Privacy Policy
Last updated October 11, 2026
This policy explains what PostSesh collects, why, and what control you have over it.
1. What we collect
- Account: when you sign in with Apple we receive a stable identifier and, if you choose to share it, your name. We never receive your Apple password.
- Profile: the display name and username you choose, and an optional profile photo if you add one. Profile photos are stored in Firebase Cloud Storage the same way as post photos, and are visible to other signed-in users.
- Content: the photos you take in the app, any captions you add, whether you marked a post as a rest day, the reactions you leave, and comments and replies you write.
- Social graph: the friends you connect with, the friend requests you send and receive, whether you have turned on automatic accepting of friend requests, and the users you block.
- Activity: the calendar days you posted (used for streaks), your time zone identifier, and the reports you submit.
- Device: if you allow notifications, a push notification token for your device, saved to your account. See Section 8.
We do not collect your location or browse your photo library. If you add a profile photo you pick a single image. The app contains no advertising or analytics SDKs.
2. How we use it
Only to operate the service: showing your posts and comments to your friends, delivering friend requests, computing your streak, enforcing blocks, sending you a local daily reminder (generated on your device), acting on reports, and, if you choose, composing friend invites from your contacts on this device.
3. Where it is stored
Your data is stored in Google Firebase (Firestore and Cloud Storage), which processes it on our behalf. Post photos and profile photos are stored in Firebase Cloud Storage. Servers may be located outside your country, including in the United States. Data in transit is encrypted.
4. Who can see it
- Your friends see your display name, username, profile photo, today's post, comments on posts they can see, and whether you have posted today.
- Anyone who is signed in and knows your username or display name can find you in search in order to send you a friend request, including seeing your profile photo.
- When you send a friend request, the person you send it to can see your display name, username and profile photo.
- We can see your data when handling reports or providing support.
- We share data with law enforcement only when legally required.
We do not sell your data.
5. Sharing your posts outside PostSesh
You can choose to share one of your own posts outside the app using the iOS share sheet, for example in Messages. The shared image includes your photo, your caption and the PostSesh name. Once you share it, it is sent through the app or service you picked, and anyone who receives it can see it. We cannot control or delete copies shared outside PostSesh.
You can only share your own posts. Your friends' posts cannot be shared from the app.
6. Contacts
PostSesh may ask for access to your iPhone Contacts. This is used only to help you invite friends by text message.
Names and phone numbers are read on this device only. They are never uploaded to our servers, never stored in our database, and never matched against other users' data.
Access is optional. Declining Contacts does not restrict any other part of the app. You can revoke this permission at any time in iOS Settings.
7. Retention and deletion
Content stays until you delete your account. Deleting your account from Settings removes your profile, posts, photos and friendships. Reports may be kept in anonymized form for safety purposes. Backups are purged on their normal cycle.
8. Notifications
Daily reminders are scheduled locally on your device.
If you allow notifications, the app also saves a push notification token for your device to your account. This token is a random identifier that would let us send notifications to your device. We do not currently send push notifications. If we add them in the future, such as an alert when a friend posts, this policy will be updated first. You can turn notifications off at any time in iOS Settings.
9. Children
PostSesh is not directed to children under 13 and we do not knowingly collect data from them.
10. Your rights
Depending on where you live you may have rights to access, correct, export or delete your data. Account deletion is available in the app; for anything else contact postseshapp@gmail.com.
11. Changes
We will present material changes to this policy in the app.