Privacy Policy — Letterbright
Effective date: November 14, 2026
Letterbright helps you read your mail. It is built so that your letters stay on your iPhone or iPad.
What stays on your device
- Photos and letter text. When you take or choose a photo of a letter, the app reads the text on your device (Apple's on-device text recognition). The photo and the text are not uploaded anywhere.
- Explanations. On devices that have Apple Intelligence, the app may use Apple's on-device language model to describe a letter. This also runs on your device; the letter is not sent to us or to Apple's servers by the app.
- Warning signs and the extra scam check. The rules and the small classifier that look for warning signs run on your device.
- Reminders you set for a letter's date are local notifications on your device.
We never receive your letters, photos, amounts, names or addresses.
Family check-ins (optional)
If you turn on daily check-ins and invite a family member, the app uses our small relay server so their device knows you checked in. The server stores only:
- The check-in itself, end-to-end encrypted. It is encrypted on your device with a key that only your paired devices have. We cannot read it; we see a sequence number and a time.
- Device public keys, so the server can verify requests come from your paired devices.
- Push notification tokens, so Apple can deliver check-in notices. (Reminders for a letter's date are local notifications and do not use the server.)
- Membership status: which devices belong to a pairing and whether the parent device has allowed them.
This data is used only to run check-ins. It is kept while the pairing exists and deleted when you stop sharing or remove a family member in the app. Pairings with no check-in for 90 days are deleted automatically. The server runs on a cloud server operated for us by Google Cloud.
Our server does not keep logs of IP addresses. Requests reach it through Cloudflare, which processes IP addresses to deliver and protect the service.
Test version feedback (TestFlight only)
In the test version, you can tell us whether a result was right. Before anything is sent, the app shows you the exact text, and you send it yourself by email. It contains only the app version, the result level, the names of the warning signs the app found, a rough score range, and your answer. It never contains your letter, amounts, names or photos. Your email address is visible to us because you send the email. The App Store version does not have this feature.
What we don't do
- No account, no sign-in.
- No advertising, no tracking, no analytics, no third-party SDKs that collect data.
- We do not sell or share personal data.
Children
The app is not directed at children under 13, and we do not knowingly collect their data.
Your choices
- Turn off check-ins or remove a family member at any time in Settings. This deletes the related data from our server.
- Delete the app to remove everything stored on your device.
Your rights and requests
You can ask us by email to delete check-in data held on our server, or to tell you what it holds for your pairing. Because we don't know who you are, we may ask you to send the request from the app's Settings so we can match it to your pairing.
Changes to this policy
If this policy changes, we will update the effective date above and describe the change in the app's release notes.
Contact
This app helps you read your mail. It is not legal, tax, medical or financial advice, and results can be wrong.