PRIVACY POLICY

Last updated May 14, 2026

This Privacy Notice for Letters to Beyond LLC ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at http://www.letterstobeyond.com or any website of ours that links to this Privacy Notice
• Download and use our mobile application (Letters to Beyond) or any other application of ours that links to this Privacy Notice
• Use Letters to Beyond. Letters to Beyond is a private mobile application for writing letters, voice notes, and journal entries to people who have died. Users create profiles for loved ones they have lost and write to them in their own time.
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice. You can find more details about any of these topics by clicking the link following each key point or by using our table of contents below.

What personal information do we process? When you use our Services, we process limited personal information, primarily your email address (received via Sign in with Apple) and the content you create within the app (letters, voice notes, and photos).

Do we process any sensitive personal information? We do not process sensitive personal information as defined by privacy laws.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide and improve our Services, communicate with you, ensure security, and comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We share information only with service providers necessary to operate the app, including Apple (for authentication), Supabase (for cloud infrastructure), and Google (for our business email).

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission or storage can be guaranteed 100% secure.

What are your rights? Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information.

How do you exercise your rights? The easiest way is by contacting us at [email protected]. We will consider and act upon any request in accordance with applicable data protection laws.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
7. HOW LONG DO WE KEEP YOUR INFORMATION?
8. HOW DO WE KEEP YOUR INFORMATION SAFE?
9. DO WE COLLECT INFORMATION FROM MINORS?
10. WHAT ARE YOUR PRIVACY RIGHTS?
11. CONTROLS FOR DO-NOT-TRACK FEATURES
12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
13. OUR SPECIFIC COMMITMENTS TO YOU
14. DO WE MAKE UPDATES TO THIS NOTICE?
15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include:

• Email addresses (received via Sign in with Apple)

User-Generated Content. When you use our Services, you create and store content within the app, including:

• Letters written to people you have lost
• Voice recordings (voice notes)
• Photos you choose to upload as profile pictures
• Profile information about deceased loved ones (such as their name and a brief description)

This content is stored privately and is accessible only to you. We do not read, review, or use this content for any purpose other than providing the Services to you.

Sensitive Information. We do not process sensitive information as defined by privacy laws. While the content you create may contain deeply personal thoughts and emotions, this user-generated content is voluntarily created by you and is not "sensitive personal information" in the regulatory sense.

Information automatically collected

In Short: Some information — such as your IP address and basic device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, device model, operating system, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.

Application Data

If you use our application, we may also collect the following information if you choose to provide us with access or permission:

• Mobile Device Access. We may request access or permission to certain features from your mobile device, including the microphone (for recording voice notes), camera, and photo library (for uploading profile photos). If you wish to change our access or permissions, you may do so in your device's settings.
• Mobile Device Data. We automatically collect basic technical device information such as device model, operating system version, and IP address. This information is used to maintain the security and operation of our application and for troubleshooting.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for the following reasons:

• To facilitate account creation and authentication and otherwise manage user accounts. We process your information so you can create and log in to your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to the user. We process your information to provide you with the requested service, including storing and providing access to the content you create within the app.
• To respond to user inquiries and offer support to users. We may process your information to respond to your inquiries and resolve any potential issues you might have with our Services.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.
• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interest, such as to prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. We may rely on the following legal bases:

• Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms, such as diagnosing problems and preventing fraudulent activities.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information only with service providers necessary to operate our Services, and in specific limited situations described below.

We may share your personal information in the following situations:

Service Providers. We share information with third-party service providers that perform services for us or on our behalf, including:

• Apple, Inc. — for authentication via Sign in with Apple and for App Store distribution
• Supabase, Inc. — for cloud database and storage infrastructure (Supabase is hosted on Amazon Web Services)
• Google LLC — for our business email service through Google Workspace

These service providers have access to information only as needed to perform their functions and are contractually obligated to maintain the confidentiality and security of that information.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Legal Obligations. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, judicial proceedings, court orders, or legal processes.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using your Apple ID, we may have access to certain limited information about you.

Our Services offer you the ability to register and log in using your Apple ID through Sign in with Apple. When you choose to do this, we receive a unique identifier and an email address — which may be Apple's relay email rather than your real email address, depending on your selection during sign-in.

We use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by Apple. We recommend that you review Apple's privacy policy to understand how they collect, use, and share your personal information, and how you can manage your Apple ID privacy preferences.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. Regardless of your location, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information (see "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" above), including facilities in the United States and other countries.

If you are a resident in the Europe