Yours, Later
Privacy Policy
Last updated 2 October 2026
Yours, Later exists to keep one promise: a sealed letter is delivered exactly once, on the date you chose — even years later. Honoring that promise means handling your words with care. This policy explains, plainly, what we collect, why, and the control you keep.
The short version
- We store your letters so we can deliver them on the date you set.
- Private letters are end-to-end encrypted. Only you hold the key — we cannot read them, and they are never sent to any AI.
- We never sell your data, and we never use it for advertising or cross-app tracking.
- You can export or delete your account and all your letters at any time.
Who we are
"Yours, Later" (the "app", "we", "us") is the data controller for the information described below. You can reach us about anything in this policy at goldenapplicationdev@gmail.com.
What we collect and why
Account information
When you sign in with email, Google, or Apple, we store your email address and an account identifier. We use these to authenticate you, sync your letters across devices, and deliver your letters by email. Authentication is handled by Google Firebase Authentication.
Your letters and attachments
The content you write — letter text, the delivery date, and any photos or audio you attach — is stored so it can be sealed and delivered to you in the future. Sealed letters are held by Google Cloud Firestore until their delivery date, and any photos or audio you attach are held by Cloudflare R2.
Private letters are end-to-end encrypted on your device before they leave it, using a key stored only in your device's secure storage. We never receive that key, so we cannot read Private letters, and they are never processed by any AI. The app keeps a sealed letter's contents hidden until its delivery date.
AI features (Standard letters only)
If you choose to use writing prompts or the delivery-time companion, the text of Standard letters may be processed by an AI model to generate that response. This never happens for Private (end-to-end encrypted) letters. AI processing is used only to provide the feature you requested — not to train models or for any other purpose.
Delivery and notifications
To deliver letters we use a device push token (Firebase Cloud Messaging) and your email address (email is sent via Resend). Email is our primary delivery channel; push notifications are a bonus. We keep a minimal delivery record per letter so that each one is delivered only once and never twice.
Diagnostics and usage
We use Firebase Crashlytics for crash reports and Firebase Analytics for anonymous usage events (for example, which screen was viewed) to find bugs and improve the app. The content of your letters is never logged or included in analytics.
Purchases
Premium subscriptions and the lifetime purchase are processed by Apple or Google and managed through RevenueCat. We receive your subscription status — never your card or payment details.
How your information is shared
We do not sell your personal data and we do not share it for advertising. We share data only with the service providers that make the app work, and only as needed:
- Google Firebase — authentication, database, push, crash & analytics.
- Cloudflare — storing the photos and audio you attach to letters (R2).
- Resend — sending delivery and confirmation emails.
- RevenueCat / Apple / Google — managing purchases.
- An AI provider — only for Standard letters that opt into AI features.
We may also disclose information if required by law, or to protect the safety and rights of our users.
How long we keep it
We keep your letters until they are delivered and for as long as you keep your account, so you can revisit delivered letters and reflections. When you delete a letter or your account, the associated data is removed from our active systems.
Your rights and choices
- Access & export — export a copy of your letters and account data, any time, from within the app.
- Deletion — delete individual letters, or your entire account and all its data, from within the app (Settings → Delete account), from our account deletion page, or by contacting us.
- Notifications — turn push notifications off at any time in your device settings.
- Correction — update your account details, or ask us to.
Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, email goldenapplicationdev@gmail.com.
Children
Yours, Later is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal data.
International transfers
Our service providers may process your data in countries other than your own. Where that happens, the transfer is protected by appropriate safeguards.
Changes to this policy
If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you in the app.
Contact
Questions about your privacy? Write to us at goldenapplicationdev@gmail.com. We read every message.