Last updated 14 August 2026
This policy covers the Easy-Post Mobile Companion apps for iOS and Android. It sits alongside the Easy-Post Desktop privacy policy. The data controller is Spencer Fields, a sole trader established in the United Kingdom, at Lytchett House, 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, BH16 6FA, contactable at Apps@spencerfields.com.
The app is a companion to Easy-Post Desktop and shows tracking information from the EasyPost account it is paired with. The production API key is never displayed in the app and is never stored anywhere in readable form. The app contains no analytics, no telemetry, no advertising identifiers and no crash reporting.
Pairing is started by scanning a code shown in Easy-Post Desktop, or by entering a review code. The production EasyPost key is registered once with a backend proxy operated by the Supplier. That proxy stores only an encrypted copy of the key that it cannot read on its own: the decryption key is delivered to the phone during pairing and held in the operating system secure store (the iOS Keychain or the Android Keystore). A copy of the encrypted database on its own therefore reveals nothing. Removing the pairing, or pairing again, replaces or clears these values.
No advertising identifiers, no location tracking of the device, no analytics of how the app is used, no contact-list access and no sale of data to anyone. The app requests camera access for one purpose only: to scan the pairing code. Camera images are processed on the device and are never stored or transmitted.
The Android app is currently offered as a direct download from this site, with its Google Play listing in preparation; the iPhone edition is awaiting release on the Apple App Store. Where an app is obtained through Apple's App Store or Google Play, those stores process their own account and download information under their own privacy policies, which are outside the Supplier's control. A direct download involves no such store account.
To remove all data held for a device, unpair it from within the app; this deletes the device credentials on the phone and the associated encrypted record. A lapsed or revoked desktop licence also disables the paired app. Questions and deletion requests can be sent to Apps@spencerfields.com.
Material changes to this policy will be reflected here with an updated date above.