Privacy policy

Last updated: April 2026

What we collect

Your email address, username, and the letters you write. Nothing else.

How we use it

We store your letters so we can deliver them on the date you choose. We do not sell your data, show ads, or use your letters for analytics or training.

Who can see your letters

Through the app, only you and the recipient you choose can read your letters. Database row-level security blocks every other account from seeing them.

Being honest about the technical reality: your letters are stored as text in our database so we can render them back to you and deliver them at the scheduled time. Like any service that needs to show your content back to you (Gmail, Notion, anything similar), our operational systems can technically access stored content. We do not read it, sell it, or use it for any purpose beyond delivery.

Where your data lives

Your letters and account data are stored on Supabase, running on Amazon Web Services in the United States. Encrypted at rest and in transit. Passwords are hashed with bcrypt and are never stored or visible to us.

How long we keep your data

Your letters are kept for as long as your account is active. Delivered letters are kept in your vault indefinitely unless you delete them. You can export or delete all your data at any time by contacting us.

Your privacy rights

Depending on where you live, you may have rights under GDPR (Europe), CCPA (California), POPIA (South Africa), or similar laws. In all cases you can access, correct, export, or delete your data by emailing us at hello@untilyoureadthis.com

Age requirement

You must be 18 or older to create an account.

Contact

Questions? Email us at hello@untilyoureadthis.com