Legal
Privacy Policy
Last updated: July 2026
Your privacy is central to what Last Post does. We store only what is necessary to deliver notifications on your behalf, and we never sell your data.
1. Who we are
Last Post is an iOS application designed to notify your chosen contacts when you pass away. The app is operated by Last Post ("we", "us", "our"). Our contact email is support@lastpost.app.
2. What data we collect
We collect only what is needed to provide the service:
- Account information: your email address and encrypted password, used to create and authenticate your account.
- Contact details: the names, email addresses, and relationships of people you choose to add as contacts.
- Designated person details: the name and email address of the person you appoint to trigger your notification.
- Memories: photos and captions you voluntarily upload to share with your designated person.
- Arrangements: funeral wishes, document references, and digital asset notes you choose to store (Premium only).
- App usage data: basic logs used to diagnose errors and maintain service reliability. No advertising or behavioural tracking.
3. How we use your data
Your data is used exclusively to:
- Authenticate you and keep your account secure.
- Send invitation emails to contacts you add.
- Deliver notification emails to your contacts when your designated person triggers the process.
- Share memories and arrangements with your designated person after notification.
- Perform welfare/liveness checks and trigger the notification process automatically if enabled (Premium).
- Provide customer support when you contact us.
We do not use your data for advertising, profiling, or any purpose beyond delivering the service you signed up for.
4. Legal basis for processing (GDPR)
For users in the UK and European Economic Area, our legal bases are:
- Contract performance: processing your account data and contacts to deliver the service.
- Legitimate interests: security logging and error diagnostics.
- Consent: sending invitation and notification emails to your contacts on your behalf.
5. Third-party services
We use the following third-party providers. Each processes only the minimum data necessary:
- Supabase — database and authentication hosting. Data is stored on EU-region servers. Supabase Privacy Policy.
- Resend — transactional email delivery. Your contacts' email addresses are passed to Resend solely to deliver notification and invitation emails. Resend Privacy Policy.
- Apple (StoreKit) — subscription payments processed entirely by Apple. We do not receive or store your payment card details. Apple Privacy Policy.
6. Data retention
We retain your data for as long as your account is active. If you delete your account:
- Your account, contacts, memories, and arrangements are permanently deleted within 30 days.
- Email delivery logs held by Resend are subject to Resend's own retention policy.
- Backups are purged within 90 days.
7. Data security
All data is transmitted over HTTPS. Passwords are hashed and never stored in plaintext. Database access is restricted by row-level security policies so users can only access their own data. We conduct regular reviews of our security practices.
8. Your rights
Under UK GDPR and the EU GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict or object to processing.
- Portability — receive your data in a machine-readable format.
- Withdraw consent at any time (this does not affect processing already carried out).
To exercise any of these rights, email us at support@lastpost.app. We will respond within 30 days.
9. Children
Last Post is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. For material changes, we will notify you by email or via an in-app notice.
11. Contact us
If you have any questions about this policy or how we handle your data, please email support@lastpost.app.