12 Letters App Privacy Policy

Introduction

Welcome to 12 Letters ("the App"). This Privacy Policy explains what information we collect, how we use it, and your rights when using our mobile application.

Who We Are

12 Letters is the operator of the App. If you have questions or requests about privacy, contact us at support@my12letters.com.

Information We Collect

Account Information

• If you create an account: your email address and an account identifier
• If you use the App without creating an account: an anonymous account identifier
• If you sign in with Google or Apple, we receive an account identifier and your email address. If you sign in with Google, we also receive your name. We do not receive your password.

Content You Provide

• Conversation transcripts and messages you exchange with the in‑app assistant
• Drafts and finalized letters you create
• Per-letter progress, status flags, timestamps, and related metadata

Microphone and Speech Recognition

• If you choose to use voice input, we will request access to your device microphone.
• Voice input uses your device's built-in speech recognition to convert your speech to text.

Photo Library (Export)

• If you choose to export letters or media, we may request access to your photo library to save the exported content.
• We only access your photo library when you explicitly choose an export action.

Usage and Diagnostic Logs

• We monitor technical logs to keep the service reliable, diagnose errors, and detect abuse (for example, spam, automated usage, or attempts to disrupt the service).
• These logs may include error details, request timing, and limited context needed to investigate incidents, but we aim to avoid logging unnecessary content.
• We do not use third-party advertising or analytics services.

Safety Checks and Actions

To investigate safety decisions and misuse, we keep a limited record of safety checks and actions, including dates, categories, outcomes and a coded account identifier. These records contain no message or letter text. We schedule them for automatic deletion 90 days after each event; deletion may complete later. If you delete your account first, we remove your direct account ID from these records. The coded records remain until expiry, and backup copies remain until their normal expiry.

How We Use Your Information

• To provide, maintain, and improve core features (chat, letter drafting, saving progress)
• To deliver AI‑assisted writing results and related in‑app experiences
• To support customer service, troubleshoot issues, and enhance performance
• To communicate service changes or important updates

AI Services and Data Processing

• To generate drafts and writing assistance, we send the necessary parts of your conversation to our AI service provider
• We may change our AI service provider as we improve the service
• The messages you send in a conversation also pass through our AI service provider's automated safety check before the assistant replies
• The AI provider processes your input solely to generate outputs returned to you and to run that safety check; its processing is governed by its own terms and policies
• By default, the provider does not use this information to train its models.
• We do not sell your personal information to third parties

Service Providers (Processors)

We use trusted service providers to run the App. Depending on what you use, these providers may process certain data on our behalf:

• Cloud hosting and authentication
• Our AI service provider (AI text generation and automated safety checks)
• Purchase processing (subscriptions and in-app purchase access)
• Apple App Store / Google Play (payment processing and refunds)

Data Storage

We use a cloud hosting provider to authenticate users and store app data. Data is retained for as long as your account is active or as needed to provide the Service, comply with legal obligations, or resolve disputes.

Subscriptions and Payments

Some features may require a subscription or paid access level. In Twelve Letters, subscription plans include Daily Letters access while active plus recurring monthly credits. If payments are offered through app stores, the app stores process payment information directly. We do not collect or store your full payment card details.

Data Security

We use commercially reasonable measures to protect your data, including:

• Encryption in transit: information sent between the App and our servers is encrypted.
• Encryption at rest (server-side): information we store is encrypted.

Children's Privacy

The App is intended for adults. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us. If you delete your account, we will delete associated personal data within a reasonable time, subject to legal and operational retention obligations. After deletion, we keep a record that the deletion took place. We also keep records of when you turned AI features on or off, with their dates, the version of the wording, and the app version and platform you used. These contain none of your content. We keep purchase and credit records, which do not include your name, email address or content. If your account has an email address, we keep an irreversible hashed version of it, used to prevent repeated claims of free credits.

International Transfers

Our service providers may process data in countries other than where you live. Where required, we rely on appropriate safeguards for international transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated effective date.

Contact Us

If you have any questions or suggestions about our Privacy Policy, contact us at support@my12letters.com.