Privacy

What we keep

• Your email address, and your name as you gave it to us or to Google.
• Your time zone, so a letter lands at the hour you chose.
• Your settings, such as your preferred delivery hour and reminders.
• Your letters: what you write, when you sent it, and when it arrived. We also keep a count of your letters and your writing streak.
• Your stamp balance, which is the number of letters you can still send.
• If you turn on notifications, a token from your device or browser, so we can tell you when a letter is on its way.
• The name of the person you are paired with, and the invite codes you create.

Letters are stored with Google Firebase. Google encrypts data in transit and at rest on its servers. We do not yet add our own layer of encryption to letter text.

We do not put the text of your letters in our logs or in any analytics.

Letters belong to the person they are written to

Once a letter has been delivered, it belongs to the person who received it. It stays in their archive, even if you later delete your account. Your name on it is replaced with a plain note that the sender has left.

Letters you have written that have not yet been delivered are deleted if you delete your account. Letters written to you are deleted too.

Think of it like a paper letter. Once it is in someone's hands, you cannot take it back out of their drawer.

Who helps us

We use a few services to run WriteMeALetter. They handle data on our behalf.

• Google Firebase for sign-in, our database, our server functions and hosting. Your account details and letters are stored there.
• Resend to send email, such as sign-in links and notices that a letter has arrived. They see your email address and the email we send.

If we take payments one day, the payment provider will be listed here before we do.

What we do not do

• We show no ads.
• We do not sell your data.
• We do not share your data with advertisers or data brokers.

We may share information if the law requires it, or if it is needed to deal with abuse reported to us.

Asking us to delete your data

Email privacy@writemealetter.love from the address you signed up with and ask us to delete your account. We will remove your profile, your settings, your device tokens, and the letters described above. We will confirm when it is done.

The email request is for now. A delete button inside the app will come later.

You can ask for a copy of your data, or for corrections, at the same address.

Who can use it

WriteMeALetter is for people aged 16 and over.

Changes and questions

If we change this page in a way that matters, we will tell you before it takes effect. Questions go to privacy@writemealetter.love.