Privacy

DaakMe is for writing letters to one person at a time. This page says what the app keeps, who can read it and how to remove it, in plain words. Last updated 9 October 2026.

The short version

You sign in with your phone number, Apple or Google, so your letters are yours and follow you to a new phone.
Only you and the person you write to can open a letter in DaakMe. It is not end-to-end encrypted yet: it is stored encrypted on our server, and the server decides who may read it.
Notifications, widgets and the Lock Screen never show the words of a letter, and show names only if you turn that on.
No ads. We never sell or share your data for advertising.
Anonymous usage statistics are off unless you say yes. Crash reports carry no names and no letter text.
You can delete your account in the app, any time.

What the app keeps

Your account. A random account id. If you sign in with your phone number, that number (used only to sign you in; nobody else sees it and we never message you anything but the sign-in code). If you sign in with Apple or Google, the name and email they share with us (with Apple you can hide your email).
Your profile. The name you sign letters with, your Daak ID, your home city, your wax seal's initials and colour, and if you add them: a photo for your stamp, a line about you, your birthday (and whether friends may see the day) and the languages you write in. Your stamp photo can be seen by anyone with your Daak ID.
Letters. Who a letter is for (their name, and their city or Daak ID), its words, the paper, any marigold keepsake, the day it should arrive and its made-up postal journey. Letters are stored on our server so they can travel and arrive. A photo you tuck into a letter travels with it, stored privately: only you and the person it is for can see it, once it arrives.
Stamps and milestones you collect.
For notifications, your phone's push token, whether notifications are on, and the app version.

Kept only on your phone, never sent to us: your drafts, the list of people you write to and their birthdays and other days, your sound, haptics and animation settings, and whether the Face ID lock is on (Face ID itself stays with your phone; DaakMe only learns yes or no). The app never reads your contacts or your location.

Who can read a letter

You, and the person it is for: in the app, or through the link you send them. Before it arrives, the link shows only the envelope and the journey. Letters are encrypted at rest on our server. They are not end-to-end encrypted yet, so the database can technically be read by the people who run DaakMe; we do not read letters, and access is limited to keeping the service running, checking a report you send us, or when the law requires it. When we add sealing on your phone, this page will say so.

Services we use

Supabase (servers in Mumbai, India): accounts, letters and stamps.
Vercel: the web pages at daakme.com/readletter and go.daakme.com for people without the app.
Apple and Google: sign-in, if you choose it, and Apple's push service for notifications.
Twilio (United States), if you sign in with your phone number: it sends the six-digit code by text message or WhatsApp and checks it. It receives your number only.
Sentry (United States): crash reports. They contain the app version, the phone model and what went wrong in the code; never your name, email, account id, IP address, anything you typed or a screenshot.
PostHog (European Union), only if you say yes to "Help make DaakMe better?": about fifteen anonymous events such as "a letter was posted", with a random id that is not linked to your account. Never names, cities you type or words. Turn it off any time in Settings › Privacy.

Notifications

If you allow them, DaakMe tells you when a letter arrives. By default they say only "A letter has arrived". You can choose to show who it is from in Settings › Notifications, and turn them off there too. Never the words.

How long we keep it, and deleting

We keep your account and letters while you use DaakMe. Delete your account in the app (tap your stamp on Home, then Settings › Delete my account) or ask us through daakme.com/contact: your profile, devices, stamps and milestones are removed at once. Letters you already sent stay with the people who received them, and letters sent to you stay with the people who wrote them, no longer linked to you: a letter belongs to both people. Crash reports are kept by Sentry for 30 days; anonymous usage events are kept by PostHog for up to a year.

Children

DaakMe is not meant for children under 13.

Your choices and rights

You can see and change your profile in the app, turn off notifications and anonymous usage, and delete your account. To ask for a copy of your data, a correction or anything else, write to us through daakme.com/contact.

Changes

If this changes in a way that matters, we will update this page and say so in the app.