Privacy

What the app keeps

• Your account. A random account id from the first launch. If you sign in with your phone number, that number (used only to sign you in; nobody else sees it and we never message you anything but the sign-in code). If you sign in with Apple or Google, the name and email they share with us (with Apple you can hide your email).
• Your profile. The name you sign letters with, your Daak ID, your home city, your wax seal's initials and colour, and if you add them: a photo for your stamp, a line about you, your birthday (and whether friends may see the day) and the languages you write in. Your stamp photo can be seen by anyone with your Daak ID.
• Letters. Who a letter is for (their name, and their city or Daak ID), its words, the paper, any marigold keepsake, the day it should arrive and its made-up postal journey. Letters are stored on our server so they can travel and arrive. A photo you tuck into a letter travels with it, stored privately: only you and the person it is for can see it, once it arrives.
• SlamBooks. The pages friends fill for you: their name, their answers and stickers.
• Stamps and milestones you collect.
• For notifications, your phone's push token, whether notifications are on, and the app version.

Kept only on your phone, never sent to us: your drafts, the list of people you write to and their birthdays and other days, your sound, haptics and animation settings, and whether the Face ID lock is on (Face ID itself stays with your phone; DaakMe only learns yes or no). The app never reads your contacts or your location.

Who can read a letter

You, and the person it is for: in the app, or through the link you send them. Before it arrives, the link shows only the envelope and the journey. A friend's SlamBook page is read only by the book's owner. Letters are encrypted at rest on our server. They are not end-to-end encrypted yet, so the database can technically be read by the people who run DaakMe; we do not read letters, and access is limited to keeping the service running, checking a report you send us, or when the law requires it. When we add sealing on your phone, this page will say so.

Services we use

• Supabase (servers in Mumbai, India): accounts, letters, SlamBooks and stamps.
• Vercel: the web pages at daakme.com/readletter and go.daakme.com for people without the app.
• Apple and Google: sign-in, if you choose it, and Apple's push service for notifications.
• Twilio (United States), if you sign in with your phone number: it sends the six-digit code by text message or WhatsApp and checks it. It receives your number only.
• Sentry (United States): crash reports. They contain the app version, the phone model and what went wrong in the code; never your name, email, account id, IP address, anything you typed or a screenshot.
• PostHog (European Union), only if you say yes to “Help make DaakMe better?”: about fifteen anonymous events such as “a letter was posted” or “a SlamBook page was read”, with a random id that is not linked to your account. Never names, cities you type or words. Turn it off any time in Profile › Privacy.

Notifications

If you allow them, DaakMe tells you when a letter arrives or a SlamBook page comes back. By default they say only “A letter has arrived”. You can choose to show who it is from in Profile › Notifications, and turn them off there too. Never the words.

How long we keep it, and deleting

We keep your account and letters while you use DaakMe. Delete your account in Profile › Delete my account: your profile, devices, SlamBook, stamps and milestones are removed at once. Letters you already sent stay with the people who received them, and letters sent to you stay with the people who wrote them, no longer linked to you: a letter belongs to both people. Crash reports are kept by Sentry for 30 days; anonymous usage events are kept by PostHog for up to a year.

Children

DaakMe is not meant for children under 13.

Your choices and rights

You can see and change your profile in the app, turn off notifications and anonymous usage, and delete your account. To ask for a copy of your data, a correction or anything else, write to us through daakme.com/contact.

Changes

If this changes in a way that matters, we will update this page and say so in the app.

An account on the old DaakMe website

Before the app, DaakMe was a website where you could write and sign in with Google. That website has closed. If you had an account there, email support@daakme.com with the subject Privacy request from the email you signed in with, and we will send you a copy of your data or delete it.