Your privacy in Pooost.

This notice describes the Android app Pooost (com.pooost.deepburg), as of 27 September 2026. It supplements the general DEEPBURG privacy policy linked at the end of this view. You can use the app without a DEEPBURG account. Google sign-in is needed only for a Drive backup you choose to make.

Patrick Irmler, DEEPBURG Digital Science, Bessemerstraße 51, 12103 Berlin, Germany. Email: mail@deepburg.com; phone: +49 30 23327288. Please use this address for questions about Pooost and privacy.

When you scan, import, or share a letter or Safe document into Pooost, the app processes its images, PDF pages, recognized text, and details you enter, such as titles, senders, tags, cases, notes, and confirmed deadlines. Search runs on your device. Text recognition, possible date suggestions, and translation you request run on your device. Pooost does not generate AI summaries or send letter content to its own server or to cloud AI. The Safe is stored separately from the inbox.

Documents and metadata are kept in private app storage, encrypted with AES-GCM and keys protected by Android Keystore. The Safe uses a separate key. Automatic Android backup is disabled. The optional app lock invokes Android biometric or device authentication; Pooost does not receive or store fingerprint or face data. Importing a PDF can briefly create unencrypted working files in the private app cache. The app clears these after processing or on its next start.

Pooost uses Google ML Kit for document scanning, text recognition, and optional translation. According to Google's SDK disclosure, technical information may be sent to Google: device and app information, installation or device identifiers, performance and error data, feature events, input and output sizes, and language information depending on the feature. Google Play services may download necessary models. This is distinct from local processing of letter content. See https://developers.google.com/ml-kit/android-data-disclosure and https://policies.google.com/privacy. Additional bundled Tesseract language models work locally and require no account.

You sign in with a Google account only if you request a Drive backup. Before upload, Pooost encrypts the selected letters or Safe documents with a password you choose and transfers the backup file to your Google Drive. The app requests the limited drive.file scope for files it creates or opens. Your backup password is not sent to Google or stored permanently in Pooost. Google processes account and connection information under its own privacy policy. Uploaded backups remain in Drive until you delete them there; deleting a local letter does not automatically delete a backup.

Google Play handles the one-time unlock and purchase restoration. Pooost receives purchase receipts, purchase tokens, signatures, and entitlement status from Google Play and stores the information needed for verification locally. The Google Play Billing library communicates with Google Play to query and acknowledge purchases. This provides and restores purchased features and verifies purchase entitlement. Pooost does not receive payment details such as card numbers. The free seven-day trial is calculated locally from the installation date. After it ends, app content is locked until purchase or restoration, but remains stored locally. Without an account or server, a new trial after reinstall cannot reliably be prevented; restoring a purchase only restores an existing purchase.

When you share or export, the app or destination you choose receives the selected images, PDFs, text, or backup files. Uploading through Android's share sheet to a cloud service is your choice. Pooost creates temporary unencrypted export copies in its private cache; copies older than one hour are removed on the next app start or export. Recipient apps and exported copies may retain data independently of Pooost. If you confirm a deadline and enable reminders, Pooost stores it locally and shows notifications. Transfer to a calendar app happens only if you choose it.

Processing the documents and details you enter locally is needed to provide the app functions you use (GDPR Article 6(1)(b)). This also applies to a Drive backup you request and purchase handling. Where Google SDKs process technical diagnostics and feature data, their use to provide stable scanning and text recognition relies on a legitimate interest in a functioning app (Article 6(1)(f)). Legal retention duties may apply to purchase and business records (Article 6(1)(c)). Google may act as an independent controller for its own services; see the linked Google notices.

The operator does not run a server for your letter content. Recipients may include Google when you use the stated SDKs, Google Play Billing, or optional Drive backup, and the apps you choose for sharing. Google services may process data outside the EU/EEA. Google describes processing locations and safeguards in its privacy policy. The DEEPBURG website is loaded only when you open an external link.

Local content remains until you delete it in Pooost or uninstall the app. Uninstalling deletes local data and can cause data loss without a prior export. You must delete exported files and Drive backups at their respective destinations yourself. A forgotten backup password cannot be recovered. Google's own retention rules apply to technical data it processes. For access to or deletion of personal data held by the operator, contact mail@deepburg.com.

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw it for the future. You may complain to a data protection authority; the Berlin Commissioner for Data Protection and Freedom of Information supervises the controller. You can edit, export, or delete local documents in Pooost. Manage Google account data in your Google account.

This policy is also publicly available at https://pooost-privacy.deepburg.chatgpt.site/; the English version is at https://pooost-privacy.deepburg.chatgpt.site/en/. OpenAI Sites hosts the website. Accessing a website transmits technical connection data such as IP address, time, requested page, and browser information to its hosting infrastructure. Access serves to provide public privacy information (Article 6(1)(f) GDPR; legitimate interest in accessible information). We do not add our own analytics or advertising scripts, forms, user accounts, or cookies to this static page. See https://openai.com/policies/privacy-policy/ for platform processing and possible transfers outside the EEA. Pooost opens the online policy in an external browser only when you select its link; no letters, notes, or backup passwords are sent to this website. The general DEEPBURG website has its own separately linked privacy policy.