Privacy

What we collect

• Your email address, to sign you in with a one-time code or Google. People you send cards to never need an account.
• What you put in a card: photos, names, messages, voice messages, links and the choices you make in the card maker.
• What happens to a card: when it’s opened, reactions and replies, and notes friends add to a group card. You see these in My cards.
• Payment records: what you bought and when. Stripe handles your card details; they never reach our servers.

How we use it

To make your card (including bringing your photo to life with AI and drafting words when you ask), to deliver it by link, to show you how it was received, to take payment, and to keep the service safe, for example by checking uploads for content that isn’t allowed.

Who helps us

A few trusted services process data for us, only to provide Envelopop:

• Supabase, for sign-in.
• Stripe, for payments.
• Runware and the AI models it runs, to turn your photo into the scene and video.
• Anthropic, to plan the scene and draft card words when you ask.
• Fly.io, which hosts the app and stores your cards.
• Our email provider, to send sign-in codes.

Who can see a card

Anyone with a card’s link can open it, so share it with the people it’s for. Cards aren’t listed anywhere public, and we ask search engines not to index them.

Cookies

We use cookies only to keep you signed in. No advertising or tracking cookies.

Keeping and deleting

We keep your cards until you delete them. Delete a single card from its page, or everything at once from your account: that removes your account and every card you’ve made, and their links stop working right away. We keep payment records as the law requires.

Children

Envelopop is for people 13 and older. Cards can be for anyone.

Questions

Email hello@envelopop.com and a person will get back to you. If we change this policy in a meaningful way, we’ll update the date above.