Privacy Notice

What we collect and why

• Account details — your email address, password (stored hashed) and display name, to create and secure your account. Legal basis: performing our contract with you.
• Explorer profiles — the first name, age and interests you enter for each child, used solely to personalise their letters and Membership pages. We ask for nothing more, and you may use a nickname. Legal basis: performing our contract, entered by you as the parent or guardian.
• Letters you generate — the letters, Membership pages and photo albums saved to your Letter Shelf so you can revisit, compare and reprint them.
• Messages you send us — your name, email and the content of any support message, used to answer you. Legal basis: legitimate interest in supporting customers.
• Technical and security data — sign-in events, IP address and basic request logs, used to keep accounts secure and prevent abuse. Legal basis: legitimate interest in security.
• Subscription status — plan, status and renewal date, so we know what your account can access. Legal basis: performing our contract.

Card and billing details are collected and held by our payment provider, not by us. We never see your full card number.

How letters are generated

To write each letter, the child's first name, age and interests are sent to an AI text provider that generates the letter and Membership pages. That information is used to produce your content, is not used to identify the child, and we do not permit it to be used to train public models. Destination photographs are retrieved from a stock photography service using only the destination name.

Who we share information with

• Hosting, database and authentication providers who run the service for us.
• AI text-generation and stock photography providers, as described above.
• Stripe, our payment processor, for card payments, subscription billing, invoicing and tax calculation.
• Professional advisers such as accountants or lawyers, where necessary.
• Authorities where we are legally required to disclose.

We do not sell personal information and we do not advertise to children.

How long we keep it

Account details, explorer profiles and letters are kept for as long as your account is open. Delete an explorer and their profile and letters go with it. Close your account and we delete your data within 30 days, except records we must keep for tax and accounting. Support messages are kept for two years.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw consent where we relied on it. Much of this you can do yourself from your Letter Shelf. Write to us through the contact page and we'll respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority. Where data is processed outside your region, we rely on appropriate safeguards such as standard contractual clauses.

Security and cookies

Data is encrypted in transit and at rest, access is restricted, and each account can only read its own records. We use essential cookies and local storage to keep you signed in and to process payments. We do not use advertising or tracking cookies, so there is nothing to opt out of — clearing your browser storage signs you out.