Privacy Policy

Last updated August 1, 2026

Letter is an independent iPhone app operated by Saksham Virmani. This policy describes the data behavior of the current local-first Letter build described on this site.

The short version

Your letter text and local display name are stored locally on your iPhone.
The current app does not upload letter content to a Letter account or Letter-operated server.
Saved letter data is eligible for normal Apple device backups. A body-free mailbox snapshot is also kept in Letter's shared App Group for widgets and Live Activities.
Letter does not sell personal data, show ads, or include third-party advertising trackers.
App Store purchases are processed by Apple. Letter never receives your payment-card details.

Data stored on your device

Letter stores the information you enter so the app can show your drafts, sealed letters, mailbox, and shelf. This can include:

Letter text and local delivery dates.
The display name you choose during onboarding.
Local app preferences and onboarding status.

The current version does not provide Letter-operated cross-device sync, a recovery phrase, a web account, or a server copy.

Widgets and Live Activities

To show mailbox status outside the main app, Letter writes a small derived snapshot to its shared App Group container. It can include internal letter identifiers, due or arrival dates, in-flight counts, a generic daily prompt, and the time the snapshot was updated. It does not include letter text or your display name.

Photos and sharing you choose

If you use the current photo-enclosure control, Apple's Photos picker gives Letter access only to the image you select. The current build creates a small session-only preview; it does not persist that image with the letter or upload it to Letter.

If you choose to share a letter image, Letter creates a temporary image containing the lines and details you selected. Nothing is sent until you choose a destination in the iOS share sheet. The app or service you choose to share with handles that copy under its own privacy terms.

Purchases and notifications

Apple's StoreKit framework supplies subscription products and current Letter+ entitlement status to the app. Apple processes the transaction under your Apple ID and its own privacy terms; Letter does not receive your card number.

If you allow notifications, iOS uses that permission to present Letter notifications. The current version does not upload a push token to a Letter-operated server.

Data collected by the developer

The current app does not send letter content, your display name, location, advertising identifiers, or app activity to the developer. It does not include a Letter account or developer-operated analytics service.

This website

This static website does not use cookies, analytics, advertising pixels, account forms, or third-party scripts. If you email support, the information in your message is used to answer your request and is handled by the email provider you choose and our email provider.

Sharing and sale

Letter does not sell or rent personal data. The app uses Apple platform services for App Store purchases, notifications, the Photos picker, widgets, Live Activities, backups, and user-initiated sharing. No letter text is shared with the developer by the current app.

Security and encryption

Letter writes its saved letter data with Apple's complete-file-protection-unless-open option. The body-free widget snapshot uses the shared App Group container. Letter does not yet claim end-to-end encryption, because no Letter server or cross-device encrypted transport is active in this version.

Backups, retention, and deletion

Letter's saved letter data is marked eligible for normal Apple device or computer backups. Offloading Letter can preserve local data for a later reinstall. Deleting Letter normally removes its app and shared widget data from that iPhone, but an Apple device or computer backup can retain a restorable copy according to your backup settings. You can manage those backups through Apple or your computer.

Because the current version does not create a Letter account or server copy, there is no separate Letter account or Letter-operated cloud copy to delete.

Future services

If Letter later adds accounts, server delivery, cloud sync, email delivery, or analytics, this policy and the App Store privacy disclosure will be updated before that version collects the additional data.

Changes to this policy

Material changes will be reflected by a new date at the top of this page and, when appropriate, an in-app notice.

Contact

Questions or privacy requests: sakshamvirmani30@gmail.com.