Privacy Policy — Soundpost

The short version. Soundpost keeps your recordings, moods, places, and notes on your device, and — if you're signed into iCloud — backs them up to your own private iCloud database that only you can reach. There is no account to create, we do not track you, and we never receive, sell, or share your content — your audio, notes, moods, and places never leave your device for us. The only data that reaches a server of ours is what's needed to deliver a far-future reminder you've sealed — a content-free signal, never your content (see Cloud-backed reminders below) — plus anonymous crash reports.

Who we are

Soundpost ("the app", "we") is an audio-first memory app for iPhone. This policy explains what the app does and does not do with information when you use it.

Where your capsules live

Everything you create in Soundpost is stored on your iPhone and is never uploaded to us:

Audio recordings you capture.
Moods, one-line notes, dates, and waveform data for each capsule.
Place tags (an optional, approximate location and place name) when you choose to add one.
Your "seal" dates for capsules you choose to hide until the future.

We run no server that receives or stores this content. If you are signed into iCloud, the app uses Apple's iCloud (CloudKit) to keep your capsules in your private iCloud database — storage tied to your own Apple Account — so they are backed up and synced across your devices and survive reinstalling the app. This is your own iCloud space: it is not collected by us, and we cannot see or access it. If you are signed out of iCloud (or turn iCloud off for Soundpost), the app works fully offline and your capsules stay only on that device — so deleting the app removes them.

Device permissions

Microphone — used only while you are recording a capsule. Recordings are saved on your device; they are never sent to us. Recording can capture the voices of people nearby, so please be considerate of those around you.
Location (optional) — only if you tap to tag a capsule with where you are. Soundpost takes a single location reading and uses Apple's on-device/Apple-operated geocoding to turn it into a place name. The location is stored on your device with that capsule. You can skip this entirely.
Notifications — used to remind you when a sealed capsule is ready to resurface. Near-term reminders are scheduled locally on your device. For reminders set far in the future, the app can also enqueue them on our server so they can still arrive years later — see Cloud-backed reminders below.

Diagnostics we do collect

To keep the app stable, Soundpost uses Sentry to report crashes and app freezes. These reports contain technical information (such as the device model, iOS version, and a stack trace). They are configured to be not linked to your identity, are not used for tracking or advertising, and we strip request data so your capsule content (audio, notes, places) is not included. We use them solely to find and fix bugs. See Sentry's privacy policy.

Cloud-backed reminders (optional)

A sealed capsule can be set to resurface far in the future — even years away. To help that reminder arrive on its date when it's too far off for your device to hold reliably, Soundpost can enqueue it on its own server (hosted on Supabase) and deliver it through Apple's Push Notification service. This happens only when you are signed into iCloud; if you are signed out or offline, reminders use your device's local schedule and nothing is sent. It is best-effort — "cloud-backed," not guaranteed.

For this — and only this — three things leave your device:

your device's Apple Push Notification token (so Apple can deliver the alert to this device);
an anonymous per-user key — a random value the app generates and keeps in your private iCloud, used only to group your own devices' reminders. It is not your name, email, or Apple Account, and is never combined with data from other apps or data brokers;
content-free schedule details: the capsule's random identifier, the reminder's date and time zone, and the kind of reminder.

Your capsule's audio, notes, moods, and places never leave your device for this and are never part of the push — the notification is only a signal, and the capsule is read back from your own device. This data is used solely to deliver your reminders, is not used to track you, and is not linked to your identity. You can remove it at any time (see Your control & deletion).

What we do NOT do

No advertising and no ad networks.
No analytics that profile you, and no cross-app or cross-site tracking (no IDFA / ATT prompt).
No selling or sharing of your personal data.
No accounts, no email lists, no social feed.

Third parties

The only third parties involved are Apple (the operating system, local notifications, geocoding for optional place names, and iCloud/CloudKit for keeping your capsules in your own private iCloud database) and Sentry (anonymous crash/diagnostic reports as described above). For the optional Cloud-backed reminders above, the reminder schedule is stored on our server host Supabase, which receives only the content-free schedule, your device's push token, and the anonymous key — never your content. Your iCloud data is governed by Apple's privacy policy. No other third party receives data from the app.

Your control & deletion

Delete any capsule from within the app at any time; this removes its audio and details from your device and, if iCloud backup is on, from your iCloud and your other devices too.
Deleting the app removes Soundpost's data from that device. If iCloud backup is on, your capsules remain in your iCloud and return when you reinstall on a device signed into the same Apple Account; to erase them everywhere, delete them in the app first, or remove Soundpost's data under iOS Settings → your name → iCloud → Manage Account Storage.
You can turn off Microphone, Location, Notifications, or iCloud for Soundpost at any time in iOS Settings.
For Cloud-backed reminders: a reminder's record on our server is removed automatically when you delete the capsule, unseal it, when it resurfaces, or when you sign out of iCloud. You can also clear everything Soundpost keeps on its server at once with Delete my cloud data in the app — it deletes the push tokens and reminder schedule and stops further collection. Push tokens that Apple reports as no longer valid are pruned automatically.

Children

Soundpost is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

If this policy changes, we will update this page and the "Effective" date above. Material changes will be reflected here before they take effect.

Contact

Questions about your privacy or this policy? Email yyyyy.yeyuhe@gmail.com.