Posy Privacy Policy

Last updated: August 11, 2026

Who we are

Posy is operated by Thompson AI LLC ("Thompson AI," "we," "us"). Posy helps friends coordinate plans without the awkwardness of group texts. This policy explains what information Posy collects, how it's used, who can see it, and the choices you have. It applies to the Posy app and website at onposy.com.

Information we collect

Phone number — used to verify your identity when you sign up and log in. Login codes are delivered by text message.
Profile information you provide — your name, and anything else you choose to add so your friends can recognize you, such as a short note about things you like to do.
Household information (optional) — you may add household or family members, including a child's birth month and year. This is always optional, and you can leave any of it blank.
Friends and connections — who you've added as a friend, and the private notes you keep about your connections (such as how you know someone or which of your circles they belong to).
Invites, plans, and responses — plans you create, invites you send or receive, whether you accepted or declined, alternate times you propose, and places or activities attached to a plan.
Free time and availability — free time you choose to post for your friends to see, and any dates or times you've marked yourself unavailable.
Messages — messages you send in an invite's chat are stored so the people in that chat can read them.
Notification information — if you turn on notifications, we store the subscription details needed to deliver them to your device.
Feedback — anything you submit through the in-app feedback form.
Technical information — like most online services, our hosting providers automatically record basic technical data (such as IP address, device and browser type, and timestamps) in server logs, which we use only to operate, secure, and troubleshoot the service.

We do not collect precise real-time location data or payment information, and we do not use advertising trackers or third-party analytics.

How we use your information

We use your information only to run Posy:

verifying your identity and keeping you signed in;
showing your profile, plans, free time, and messages to the specific people entitled to see them;
delivering the invites, reminders, and notifications you've asked for;
keeping the service secure and diagnosing problems;
responding when you contact us.

We do not sell, rent, or share your information with third parties for advertising or marketing, and we do not use it to build profiles for any purpose other than making Posy work.

Text messages

Posy sends text messages for two things only: your sign-in code, and — if your phone cannot receive app notifications — a reminder about a plan you have already accepted. You agree to receive these when you enter your phone number to sign in. Message frequency varies and message and data rates may apply. Reply STOP to any message to opt out of all texts, or HELP for help.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. No mobile information is sold, rented, or shared with anyone for any purpose other than delivering the messages described above.

Who can see your information

Posy is built around a simple rule: only the people you've chosen can see what you share, and these restrictions are enforced by the database itself, not just by the app.

Your phone number and profile are visible only to people you've connected with as friends, or people you share an invite with. Your phone number is never displayed publicly or searchable in any directory.
Private notes and tags you keep about your connections are visible only to you — never to the person they describe, never to anyone else, and never used to suggest connections.
Household information you add is visible only to your connections, and only if you choose to add it.
Invite details (what, when, where, who's coming) are visible only to the people included in that invite.
Free time you post is visible only to the friends you've made it visible to.
Availability you set is private to you. It is never shown to anyone as a status — it only affects who is offered as an option when a friend is making a plan.
Messages in an invite's chat are visible only to the people in that chat.
Invite links you create can be opened by whoever holds the link, showing them the invite and your name as the sender. Links can only be used a limited number of times and expire automatically.

Service providers

A small number of companies process data on our behalf, strictly to provide Posy:

Supabase — database and authentication hosting; all Posy data is stored here, protected by database-level access rules.
Vercel — application hosting and delivery.
Twilio — sends the text messages Posy uses for login verification and plan reminders.
Apple and Google push services — deliver notifications to your device if you've enabled them.

These providers act under our instructions and their own contractual and legal obligations. They are not permitted to use your information for their own purposes.

When we might disclose information

We may disclose information if we believe in good faith it's required by law (such as a valid legal request), or necessary to protect the rights, safety, or security of Posy's users or the public. If Thompson AI LLC is ever involved in a merger, acquisition, or sale of assets, your information would remain subject to the protections of this policy, and we would notify you before any change took effect.

Data retention and deletion

We keep your information for as long as your account exists. You can request that your account and associated data be deleted at any time by contacting jordan@thompson.ai. We will remove your personal information within 30 days, except where retaining limited records is necessary for the basic functioning of invites other people are still part of, or where the law requires us to keep something longer.

Text messages

Posy sends text messages for two reasons, and only these two.

Your sign-in code, when you log in. This is how Posy verifies it's you.
A reminder about a plan you've accepted, roughly 30 minutes before it starts — and only if your phone can't receive app notifications. On iPhone, notifications require adding Posy to your home screen, so this is how Posy reaches people who haven't. The message contains the plan's name, its start time, and a link to it.

You consent to both when you sign in, on the screen where you enter your phone number.

We never send marketing or promotional texts. Posy has nothing to sell you.

How often. At most two texts a day, and never between 10pm and 7am in your own timezone. Most people get none in a typical week.

Stopping them. Reply STOP to any Posy text and reminders stop immediately. Reply START to turn them back on. You will still receive sign-in codes when you ask to log in, because that's the only way to get into your account — if you'd rather not receive those either, ask us to delete your account.

Message and data rates may apply, depending on your mobile plan. Carriers are not liable for delayed or undelivered messages.

Your choices

Notifications can be turned off at any time in your device or browser settings.
Text message reminders can be stopped by replying STOP to any Posy text.
Household information is always optional and can be removed whenever you like.
Access and correction — you can see and edit your profile information in the app, and you can contact us to ask what information we hold about you or to correct something you can't change yourself.
Deletion — as described above, you can request full deletion at any time.

Children's privacy

Posy is for adults: you must be 18 or older to create an account, and we do not knowingly collect information from anyone under 18. If you choose to add household or family members to your profile — including children — that information is yours to enter and share; those people are not Posy users and do not have accounts. If we learn that someone under 18 has created an account, we will delete it.

Security

We take reasonable technical and organizational measures to protect your information, including enforcing access restrictions at the database level so that only the people you've chosen can see your data, encrypting data in transit, and limiting access to production systems. No system can guarantee perfect security, but restricting who can see what is the core of how Posy is built, not an afterthought.

Changes to this policy

If this policy changes in a meaningful way, we'll notify users through the app before the changes take effect, and update the date at the top of this page.

Contact

Posy is operated by Thompson AI LLC. Questions about this policy or your data can be sent to jordan@thompson.ai.