Privacy in plain English.
Penpal Letter is built to help people exchange private letters with people they know. We do not want advertising to be the business model, and the product should not need behavioural profiles to keep you scrolling.
Information we collect
Account information
When you create an account using Apple or Google, Penpal Letter may receive basic profile information such as your name, email address, provider identifier and profile image, depending on what you choose to share with that provider.
People and relationships
To send letters, the service needs information about the people you choose to connect with. If contact importing is enabled in the production app, it should be permission-based and limited to the information necessary to help you find people you already know.
Letter content and creative choices
Drafts, sent letters, stationery choices, stamps and related metadata are stored so you can write, save, send and receive letters. Letter content is not intended to be used for advertising profiles.
Technical information
Like most online services, the production service may process limited device, security, log and diagnostic information needed to operate reliably, prevent abuse and troubleshoot problems.
How we use information
- Provide accounts, correspondence, stamps and collections.
- Deliver letters to the people you choose.
- Keep the service secure and prevent misuse.
- Provide support and respond to requests.
- Improve reliability and accessibility without building an advertising profile about you.
Private correspondence
Letters are meant for their sender and recipient. Access controls should be designed accordingly. If production operations ever require limited access for security, abuse investigation or support, that access should be restricted, logged and used only when necessary.
Children and family accounts
Penpal Letter is designed to support parent-managed child profiles. A child profile should be created and controlled by a parent or guardian, with connections limited to approved people. The production service must apply the age, consent and parental-control requirements that apply in the countries where it launches.
When information is shared
Information may be processed by service providers that help run Penpal Letter — for example authentication, hosting, email, payments or physical fulfilment if those features are enabled. Providers should receive only what they need for their role and be bound by appropriate data-protection terms.
Penpal Letter is not designed to sell personal information or letter content to advertisers.
Retention and deletion
Account and letter information should be kept only for as long as needed to provide the service, meet legitimate security or legal requirements, and respect the user's chosen archive. Production retention periods should be documented once the storage architecture is final.
Your choices and rights
Depending on where you live, you may have rights to access, correct, export or delete personal information, object to certain processing, or withdraw consent. The production account area should make the common requests simple, with support available for anything else.
Contact
For privacy questions or requests, email [email protected]. General help is available on the Support page.