Privacy Policy

1. Who we are

Letter4U is a service for creating and sharing digital letters, memory pages, interactive templates, and related media. Questions or privacy requests may be sent to kenjibuena.business@gmail.com.

2. Information we collect

We collect the account information you provide through Google Sign-In, such as your account identifier, email address, and display name. We also process page content you submit, including text, photos, audio, video links, template settings, custom page names, drafts stored on your device, support messages, and abuse reports.

When you use Letter4U, we may process basic technical information such as browser or app type, approximate network information, security and rate-limit identifiers, timestamps, crash details, and interaction records needed to operate and protect the service. Raw IP addresses are not stored in page abuse reports; a one-way hash is used for abuse prevention.

3. Cookies and device storage

The website uses cookies and similar browser storage, including local storage and storage used by Firebase Authentication, to remember your storage choice, maintain sign-in, protect your account, and support drafts and page creation. You can browse public pages without accepting the required storage notice, but those account and creation features need browser storage. Selecting Accept required records your choice on this device; simply continuing to browse does not indicate consent.

Optional Firebase usage analytics is off unless you separately select Allow optional usage analytics in the notice or enable it in Settings. If enabled, Google Firebase Analytics may use cookies or similar identifiers and receive website-usage events so we can understand and improve the website. You can switch it off later in Settings without losing access to account or creation features. Switching it off stops future analytics collection on this device; it does not erase data already sent. You can remove existing cookies and local storage using your browser controls, though this may sign you out or remove local drafts and preferences. The Android app does not use this web analytics setting. Embedded services, such as YouTube videos you choose to open, may apply their own storage and policies.

4. Purchases and credits

On Android, digital-credit purchases are processed by Google Play Billing. Google may provide Letter4U with purchase tokens, product identifiers, transaction status, and account-matching identifiers so we can verify and deliver credits. Letter4U does not receive your full card number. Web payments may be processed by PayMongo, which handles payment details under its own privacy terms.

5. How we use information

We use information to authenticate you, save and publish pages, deliver purchased or earned credits, provide previews and aggregate page-view counts, prevent fraud and abuse, respond to support requests, moderate reported content, maintain service reliability, and comply with legal obligations.

Published-page view counts are separate from optional Firebase usage analytics. They do not set analytics cookies or store a persistent visitor identifier on your device. A page creator sees aggregate totals, not visitor names, network addresses, or individual visit histories. To limit repeated counts and abuse, the counter uses temporary keyed hashes of request network addresses; its records do not store the raw addresses. Temporary request checks and pending count batches expire within 48 hours. Aggregate totals are associated with the published page and removed when that page is deleted. Counts are approximate, start when tracking is enabled, and may update later because of caching and usage limits. Enabling these aggregate counters does not enable optional Firebase Analytics.

6. Public and shared content

Published pages are available to anyone who has or discovers the page link. A recipient may copy, capture, or re-share content. Do not publish confidential information unless you are comfortable sharing it with the intended audience and anyone who may receive the link.

7. Service providers

We use service providers including Google Firebase for authentication, databases, storage, cloud functions, and optional website analytics; Google Play for Android billing; Vercel for web hosting and delivery; PayMongo for supported web payments; and YouTube when a template embeds a YouTube video. These providers process information under their own terms and privacy policies.

8. Retention and security

We retain account and page information while your account is active or as needed to provide the service. Security logs, transaction evidence, and fraud-prevention records may be kept for a limited period after deletion where required for legal, accounting, dispute, or security purposes. We use access controls, server-side authorization, validation, rate limits, and restricted Firebase rules, but no online service can guarantee absolute security.

9. Your choices and rights

You may update your profile, delete individual pages, or request full account deletion. To request deletion of specific letters, pages, images, audio, or other content while keeping your account, use the Letter4U data deletion request page. Instructions for deleting your whole account are available at letter4u.me/account-deletion. Depending on your location, you may also have rights to access, correct, object to, restrict, or obtain a copy of personal information.

10. Children

Letter4U is not directed to children under 13. If local law requires a higher minimum age or parental consent, that rule applies. Contact us if you believe a child has provided personal information without required consent.

11. Changes

We may update this policy as Letter4U changes. The effective date above identifies the current version. Material changes may also be communicated in the app or website.