Your memories deserve careful handling.

1. What Petra is

Petra is a keepsake messaging service for creating, sending, receiving, and saving postcards, letters, voicecards, journals, time capsules, and Groupsakes.

2. What we collect

We collect information you provide or create while using Petra, including:

• Account details such as your name, email address, optional phone number, profile photo, login method, and verification status.
• Keepsake content you choose to create, such as messages, journal entries, letters, photos, handwriting, signatures, audio, and other attachments.
• Recipient details you choose to enter when sending a keepsake, such as a name, phone number, or email address.
• Usage, device, and diagnostic information needed to operate, secure, and improve Petra, including analytics events and crash reports. These are shaped so that they do not include your email address, the text of a keepsake, or the address of a share link.

3. How we use information

We use information to:

• Create and protect your account.
• Save, display, and deliver the keepsakes you create or receive.
• Help you find intended recipients when they have a verified Petra account.
• Maintain security, prevent abuse, troubleshoot issues, and improve the service.
• Respond to support, privacy, and legal requests.

4. Contacts

If you choose to import contacts, Petra saves the selected contacts on your own device so sending is easier later. Petra may process selected phone numbers or email addresses to check whether those people already have verified Petra accounts. We do not turn your address book into a public directory.

When a keepsake passes between you and another Petra account, Petra records that exchange in your own account so you can write to that person again without needing their phone number or email. This list is private to you: only you can read it, and only you can add to it. Someone appears in it because a keepsake actually passed between you — you cannot search for people, and nobody can add themselves to your list or see that they are on it. Deleting your account removes both your list and your entry in other people's lists.

5. Share links and recipients

When you create a share link, anyone who has that link may be able to open the linked keepsake until the link expires or you stop it. Stopping a link stops the keepsake, its photos and its audio from opening through that link, including for someone who saved a file address earlier. If you send a keepsake directly to another Petra user, or a recipient saves a shared keepsake to their own album, that recipient keeps their own copy, which stopping the link does not remove.

You may add a passcode to a share link. A passcode-protected keepsake, including its photos and audio, is encrypted on your device with a key derived from the passcode before it is stored. Petra does not receive or store the passcode and cannot open, recover, or reset a protected keepsake. If the passcode is lost, the protected keepsake cannot be recovered by anyone.

6. Service providers and international processing

Petra uses service providers to run the service:

• Firebase and Google Cloud for authentication, hosting, databases, file storage, analytics, and the server-side programs that deliver reminders and notifications. Keepsake records are stored in India; photos, audio and other files, and those server-side programs, are located in the United States.
• Sentry for crash and error reporting, located in the United States. Reports are shaped so that they do not include your email address, keepsake text, or share link addresses.
• Email and push delivery services for the notifications you choose to receive. A notification names who sent or opened a keepsake; it never contains the keepsake's text.

Because these services operate internationally, your information may be stored or processed outside India, including in the United States.

7. How long we keep information

We keep account information and saved keepsakes while your account is active, unless you delete content or ask us to remove it, subject to security, legal, and technical needs.

When you delete your Petra account, we permanently delete your profile, profile photo, drafts, contacts, and the keepsakes saved in your Petra account. We also delete payment records, scheduled deliveries you are receiving, share links you created, and any Groupsakes you curated.

At the moment you delete your account, you choose what happens to keepsakes you have already sent to other people:

• Leave them with their recipients — the keepsake content stays in the recipient's album. Your name remains attached to the keepsake (because you sent it to them), but your contact email and the link back to your account are removed so the deleted account cannot be re-identified.
• Remove them too — every keepsake you have sent is permanently deleted from every recipient's album, along with the rest of your account.

We keep a short, non-identifying audit row recording that an account was deleted, the date, and the user's choice. This row contains a hashed account identifier; it does not contain your name, email, phone, or any keepsake content.

8. Your choices and rights

You may ask to access, correct, or erase your personal data, or raise a grievance about how Petra handles it. You can also choose not to add a profile photo, not to import contacts, and not to create share links.

9. Children

Petra is not intended for children under 18 unless a parent or legal guardian has given the consent required by applicable law.

10. Security

Keepsakes in your account are protected by access rules enforced by the database itself: only your account can read or change them, and another account may only create a delivery addressed to you. Those rules are tested automatically on every change. Data is encrypted in transit and at rest by our service providers. Requests to Petra's database and file storage must come from the Petra app itself.

Except where you add a passcode (section 5), your keepsakes are not encrypted with a key that only you hold, which means the operator of Petra could technically access them. We do not read keepsakes, and we do not use their content for any purpose other than storing and displaying them to the people they belong to.

No online service can promise absolute security, so please use strong account credentials and take care when sharing links.

11. Contact

For privacy questions, data requests, or grievances, contact us at privacy@petrakeepsakes.com.

12. Changes to this policy

We may update this policy as Petra grows. If we make material changes, we will update the effective date and take reasonable steps to let users know.