What you should know
We collect and process your email address, account and profile identifiers, profile content, private letters, location, encrypted push-notification token, purchase history, entitlement status and in-app progress only as needed to authenticate you, provide and personalize correspondence and discovery, deliver notifications, protect the community, provide support and validate purchases. With foreground permission, the app sends precise device coordinates and district to Pigeon Post so location services can operate. These values are stored privately, are never shown to other users, are not used for live or background tracking, and public maps use privacy-shifted approximate anchors. Limited data is shared with contracted infrastructure, email and notification providers, Apple or Google, and RevenueCat only to provide these services. We do not sell personal data or use it for targeted advertising. You can correct profile data, control discovery and notifications, block or report people, request access or deletion, and delete your account in Settings. Data is kept while your account is active and then deleted or anonymized, except for limited safety, fraud-prevention, financial or legal records that must be retained. Contact support@loriensoft.com for privacy requests.
Who is responsible for your data
Pigeon Post is provided by Loriensoft. For privacy questions, access or correction requests, and account-deletion help, contact support@loriensoft.com. General enquiries may be sent to info@loriensoft.com.
Pigeon Post is for adults aged 18 and over. We do not knowingly allow people under 18 to create an account.
Data we process
- Account data: name, username, email address, authentication identifiers, date of birth or adult-eligibility result, gender and account settings.
- Profile and discovery data: biography, languages, interests, preferences, generated avatar, approximate city or region, visibility choices and blocked accounts.
- Correspondence data: private letter subject and body, sender and recipient, delivery state, drafts you choose to save, and moderation reports tied to a letter or profile.
- Product data: bird, journey, stamp, reward, discovery and feature-interaction records needed to run the experience.
- Device and notification data: protected push registration, platform, app version and limited diagnostics needed for delivery and security.
- Commerce and support data: store product, transaction and entitlement status, plus information you include in a support, safety or appeal request.
Why we use it
Depending on the context, processing is necessary to provide the service you request, based on your consent, our legitimate interests in operating a safe service, or a legal obligation.
- Create and secure your account, keep you signed in and provide customer support.
- Deliver letters, calculate server-authoritative journey timing and show your collection and progress.
- Personalize discovery using the languages, interests and preferences you choose to share.
- Send service notifications you permit, such as arrival, delivery and safety updates.
- Prevent abuse, investigate reports, enforce our rules and meet legal or financial obligations.
- Validate purchases and restore entitlements without receiving your payment-card or bank details.
Location and map privacy
If you grant foreground location permission, precise device coordinates and district are sent to Pigeon Post so location services can derive and maintain your approximate city, region and country. These values are stored privately, are never shown to other users and are not used for live or background tracking.
Other people see only an approximate place. Flight routes and map anchors are illustrative and privacy-shifted; they are not live GPS tracking and do not reveal an exact position.
Service providers and sharing
We disclose only the data needed to contracted providers that help with hosting, email, authentication, push notifications, security, support and purchase validation. Apple and Google process store payments and platform services under their own terms; RevenueCat may process product and entitlement identifiers for purchase validation.
We may disclose limited information when required by law, to address an immediate safety risk, or to investigate fraud and abuse. We do not sell personal data, share it for targeted advertising or use it for cross-app tracking.
Retention and deletion
- Account and product data is kept while your account is active and removed or anonymized after the documented deletion process.
- An account-deletion request starts a 30-day cooling-off period. Sessions are revoked and public visibility is disabled during that period.
- Notification history is removed within 30 days after irreversible deletion; privacy-minimized operational markers and commerce diagnostics are normally kept for 90 days.
- Closed safety cases and appeals may be kept for up to five years, and a minimal commerce ledger for up to seven years, where needed for safety, reconciliation, refunds, fraud prevention or law.
- A recipient's already-delivered copy of a letter may remain with a deleted-account label. Your profile and direct account identifiers are removed or anonymized.
Your choices and rights
Email support@loriensoft.com to exercise a privacy right. We may ask for proportionate account verification before acting on a request.
- Edit your profile and control discovery, map visibility, recent activity, notifications and letter availability in the app.
- Block or report another account and ask us to review a safety or moderation decision.
- Request access, correction, deletion, restriction or a portable copy where applicable in your region.
- Withdraw optional consent at any time. This does not affect processing that was lawful before withdrawal.
Security, transfers and updates
We use access controls, encryption in transit, protected credentials and limited staff access designed to safeguard account and correspondence data. No internet service can promise absolute security.
Our providers may process information in countries other than yours. Where required, we use lawful transfer safeguards. We will update this policy when the service or legal requirements materially change and will provide appropriate notice.