini. It is used to create a summary, title, sender, date and tasks. Only at this level can you use the letter help and reply drafts; your question or instruction is sent as well
- Title and date only: a black area covers page 1 and you can move it. The device reads only the uncovered part (usually the letterhead), and only this text is sent to the AI. The stored letter stays unchanged
- Nothing: no text is sent to the AI. You enter all details yourself
You decide in the app what the AI may read and can change it at any time. Before the first transfer the app explicitly asks for permission; without this consent no text leaves the device.
What reaches our server
- The text from the chosen reading level and, for the letter help, your question or instruction
- A randomly generated device ID without personal reference, used to match the credit. It is kept in the iCloud Keychain of your Apple account so your credit carries over to a new device
- The Apple-signed purchase receipt, used to add purchased credit
- Time, model used and computing effort (tokens and the credits derived from them), for billing and abuse prevention
- IP address and technical connection data, for operation and security
Our server does not store the letter text. It keeps only a checksum, so the same request is not charged twice, and the AI’s finished answer for 24 hours, so it is not lost if the connection drops. After that the answer is deleted automatically. This server is located in Germany and operated for us by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, as a processor.
Purposes and legal bases
- Transferring letter text to Google Gemini for analysis, based on your consent, Art. 6(1)(a) GDPR, revocable at any time with effect for the future
- Providing the analysis, letter help and reply drafts: Art. 6(1)(b) GDPR
- Handling the purchase and keeping the credit: Art. 6(1)(b) GDPR
- Abuse prevention, limits and technical security: Art. 6(1)(f) GDPR
Retention and deletion
The server deletes AI answers after 24 hours. Device ID, credit balance, purchase receipts and usage figures are kept as long as credit remains and statutory retention periods for purchase records apply. On request we delete them earlier unless an obligation prevents it. Local data can be deleted at any time in the app or by removing the app.
No ads, no tracking
PostDo contains no advertising, no analytics SDK and no cross-device tracking. There is no user account.
Your rights
Within the legal framework you have the right to information, rectification, erasure, restriction, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.
External services
The AI analysis runs through Google Gemini. Google processes the transmitted text and technical connection data as a processor. The analysis may take place in data centres outside the EU, in particular in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR). Details are available in the Google privacy policy.
Purchases are handled by Apple. Apple processes payment and account data under its own responsibility according to the Apple privacy policy. Apple privacy policy.
Contact
Please send privacy requests and deletion requests by email. As PostDo works without an account, we will work out together with you which data is yours.
Last updated: 3 November 2026