Privacy Policy

This policy explains what DearFutureMe (“we”, “us”) collects when you use the website or an event booth, why we collect it, and what you can do about it. We follow the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. We also give everyone the rights that the EU General Data Protection Regulation (GDPR) gives, wherever they live.

What we collect

• Your email address. This is where your letter and receipt are sent. If you sign in, it's also your account login.
• Your letter. The subject, the text, and any optional tag you choose.
• Delivery details. The date you picked, when you wrote the letter, and whether it has been sent.
• Your consent. The date and time you agreed to these terms and which version you agreed to.
• Where you wrote it. If you wrote at an event, which event and which booth device were used, so staff can stop abuse from a specific device.
• Basic technical logs. Error messages, delivery status from our email provider, and short-lived security records used for rate limits. Logs never contain your letter text and never contain your full email address.

What we don't collect or do

• We don't read your letters, and we don't sell, rent or share your data with advertisers.
• We don't use advertising, analytics or tracking cookies, and there are no third-party trackers on the site.
• We don't send newsletters or marketing. The only emails you get are your receipt, a sign-in or confirmation link if you ask for one, and the letter itself.

Why we collect it

Only to store your letter and deliver it on the date you chose, to let you manage it, and to keep the service safe from spam and abuse. We rely on your consent, which you give with the checkbox before scheduling, and on what's needed to provide the service you asked for.

How your letters are protected

• Encryption at rest. Your letter is encrypted with AES-256-GCM before it is saved. The key is kept in a separate secret store, not in the database.
• When a letter is decrypted. Only when it's being emailed to you, or when you open it yourself while signed in (and only if you didn't seal it shut).
• Access control. Each account can only see its own letters, and this is enforced inside the database itself. Our admin tools show delivery counts and errors, never letter content.
• Event staff see how many letters were written at their booth. They never see letter content or email addresses.
• Honest limits. This is not end-to-end encryption. Our sending service has to decrypt the letter in order to email it, and email itself isn't private once it reaches your inbox provider.

Who processes data for us

We use a small number of service providers. Each one only gets what it needs:

• Supabase runs our database, sign-in and the server functions that encrypt and send letters. It stores your email address, encrypted letters and delivery details.
• Resend, with Brevo as a backup, sends our emails. Each email (with its recipient address and contents) passes through them at the moment it's sent.
• Cloudflare hosts the website and runs Turnstile, a privacy-friendly bot check. It processes your IP address and basic browser information to serve pages and tell people from bots.
• GitHub stores our encrypted weekly database backups. Letters in those backups are still encrypted.

Some of these providers process data outside the Philippines. We choose providers that protect data under contracts and recognised safeguards.

How long we keep things

• Scheduled letters are kept until they're delivered, cancelled or deleted.
• Delivered letters, if you have an account, stay in your Opened archive until you delete them. Letters written without an account are deleted 90 days after delivery.
• Cancelled or deleted letters and deleted accounts are removed from the live database straight away and from backups within 30 days.
• Security and rate-limit records are deleted within 7 days. Delivery logs (without content) are kept for 12 months so we can investigate failed deliveries.
• If you used “This wasn't me” or unsubscribe, we keep a scrambled (hashed) copy of your address so we can keep honouring that request.

Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your data is used (this page);
• access your data and get a copy of it;
• object to processing and withdraw consent at any time;
• correct inaccurate data, such as your email address;
• erasure or blocking of your data;
• data portability, a copy in a format you can take elsewhere;
• damages if your data is misused; and
• file a complaint with the National Privacy Commission (privacy.gov.ph).

If you're outside the Philippines, you also have the GDPR-style rights to restrict processing and to complain to your local data protection authority.

How to use them: signed-in users can download all their data as a file and delete their account from Settings. Anyone can cancel a letter from the receipt email. For anything else, email faminidenice@gmail.com. We reply within 15 days. We may ask you to confirm the request from the email address involved, to make sure it's really you.

Withdrawing consent cancels any letters still waiting to be delivered, since we can't deliver them without your data.

Age

DearFutureMe is for people aged 13 and older. If you're under 18, or under the age of digital consent where you live, please ask a parent or guardian before you use it. If you think a younger child has used the service, email us and we'll delete their data.

Cookies and storage

We only use storage the site needs to work: staying signed in, keeping a draft safe on your own device, and remembering light or dark mode. See the Cookie notice. On shared booth devices, nothing you write is stored on the device.

Security incidents

If you think your data or a letter has been exposed, or you've found a security problem, email faminidenice@gmail.com with “Security” in the subject. If a breach puts your data at real risk, we'll notify the National Privacy Commission and the people affected within 72 hours of finding out, as the law requires.

Changes to this policy

If we change this policy in a way that matters, we'll update the date at the top and ask for your consent again before your next letter is scheduled. Letters already scheduled stay covered by the version you agreed to, unless the law requires otherwise.

Contact

Data protection contact for DearFutureMe: faminidenice@gmail.com