Privacy Policy

Privacy, in plain language

Your letters are yours. Grateful.ly has no account system and does not sell personal data. We do not collect your letter text, recipient names, photos, or signatures. The web composer stores drafts in your browser. The iPhone and iPad app stores your library on your device, with private iCloud sync only when you choose to enable it.

Web composer

Draft text, attached images, your selected theme, and preferences are saved in your browser's local storage. Grateful.ly does not upload that draft to an application server. Clearing site data in your browser removes the local draft.

A shared letter is encoded into its link and decoded in the recipient's browser. There is no separate server-side letter record, but the complete link can reveal the letter to anyone who receives it and may remain in browser history. Share it with the same care as the letter itself. Grateful.ly excludes letter-bearing URLs from its offline cache and never sends their query values to analytics.

iPhone and iPad app

Letters, photos, signatures, reminder preferences, and app preferences are stored on your device. Grateful.ly does not require an account. You can create one editable reminder per person, choose a one-time, weekly, monthly, or yearly schedule, and edit or remove it from Settings. Notifications are scheduled and delivered by iOS; they are not marketing messages from our servers.

If you turn on iCloud Sync in Settings, Apple syncs your letters, saved people, signatures, and reminder configuration through your private iCloud database. Sync is off by default. We cannot read that private database. You can turn sync off at any time, export a backup, or use Settings → Manage Data → Delete All Data to erase the local library and its iCloud copy.

What leaves your device

Only what you choose to share:

• Images, PDFs, videos, text, print jobs, or links you send through a share sheet
• Backup files you save or send, including their photos
• Cards you explicitly send with the Grateful.ly Messages app

Once you share or save an export with another service, that service's privacy terms apply.

Analytics

The website does not load Google Analytics unless you explicitly choose Allow analytics. With permission, it measures page-level visits and TestFlight link clicks. Events receive page paths without query strings and may include a link identifier and location; they never receive letter text, names, photos, signatures, or the encoded contents of shared letters. Google may use cookies or similar storage under its own privacy policy. Your choice is stored in this browser. You can reopen Analytics settings in the footer and withdraw permission at any time. Global Privacy Control keeps analytics off.

Analytics in the iPhone and iPad app is off by default. If you explicitly enable Share Anonymous Usage in Settings, Grateful.ly sends limited product-interaction events and a non-linked device identifier to TelemetryDeck. Events never contain letter text, names, photos, signatures, advertising identifiers, or cross-app activity. Turning the setting off stops future events immediately.

Purchases

Grateful.ly Plus is processed by Apple. We do not receive your payment-card details. Apple provides the app with purchase entitlement status so it can unlock Plus and restore the purchase for your Apple Account.

Children

Grateful.ly is not directed to children. We do not knowingly collect a child's identity or correspondence.

Your choices

• Delete the web draft by clearing Grateful.ly site data in your browser
• Export, restore, or delete the native app library from Settings
• Leave iCloud Sync and Share Anonymous Usage off
• Ask a privacy question or request help through our support page

Changes and contact

We may update this policy as the products change. The revision date above identifies the current version. For privacy questions, visit Grateful.ly Support or email rene@deanda.org.