Privacy Policy

Last updated 29 September 2026.

The short version: your sealed letter is unreadable by anyone, including us, until the date you chose. We collect the minimum needed to run the service, we don't sell your data, and we don't read your letters.

What we collect

• Account details — your name, email address, and password (stored as a salted hash, never in plain text).
• Letters — the content you write, any voice notes you record, and the delivery date and method you choose.
• Postal address — only if you choose delivery (or a store order) by post: name, address, and country.
• Waitlist email — if you join the waitlist before launch, just your email address.
• Basic technical data — standard things like IP address and browser type, collected by our hosting and email providers to keep the service running and secure.

We don't collect more than this for the core service. Nothing you write is ever used for advertising, profiling, or training anything — not now, not ever. Google's advertising script is present across the site, but it sets no advertising cookies and personalises nothing unless you actively accept; see Cookies & Advertising below.

How the seal actually works

A sealed letter's content is enforced as unreadable at the database level until its delivery date — not just hidden by the app. Even someone with direct access to our systems can't read a sealed letter's content before that date through the normal product. The one exception is a support request you make yourself, asking us to intervene on your own letter (for example, to fix a wrong delivery date).

Who we share it with

We use a small number of service providers to run Amāna, each only seeing what they need to do their job:

• Supabase — hosts our database, accounts, and file storage (voice notes).
• Vercel — hosts the website and app.
• Resend — sends our emails (confirmations, delivered letters, password resets).
• Pingen — our print-and-post partner, based in Switzerland. For a letter sent by post, only the address and the letter itself are shared with them, about 10–15 days before its date, so they can print and post that one letter.
• Stripe — processes payment for postal delivery and store orders; we never see or store your card details ourselves.
• GitHub — stores our nightly backups of the database and voice notes. Backups are encrypted before they leave our systems, so GitHub can't read them.
• Google Maps — only if you use the address lookup for postal delivery, to suggest matching addresses from what you type.

We never sell your data, and we don't share it for anyone else's marketing.

How long we keep it

A delivered letter stays in your account for as long as you keep your account — that's the point, it's meant to stay reachable. If you delete a letter or your account, we remove the letter content and any voice notes promptly. For safety, we take an encrypted backup every night and keep each one for 30 days, so deleted data can remain in those backups for up to 30 days before it's gone for good. Backups are only ever used to recover from a fault, never to bring back something you deleted. We keep basic account and billing records for as long as we're legally required to for tax and accounting purposes.

Your rights

You can see, edit, or delete your account and letters directly from the app at any time. If you'd rather we do it for you, or you want a copy of your data, email support@amanaletters.com and we'll action it. If you're in the UK or EU, you have rights under UK GDPR / the GDPR to access, correct, delete, or port your data, and to complain to your local data protection authority if you think we've got something wrong.

Cookies & Advertising

Signing in uses one piece of local storage, always — without it we can't keep you signed in. Nothing you write is ever read for advertising. See our Cookie Policy for the full, itemised list of exactly what's stored and why.

Google AdSense helps keep the core app free to use, and its script is present across the site. Until you accept the banner, it runs under Google Consent Mode with advertising storage and personalisation denied — meaning no advertising cookies are set for you and nothing is personalised. Choose Reject, or simply never answer, and it stays that way. Accept, and Google may then set advertising cookies. You can change your mind at any time by clearing this site's local storage, or through Google's own controls at adssettings.google.com.

We also show our own adverts from businesses and charities we work with: a banner on the site, and, for letters sent by post, one extra printed sheet of adverts placed after your letter. These are chosen by us, the same for everyone. They use no cookies or tracking, advertisers never receive your name, address or anything else about you, and nothing you write is used to choose them.

We also use Vercel Analytics site-wide — a cookie-less, first-party page-view count that doesn't identify you individually and requires no consent under UK/EU rules.

Contact

Questions about your data: support@amanaletters.com

This is a working draft written for how Amāna actually operates today, not a substitute for advice from a qualified solicitor — worth a proper legal review before relying on it at scale.