Privacy Policy

Information We Collect

We collect minimal personal information necessary to provide our service:

• Email address for account creation and apology delivery
• Basic account information (name, if provided)
• Payment information (processed securely through Stripe)
• Usage analytics (anonymized and aggregated)

We may also collect:

• Support correspondence you send us (for troubleshooting and compliance)
• Subscription and credit balance metadata (not your full payment details)
• Diagnostic logs to ensure reliable delivery of email attachments (PDF/MP3)

Ephemeral Data Processing

Your personal stories and generated apologies are processed in-memory and automatically discarded after email delivery. We do not retain:

• The content of your personal stories
• Generated apology text, audio, or PDF content
• Recipient email addresses
• Any sensitive personal information shared during generation

Data Retention

We follow a strict "Generate & Destroy" principle. Your story inputs and generated outputs (text, audio, PDF) are processed in-memory for generation and email delivery and are not retained after delivery. We keep only minimal account and billing metadata as required to operate the service and comply with applicable laws.

We retain limited operational metadata (e.g., delivery status, timestamps, IPs) for reliability and security and purge it within ≤30 days. Because we delete story content and outputs, we can only provide or delete account/billing metadata—not past story content or outputs.

Cookies & Analytics

We may use cookies or similar technologies to maintain your session, secure your account, and understand basic usage patterns in aggregate form. You can control cookies through your browser settings.

Children's Privacy

Our Service is not directed to children under 16. If we learn that we have collected personal information from a child under the age of 16, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us.

Your Privacy Rights

We are committed to protecting your privacy and respecting your data rights. You have the following rights:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing

Data Security

We implement industry-standard security measures to protect your data:

• We use TLS 1.3 for data in transit. Email attachments are delivered over TLS; they are not end-to-end encrypted after delivery.
• Secure authentication through Clerk
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis

Third-Party Services

We use the following trusted third-party services:

• Clerk: Authentication and user management
• Stripe: Payment processing
• Google Generative AI: AI text generation (no retention of your story content by us)
• OpenAI: Text-to-speech voice generation (no retention of your story content by us)
• Mureka: Music generation for apology songs (lyrics only, where applicable)
• Resend: Email delivery
• Vercel: Hosting and deployment

Contact Us

For any privacy-related questions or to exercise your rights, please contact us at: