12 Letters App Privacy Policy

Introduction

Welcome to 12 Letters ("the App"). This Privacy Policy explains what information we collect, how we use it, and your rights when using our mobile application.

Who We Are

12 Letters is the operator of the App. If you have questions or requests about privacy, contact us at support@my12letters.com.

Information We Collect

Account Information

• If you create an account: email address and a Firebase-generated user ID
• If you use the app without creating an account: an anonymous Firebase-generated user ID

Content You Provide

• Conversation transcripts and messages you exchange with the in‑app assistant
• Drafts and finalized letters you create
• Per-letter progress, status flags, timestamps, and related metadata

Microphone and Speech Recognition

• If you choose to use voice input, we will request access to your device microphone.
• Voice input uses your device's built-in speech recognition to convert your speech to text.

Photo Library (Export)

• If you choose to export letters or media, we may request access to your photo library to save the exported content.
• We only access your photo library when you explicitly choose an export action.

Usage and Diagnostic Logs

• We monitor technical logs to keep the service reliable, diagnose errors, and detect abuse (for example, spam, automated usage, or attempts to disrupt the service).
• These logs may include error details, request timing, and limited context needed to investigate incidents (for example, message counts or truncated text), but we aim to avoid logging private letter content.
• We do not use third‑party advertising analytics SDKs.

How We Use Your Information

• To provide, maintain, and improve core features (chat, letter drafting, saving progress)
• To deliver AI‑assisted writing results and related in‑app experiences
• To support customer service, troubleshoot issues, and enhance performance
• To communicate service changes or important updates

AI Services and Data Processing

• To generate drafts and writing assistance, we send the necessary parts of your conversation context and prompts to our AI provider(s) via our backend
• Current provider: OpenAI (subject to change as we improve the service)
• The AI provider processes your input solely to generate outputs returned to you; their processing is governed by their own terms and policies
• We use OpenAI's API (not the consumer ChatGPT app). By default, OpenAI does not use data submitted via the API to train their models.
• We do not sell your personal information to third parties

Service Providers (Processors)

We use trusted service providers to run the App. Depending on what you use, these providers may process certain data on our behalf:

• Firebase / Google (Authentication, Firestore, and related hosting/infra)
• OpenAI (AI text generation via our backend)
• RevenueCat (subscriptions and in‑app purchase entitlement management)
• Apple App Store / Google Play (payment processing and refunds)

Data Storage

We use Firebase services (Authentication, Firestore, and related services) to authenticate users and store app data. Data is retained for as long as your account is active or as needed to provide the Service, comply with legal obligations, or resolve disputes.

Subscriptions and Payments

Some features may require a subscription or paid access level. If payments are offered through app stores, the app stores process payment information directly. We do not collect or store your full payment card details.

Data Security

We use commercially reasonable measures to protect your data, including:

• Encryption in transit: network traffic between the App and our backend services is protected using HTTPS/TLS.
• Encryption at rest (server-side): data stored in our primary database (Firebase / Google Cloud Firestore) is encrypted at rest using provider-managed encryption.

Children's Privacy

The App is intended for adults. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. If you delete your account, we will delete associated personal data within a reasonable time, subject to legal and operational retention obligations.

International Transfers

Our service providers may process data in countries other than where you live. Where required, we rely on appropriate safeguards for international transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated effective date.

Contact Us

If you have any questions or suggestions about our Privacy Policy, contact us at support@my12letters.com.