Privacy Policy

Effective date: 22 June 2026 update to your real publish date

Reunite is a digital time capsule. You write a letter to your future self, choose a day at least fifteen days away, and seal it. On that day, the letter comes back to you as an email. This page explains, in plain language, what information we hold, why, and what control you have over it.

We have tried to write this the way the app itself is built: quietly, honestly, and without tricks. Where we cannot make a promise, we say so plainly — including the important point that your letters are not end-to-end encrypted (see “An honest note about encryption” below).

Who we are

Reunite is operated by Shanghai Youzhuoqu Cultural Innovation Co., Ltd. (上海有拙趣文化创意有限公司), a company registered in China (“Reunite”, “we”, “us”, “our”). We are the data controller responsible for the personal information described here.

What we collect

We deliberately collect as little as possible. We do not collect your precise location, your contacts, advertising identifiers, or any behavioral analytics, and we do not track you across other apps or websites.

WhatWhat it isWhy we have it
Email addressThe address you sign in withIt is both your account login (we use a one-time passcode — a short code emailed to you instead of a password) and the address your sealed letter is delivered to on its future date.
Your letterThe text you write; and, on paid media tiers, up to four photos and one short video you attachThis is the content of your time capsule. We store it so we can deliver it back to you on the day you chose.
Purchase recordsA record that a seal was paid forTo unlock sealing and to honor your purchase. Payments themselves are handled by Apple (and, later, Google).

We do not ask for your name. The only personal identifier we require is your email address.

Why we use it, and our legal bases

We use your information only to run the core promise of the app: to sign you in securely; to store your sealed letter until its delivery date; to deliver it to your inbox on that date with a link to a web “reveal” page; to process your in-app purchase; and to respond to you if you contact us.

For people in the EU/UK, our legal bases under the GDPR are performance of a contract (storing and delivering your letter), legitimate interests (keeping the service secure and preventing abuse), and legal obligation (minimal records the law requires). We do not use your information for advertising, profiling, or to sell to anyone.

Who we share information with (our sub-processors)

We do not sell or rent your personal information, and we do not share it for advertising. We use a small number of trusted service providers to run the app. Each only handles what it needs to:

ProviderWhat it doesWhat it handles
SupabaseDatabase, login, and file storageYour account, your letter text, and any attached photos/video
ResendSends our emailsYour email address, to send login codes and the delivery (“reveal”) email
VercelWeb hostingServes the web reveal page and this privacy policy
Apple / Google + RevenueCatProcess in-app purchasesPurchase transactions; RevenueCat is our purchase-infrastructure provider

These providers operate global cloud infrastructure and may process data in regions outside your own country (see “International transfers”).

An honest note about encryption

This is the one point we most want to be straight about.

Your letter is encrypted in transit (while it travels over the internet) and encrypted at rest (while it sits in our storage). But your letter is not end-to-end encrypted. End-to-end encryption would mean even we could never read it. We cannot honestly claim that — because the whole point of Reunite is that, on your chosen day, our system must read your letter to email it back to you.

We promise this in return: we access stored letters only to operate and protect the service (for example, to deliver them or fix a delivery problem). We never read your letters to advertise, profile, train models, or sell. We keep staff access tightly limited. We would rather tell you this plainly than dress it up as something it isn’t.

How long we keep your information

Account deletion and your choices

You can delete your account at any time, from inside the app (and via a web deletion page add the public web deletion URL once built).

Please read this carefully, because it cannot be undone: deleting your account permanently cancels every letter you have sealed but not yet received. Those letters will never be delivered. Deletion also removes your stored account data and letter content from our systems. (Letters already delivered remain in your own email inbox, because that copy belongs to you.)

Your rights

If you are in the EU, the UK, or a similar region (GDPR)

You have the right to access, correct, delete (“right to be forgotten”), restrict or object to processing, data portability, withdraw consent where we relied on it, and to complain to your local data-protection authority. To exercise any of these, email privacy@dearfuture.space. We respond within the time the law requires (generally one month under the GDPR).

If you are in California (CCPA / CPRA)

You have the right to know what we collect and how we use it, to request a copy, to request deletion, and to correct it — and not to be treated differently for exercising these rights. We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising. We never have.

Children

Reunite is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in the EU). If you believe a child has given us their information, please contact us and we will delete it.

International transfers

We are based in China, and our service providers run global cloud infrastructure. As a result, your information may be processed in countries other than the one you live in — for example, in the United States or the European Union, depending on where our storage and email providers operate confirm your Supabase data region and name it here. Wherever your information is processed, this policy continues to apply, and we use providers that offer recognized safeguards for international transfers.

Security

We protect your information with encryption in transit and at rest, tightly limited staff access, and login by one-time passcode (so there is no password for an attacker to steal). No system is perfectly secure, but we keep what we collect small on purpose — the less we hold, the less there is to protect.

Changes to this policy

If we change this policy, we will update the “Effective date” at the top, and for any significant change we will give reasonable notice (for example, in the app or by email). Continuing to use Reunite after a change means you accept the updated policy.

Contact

Shanghai Youzhuoqu Cultural Innovation Co., Ltd. (上海有拙趣文化创意有限公司)
Email: privacy@dearfuture.space create this inbox
Address: Building 4, No.686 Nanfeng Road, Fengcheng Town, Fengxian District, Shanghai 200000, China mainland