Postmark Join the beta

Privacy policy

Last updated 5 November 2026

Postmark: Countries Visited is made by Loopware LLC. This policy covers the app and trypostmark.com. Questions: privacy@trypostmark.com.

In short

  • No account, no ads and no tracking, and no analytics or advertising code from anyone else.
  • Your photos are read on your iPhone and never uploaded.
  • To name places and draw maps, the app asks Apple and a public elevation service about places, not about you.
  • It sends a few anonymous counts, which you can switch off.

What is read on your iPhone

With your permission, Postmark reads each photo’s date, place, altitude, speed and type to find your trips and the countries you were in, and looks at photos with Apple’s on-device Vision to make films (it never identifies anyone). It works out where you live on your iPhone and never shows or sends it; only the country counts. If you ask it to, it reads the flights in your calendar, files you import (such as Google Maps Timeline) and codes or stamps you scan with the camera. Location, if you allow it, is checked on your iPhone for stamp stations and for arrival stamps (off unless you turn them on), and only the country and the day are kept.

What leaves your iPhone

  • Place names, from Apple. The centre of each stop of a trip, and up to 60 points near borders and coasts each time the app runs, rounded to about 200 m and never within 1 km of your home. The answers are kept on your iPhone.
  • Maps and satellite pictures, from Apple Maps. The area of a map you open, and the satellite picture of a country’s stamp page (also fetched for your newest countries).
  • Elevation tiles, from Amazon Web Services (the public Terrain Tiles dataset). Map tiles about 10 km across for films and some stamps, with no identifier, kept on your iPhone.
  • A backup, in your own iCloud. Your countries, stamps and dates, imported records (with one position for each stay), answers to border checks (keyed by places rounded to about 200 m), your profile and friends’ cards. Not your films. We cannot read it.
  • Purchases, with Apple. The App Store handles payment; we receive no name, email or payment details.
  • Anonymous counts, to our counts service on Cloudflare. That the app was opened (with its version, the iOS version, a broad iPhone class, the language and the app’s age in bands), your first film, export and share, Pro offers shown, failed exports and render times, and once a month a randomised answer about your passport’s size, so that no single answer is certain. No identifier or cookie goes with them; the service keeps only daily totals and does not read or store IP addresses. They are on when you install the app; switch them off in You → Privacy → Anonymous counts.
  • A friend card, only when you send it. The name you set, a random passport number, the day it was made, your countries with the year you first went and, unless you turn Months off, the months you were there (never for the country you live in), your count, the list you count by and your cover. The app that carries the link can see it.
  • Films and pictures you share, wherever you send them.

The passport page

trypostmark.com/c and /p show a card from the part of the link after the #, which browsers never send to a server. The page keeps nothing, sets no cookies and loads nothing but itself and its map.

This website

No cookies, analytics or third-party code. Cloudflare hosts it and processes requests (including your IP address) to deliver the pages. We have not turned on any analytics or log storage.

Your choices

  • Change permissions at any time in iOS Settings → Postmark. To be sure no location is used, set Location to Never.
  • You → About → Delete all data removes your passport, the films kept in the app, your settings, waiting counts and the iCloud copy. Films saved to Photos stay there; deleting the app removes the rest.
  • We hold no account or personal data about you on our servers, so there is nothing for us to look up or delete. If you write to us, we use your email only to answer.

Children, changes and contact

Postmark is not directed at children under 13. Changes to this policy are published here with their date. Loopware LLC, privacy@trypostmark.com.