Privacy Policy

1. Scope

This policy explains how the Open For You mobile app, website and related services process information. Please also read our Terms of Service.

2. Information we process

Account and device

• Anonymous device credentials, account identifiers, login tokens and session state.
• When you bind an account, the identifiers supplied by Apple or another supported identity provider. We do not receive your Apple password.
• App and OS version, request time, IP address, and security or failure logs.

Letters and invitations

• Letter and invitation IDs, direction, unlock time, content type, encrypted size, transaction IDs and delivery state.
• Recipient labels, relationship labels and invitation notes you enter.
• Text, photos and recordings leave the device only after encryption in the normal flow. We are not designed to receive their plaintext.

Purchases and support

• Plans, entitlements, quota usage and transaction state. Apple and RevenueCat process in-app purchases; we do not store full card details.
• Recovery files remain where you save them and are not automatically uploaded in plaintext.
• Information you send to customer support.

3. Storage

• On device: drafts, private keys, recovery material and decrypted content are intended to remain in protected local storage.
• Google Cloud and Neon: accounts, sessions, invitations, entitlements, quota ledgers and delivery coordination.
• Cloudflare R2: temporary encrypted delivery data awaiting acceptance, removed after delivery, cancellation or expiry under configured retention rules.
• Arweave: encrypted letters, envelopes and recovery protocol records may be permanently and publicly stored. Anyone may download ciphertext, but it is designed to require the corresponding keys for decryption.

4. Uses

• Provide identity, invitations, encrypted delivery, mailbox state, purchases and quota accounting.
• Prevent duplicate charges, abuse and unauthorized access.
• Diagnose crashes and failures, provide support and comply with law.

We do not sell personal information or use letter content for targeted advertising.

5. Sharing

We share limited data only as needed with service providers such as Google Cloud, Neon, Cloudflare, Arweave/Turbo, Apple and RevenueCat, or when required by law, security needs or a corporate transaction.

6. Retention and deletion

• Account, invitation, purchase and quota records are kept as needed to provide the service, resolve disputes and meet legal or accounting duties.
• Temporary R2 ciphertext is removed under the delivery and expiry lifecycle.
• Security and crash logs are retained for a limited period.
• Data written to Arweave generally cannot be deleted, changed or recalled. Deleting a platform account does not delete permanent-network ciphertext.

7. Your rights

Depending on applicable law, you may request access, correction, export or deletion of data we control, and may object to or restrict certain processing. You can close your service account in the app under You → Account and binding → Delete Account; a linked identity provider may require you to authorize again so its token can be revoked safely. You may also contact privacy@openforyou.slashgallery.com. Closing the service account preserves the recovery identity held on your device and access to letters already delivered permanently. Permanent-network data, pseudonymous fraud, financial or quota audit records, and legally required records may not be removable.

8. International transfers

Providers may process data outside your country. We use contractual and security measures required by applicable law. Transfer mechanisms must be reviewed as launch regions change.

9. Children

The service is not directed to children under 13 and should not be used by minors where parental consent is legally required without that consent. Contact us if you believe a child provided information.

10. Security

We use transport encryption, protected device storage, short-lived sessions, least privilege and device-side content encryption. No system is perfectly secure, and losing device keys or a recovery file can make letters unrecoverable.

11. Changes

We will post material changes in the app or on this website and update the effective date.

12. Contact

Privacy and rights requests: privacy@openforyou.slashgallery.com. This policy is informational and should be reviewed by qualified privacy counsel before commercial release.