Privacy Policy

Effective Date: March 22, 2026

1. Information We Collect

1.1 Account Information

When you create an account using Apple Sign-In or Google Sign-In, we receive and store:

• Your name (as provided by your sign-in provider)
• Your email address (may be a relay address if you use Apple's "Hide My Email")
• A unique user identifier

We do not receive or store your Apple ID password, Google password, or any other authentication credentials.

1.2 Profile Information

You may provide additional profile information, including:

• Display name (up to 50 characters)
• Profile photo (avatar)
• Headline (short bio)
• Preferred language
• Time zone

1.3 User-Generated Content

When you use the App, you create content including:

• Letter text
• Image attachments
• Audio attachments (Premium feature)
• Envelope greetings and style selections
• Scheduled unlock dates for letters
• Draft letters (stored locally and synced via iCloud)

1.4 Usage Statistics

We maintain aggregate statistics about your usage, including:

• Number of letters written, sent, received, and opened
• Total words written

1.5 Device and Technical Information

We automatically collect certain technical information, including:

• Device model and operating system version
• App version
• Crash logs and diagnostic data (via Firebase Crashlytics)
• General usage analytics (via Firebase Analytics)
• Push notification token (for delivering notifications)

1.6 Purchase Information

If you subscribe to Letrune Premium, we receive from Apple:

• Subscription status (active, expired, or revoked)
• Product identifier (monthly or yearly plan)
• Purchase and expiration dates
• Whether the subscription is shared via Family Sharing

We do not receive or store your payment method, credit card number, or billing address. All payment processing is handled by Apple.

1.7 Information We Do Not Collect

We want to be clear about the data we do not collect:

• We do not collect your precise or approximate location
• We do not access your contacts or address book
• We do not access your calendar
• We do not read your clipboard
• We do not collect health or fitness data
• We do not collect financial or banking information
• We do not use device advertising identifiers (IDFA)
• We do not track you across other apps or websites

1.8 App Tracking Transparency

Letrune does not track you across apps or websites owned by other companies. We do not participate in ad networks or share data with data brokers. Therefore, the App does not request App Tracking Transparency (ATT) permission, as there is no cross-app or cross-site tracking to disclose.

2. How We Use Your Information

We use the information we collect to:

Purpose	Data Used
Provide and operate the App	Account, profile, and content data
Deliver letters to recipients at the scheduled unlock date	Letter content, recipient information, unlock dates
Send push notifications when a letter is ready to open	Push notification token, letter delivery schedule
Sync your drafts across your devices	Draft content via Apple iCloud (CloudKit)
Display your profile to your friends and letter recipients	Display name, avatar
Process and manage your subscription	Purchase information
Diagnose crashes and improve App stability	Crash logs, device information
Understand how the App is used and improve features	Aggregated usage analytics
Prevent abuse and ensure security	Account identifiers, usage patterns

We do not use your information for advertising. We do not sell your personal information to third parties. We do not use your letter content for any purpose other than delivering it to your intended recipient.

3. How We Store and Protect Your Information

3.1 Data Storage

• Cloud data (account, profile, letters, mailbox) is stored in Google Firebase (Firestore and Firebase Storage), hosted on Google Cloud infrastructure.
• Draft letters are stored locally on your device and synced across your devices using Apple iCloud (CloudKit).
• Avatar images are stored in Firebase Storage with a maximum file size of 5 MB.
• Letter attachments (images, audio) are stored in Firebase Storage.

3.2 Security Measures

• All data in transit is encrypted using HTTPS/TLS.
• All data at rest is encrypted by our infrastructure providers (Google Cloud and Apple iCloud).
• Firebase App Check is enabled to verify that requests come from the authentic Letrune app.
• All data modifications are performed through secure server-side Cloud Functions; direct database writes from the client are prohibited.
• Users can only access their own data; cross-user data access is not permitted except through the letter delivery mechanism.

3.3 Invite Token Security

When you send a letter to someone who does not yet have a Letrune account, an invitation link is generated. The invitation token is stored in hashed form (SHA-256) and cannot be reverse-engineered from the stored data.

4. Data Sharing and Third-Party Services

We share your information only in the following limited circumstances:

4.1 Letter Recipients

When you send a letter, the recipient will see your display name, avatar, envelope greeting, and the letter content (text, images, audio) after the unlock date. This is the core function of the App.

4.2 Third-Party Service Providers

We use the following third-party services to operate the App:

Service	Provider	Purpose	Data Shared
Firebase Authentication	Google LLC	User sign-in and account management	Email, name, user ID
Cloud Firestore	Google LLC	Cloud data storage	Profile, letters, mailbox data
Firebase Storage	Google LLC	File storage (avatars, attachments)	Uploaded images and audio
Firebase Analytics	Google LLC	Usage analytics	Anonymized usage events, device info
Firebase Crashlytics	Google LLC	Crash reporting	Crash logs, device info
Firebase Cloud Messaging	Google LLC	Push notifications	Device push token
Apple iCloud (CloudKit)	Apple Inc.	Draft synchronization	Draft letter content
Apple StoreKit	Apple Inc.	Subscription management	Purchase status
Google Sign-In	Google LLC	Authentication option	Email, name (with your consent)

Each third-party service provider is subject to its own privacy policy:

• Google Privacy Policy: https://policies.google.com/privacy
• Apple Privacy Policy: https://www.apple.com/legal/privacy/

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as a court order or government request.

4.4 No Sale of Data

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

5. Data Retention

• Account data: Retained for as long as your account is active.
• Sent letters: Retained for as long as the recipient's account is active. Once a letter is delivered, the recipient's copy persists in their mailbox independently of the sender's account.
• Draft letters: Stored locally and in iCloud until you delete them or delete your account.
• Avatar images: Retained until you change or remove them, or delete your account.
• Usage analytics: Retained in aggregated, anonymized form in accordance with Google's data retention policies.
• Crash logs: Retained for up to 90 days by Firebase Crashlytics.

5.1 Account Deletion

You may delete your account at any time from the Settings screen in the App. When you delete your account:

• Your profile, statistics, entitlements, friend list, and mailbox are permanently deleted.
• Your draft letters and attachments are permanently deleted.
• Letters you have already sent to other users will remain in their mailboxes (as the recipient owns their copy).
• Your display name snapshot may remain visible on letters previously received by other users.
• Unclaimed invitation tokens you created are deleted; claimed tokens are retained so recipients can access letters sent to them.

Account deletion is permanent and cannot be reversed.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

6.1 Access and Portability

You can view your profile information, letters, and drafts within the App at any time.

6.2 Correction

You can update your display name, avatar, headline, language preference, and time zone from the Edit Profile screen in the App.

6.3 Deletion

You can delete your account and all associated data from the Settings screen. See Section 5.1 for details on what is deleted.

6.4 Opting Out of Analytics

Firebase Analytics data collection can be controlled through your device's privacy settings. You may limit ad tracking and analytics through your iOS Settings.

6.5 Push Notification Preferences

You can enable or disable push notifications at any time from your device's Settings or from the Notification settings within the App.

6.6 European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to request a copy of your personal data
• The right to request erasure of your personal data
• The right to restrict or object to processing of your personal data
• The right to lodge a complaint with a supervisory authority

Our lawful bases for processing your data are: (a) performance of a contract (providing the App service), (b) your consent (for optional features like analytics), and (c) our legitimate interests (security and fraud prevention).

6.7 California Users (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your rights

6.8 Canadian Users (PIPEDA)

If you are located in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You have the right to access your personal information, request corrections, and withdraw consent for its collection, use, or disclosure. We collect, use, and disclose your personal information only for purposes that a reasonable person would consider appropriate in the circumstances.

6.9 Japanese Users (APPI)

If you are located in Japan, your personal information is handled in accordance with the Act on the Protection of Personal Information (APPI). You have the right to request disclosure, correction, or deletion of your personal data, and to cease use of your data. Your data may be transferred to servers located outside Japan (Google Cloud infrastructure) with appropriate safeguards in place.

7. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at the address below, and we will take steps to delete such information.

8. International Data Transfers

Your information may be stored and processed in any country where Google Cloud or Apple maintains infrastructure. By using the App, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Post the revised policy at this URL

Your continued use of the App after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us at:

• Email: letruneapp@gmail.com
• Website: https://letrune.com