Effective 17 September 2026
Unsent is built so that we know as little about you as possible. There is no account, no email address, no name and no password.
Every letter, the people you write to, your quiz answers and your reminder preferences are stored only on your device. They are never uploaded, and we cannot read them.
Purchases. Subscriptions are processed by Apple. We use RevenueCat to check whether a subscription is active; RevenueCat receives an anonymous app-user identifier and Apple's receipt data, under its own privacy policy. We never see your payment details.
Usage analytics. The app sends anonymous events such as "letter saved" or "paywall shown", with no letter text and no identity, to PostHog (servers in the EU) so we can see which screens work. These events are keyed to a random identifier and are not used to track you across apps or websites.
Sharing. When you share a letter as an image, the image is created on your phone and handed to the app you choose. We never receive it.
Notifications. Reminders are scheduled locally on your device. We do not run a push server.
We do not sell data, run third-party advertising SDKs, track you across apps, or read anything you write.
Deleting the app removes everything. There is nothing stored on our side to delete.
Unsent is rated 12+ on the App Store and is not intended for anyone under 13.
We will post updates to this page and change the effective date above.