Privacy Policy
Wren is a place to write an anonymous letter and be heard by a stranger. Privacy isn’t a feature we bolted on — it’s the whole point. This policy explains, plainly, what we collect, what we don’t, and the choices you have.
The short version
- You’re anonymous. No real name, email, or password is required to use Wren.
- We don’t sell your data. Ever. There are no ads and no third-party trackers or analytics in the app.
- We collect only what the app needs to work — your letters and replies, your settings, and a notification token so we can tell you when someone answers.
- You can delete everything, any time, from inside the app.
What we collect
Your account. An anonymous account with a randomly generated handle and an anonymous ID. No name, email, or phone number is needed.
Your writing. The letters, replies, and thread messages you write; private mood check-ins and letters to your future self; and items you choose to keep — stored so the app can deliver them and show them back to you.
Your settings. Delivery time, quiet hours, notification preferences, and appearance (theme, text size).
A notification token. If you turn on notifications, we store the push token your device provides so we can send a reply alert or a gentle daily nudge. Delivered via Apple Push Notification service and Firebase Cloud Messaging (Google).
Your approximate time zone. Used to deliver letters at the hour you chose and to show crisis helplines relevant to your region. We do not collect precise location.
Optional recovery email. Only if you choose to add one, so you can move your account to a new device. You can leave it blank and remove it any time.
Safety signals. To keep people safe, letters and replies are automatically screened, and results (allowed, warned, or crisis-flagged) are stored.
Membership status. If you choose to support Wren, we store your membership tier — not your payment details. Purchases are handled by the Apple App Store / Google Play and their billing provider (RevenueCat); we never see or store your card.
What we do NOT collect or do
- No real name, contacts, photos, or precise location.
- No advertising, ad identifiers, or ad networks.
- No third-party analytics or behavioral trackers.
- We never sell, rent, or trade your data.
- We never read your letters to profile you or train models on your content.
How your information is used
Only to run Wren: deliver your letter to a few readers, deliver replies back to you, notify you, keep the community safe (moderation and crisis resources), remember your settings, and — if you’re a member — unlock the extras. Nothing else.
Crisis resources
When a letter shows signs of crisis, Wren immediately shows real, human-run helplines (e.g. 988 in the US). These are third-party services listed for your benefit; tapping one opens their site or dialer. They are never operated by Wren and never by AI, and reaching out never affects your letters.
Who can see your letters
Other users see a letter only when it’s delivered to them anonymously, or within a thread you both joined. Wren staff do not browse letters; letter content is visible to us only through safety gates — a report, a crisis flag, or a release check on wrongly-blocked letters — and those views are logged.
Sharing
We share data only with the service providers that make the app run: our backend host (Supabase), push delivery (Apple / Google Firebase), email delivery for recovery codes (Resend), and purchase processing (Apple / Google / RevenueCat). They process data on our behalf under their own terms; we don’t share your data with anyone for advertising.
Data retention & deletion
Letters and replies are kept as long as your account exists — Wren never auto-deletes your words. You can delete individual letters, or your entire account and all its content, at any time from inside the app. Deletion is immediate and free.
Children
Wren is for adults. You must be 18 or older to use it, and we ask you to confirm this before you begin. Wren is not directed to children, and we don’t knowingly collect data from anyone under 18.
Security
Data is encrypted in transit (HTTPS/TLS) and stored on managed infrastructure with access controls. No system is perfectly secure, but we keep the data we hold minimal on purpose — the less we collect, the less there is to protect.
Your choices
- Use the app fully without an email or any identifying detail.
- Turn notifications on or off; set quiet hours.
- Add or remove a recovery email at any time.
- Export your data, or delete everything, from inside the app.
Changes
If we change this policy, we’ll update the effective date and, for material changes, note it in the app.
Contact
Questions or requests: hello@wrenletters.com.