The Lost Souls

Preview build: some trips use sample placeholder art. Replace them with real trips before launch (see README).

PostEnigma privacy policy

Last updated 19 September 2026 (draft — takes effect when the app launches)

Draft for review. PostEnigma is in private testing and is used only by its owners.

PostEnigma is an Android app that turns the photos and videos you choose into social posts and publishes them after you approve them. This policy explains what data it accesses, why, and how it's protected.

Data PostEnigma accesses

  • Google account: your name, email and profile picture, used for sign-in.
  • Google Photos: only the photos and videos you select in Google's picker. PostEnigma can't browse your library.
  • Phone gallery: if you turn on auto mode, new photos and videos taken on the device.
  • YouTube: permission to upload videos to your channel, and read basic statistics for them.
  • Instagram and Facebook: permission to publish to the Instagram professional account and Facebook Page you connect, and read their insights.
  • WhatsApp: the phone numbers you register as approvers, used to send drafts for approval.

How it's used

Only to create drafts from the media you provide, send them to you for approval, and publish what you approve to the accounts you connected. Nothing is published without an approval.

Google user data: Limited Use

PostEnigma's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google user data, don't use it for advertising, and don't use it to train generalised AI models.

Service providers

PostEnigma uses processors to do its job. Each receives only what that step needs:

  • Cloudflare, for storage.
  • Amazon Web Services in Mumbai, for processing.
  • Anthropic's Claude API, to select photos and draft captions. Anthropic doesn't train its models on this API data by default.
  • Meta, for Instagram, Facebook and WhatsApp.
  • Google, for sign-in, Photos and YouTube.

Storage and security

Media and data are encrypted in transit and at rest. Access tokens are stored encrypted on our server, never on the phone. Original photos stay private. Only approved, location-stripped copies are ever published.

Retention and deletion

You can disconnect any account in the app at any time. Deleting your workspace in the app, or emailing us, erases your media, drafts and tokens within 30 days. Backups expire within a further 30 days.

Your rights and contact

You have the rights described in our website privacy policy. Grievance contact: geosahil.sg@gmail.com.