Privacy Policy

When you create an account we collect your name, email address, and a hashed password. If you complete onboarding, we store your date of birth, a short bio, and an optional profile photo.

When you write a message we store the subject, the message content, an optional video URL, an optional story, the delivery date, and the email addresses you provide (recipient, backup, next of kin). We also store metadata like the date the message was created and its delivery status.

We do not collect payment card details. Payments are processed by our payment provider and we receive only a confirmation token.

We use your data to deliver your message to the right inbox on the date you chose. That is the primary purpose. We also send you a confirmation email when you write a message, and a transactional email if anything goes wrong with delivery.

We do not use your message content for advertising, training AI models, or any purpose other than delivering it.

Nobody at DearTomorrowMe reads your messages. Messages are stored encrypted at rest. Access to the database is restricted and only permitted under documented incident conditions.

Your message content is never shown to any other user, never indexed by search engines, and never shared with third parties.

We use Firebase (Google) for authentication and database storage. We use Cloudinary for video and image storage. We use Resend for email delivery. We use Inngest for scheduled job processing. Each of these providers has their own privacy policy and we share only the minimum data needed for each service to function.

Your account data is retained for as long as your account is active. If you delete your account, your personal data and all message content are deleted within 30 days.

Confirmed and scheduled messages are retained until delivered, then kept for 90 days after delivery before being permanently deleted. Messages that were never confirmed are automatically deleted after 24 hours.