Introduction
Letterseal: Time Capsule lets you write letters to your future self that stay sealed until a date you choose. The app works without accounts, servers, tracking, analytics or advertising. It makes no network connections of its own (purchases go through Apple’s App Store), and the developer never receives anything you write, record or photograph.
Information We Do Not Collect
The developer does not collect any personal information. Specifically, the developer does not collect:
- Name, email address, phone number, or physical address
- Contact list or address book data
- Your letters, photos, voice recordings or replies
- Precise or approximate location data
- Financial account information or payment card information
- Advertising identifiers or device identifiers used for tracking
- Analytics, usage or behavioral data
Information Stored Locally on Your Device
Letterseal stores the following only on your device: the letters you write, photos and voice recordings you choose to add, your replies, the writing question you picked, opening dates, an unfinished draft, and app settings. This content lives in the app’s own protected storage and is encrypted at rest by iOS. None of it is transmitted to the developer or to any server. If iCloud Backup or a computer backup is turned on for your iPhone, iOS includes the app’s data in that backup, as it does for every app.
For a “surprise” letter, the app chooses the opening date on your device and keeps it out of every screen, widget and notification until the letter opens. The date is stored only on your device.
Backups You Create
You can export your letters to a single backup file protected by a password you choose. The file is created on your device and encrypted there (AES-GCM, with a key derived from your password using PBKDF2) before you decide where to save or send it, for example the Files app or AirDrop. The developer never receives the file or the password, and the password is never stored, so nobody — including the developer — can open a backup whose password is lost. Restoring reads the file on your device and only adds letters that are missing; it never changes letters already there.
Widgets, Live Countdowns and Notifications
So that widgets and the Lock Screen live countdown can show your next opening without opening the app, the app shares a small summary with its own widget through a private App Group container on your device: the next letter’s name and opening date, and the number of sealed and opened letters. Surprise opening dates are never included. This summary stays on your device.
The app sends local reminders the day before a letter opens and on the day itself (surprise letters get only the opening reminder), and, if you turn it on, one yearly reminder to write. These are scheduled on your device; no notification server is involved.
Because the Lock Screen can be read by whoever holds your phone, the setting Show names outside the app lets you keep letter names out of widgets, live countdowns and notifications. When it is off, the name is not written into the widget summary at all. The contents of a letter never appear outside the app.
App Permissions
Every permission is optional and requested only when you use the feature that needs it:
- Notifications — to tell you when a letter opens. You may decline; the rest of the app keeps working.
- Microphone — only when you choose to record a voice letter. Recordings are saved inside the app on your device and are never uploaded.
- Face ID or Touch ID — only if you turn on the app lock. Biometric matching is performed by iOS; the app receives only a yes or no and never has access to your biometric data.
Photos are chosen with the system photo picker, which gives the app only the photos you select and does not require access to your photo library. Photos are resized and stored inside the app on your device.
Payments and Purchases
The optional one-time purchase, Letterseal Unlimited, is processed by Apple through the App Store using StoreKit. The developer does not receive, process or store your payment information, and no subscription is offered.
Third-Party Services
The app contains no third-party analytics, advertising or tracking SDKs. It uses only Apple platform features — local notifications, widgets, Live Activities, StoreKit, the photo picker, the microphone and Face ID / Touch ID — none of which are used to track or profile you.
Data Sharing
The developer does not sell, trade, rent or share user data with anyone. There is no developer-side database. A keepsake PDF or a backup file leaves your device only if you choose to share it yourself.
Data Deletion
You can delete a letter at any time inside the app, which also removes its photos and voice recording. Deleting the app removes all data stored by it on your device, including letters, photos, recordings, drafts and settings. Backup files you saved elsewhere are yours to delete. Because nothing is stored on a server, there is no account to close and no request you need to send.
Children's Privacy
The app does not knowingly collect personal information from children or from anyone, because it does not collect personal information at all.
Changes to This Privacy Policy
This policy may be updated if the app’s features change in a way that affects how information is handled. The revised policy will be posted on this page with a new effective date.
Contact
For privacy-related inquiries regarding this application, you can write to murathanoran1@gmail.com, or use the contact methods provided through the App Store listing.