Your small days belong to you.

Backup recovery wording updated 20 October 2026. Pal letter retention wording updated 21 October 2026. Read the original pilot policy snapshot.

On your device

Habits, notes, personal postcards, monthly letters, stamp albums and saved Pals history stay encrypted on your device. Aposa never receives the text of your personal writing.

Your own backup

Your encrypted backup belongs in your own iCloud or Google Drive account. Aposa never holds backup content. By default, Aposa holds an encrypted copy of your backup key so you can restore on a new phone after signing in with the same linked Apple or Google account. You can switch to end-to-end encrypted backup to opt out and delete Aposa's encrypted copy of the key. In that mode, keep your recovery password or key safe: Aposa cannot recover it if it is lost.

When you connect

Sign-in creates a minimal account identity and secure sessions. Pals stores your connections, first name, optional shared streak number and the public encryption keys needed for sealed letters. Your phone computes the streak; writing dates and text are not uploaded.

Nudges and buddy stickers are removed after the receiving app confirms delivery or after seven days. Pal letters are end-to-end encrypted on your phone. We may hold a sealed Pal letter’s encrypted envelope on our server until its opening date, up to one year, and then for up to seven days for your Pal to collect it. We remove the envelope sooner when their app confirms it is safely saved, or when the letter is cancelled. Content-free IDs and hashes may remain for 30 days after the opening date to prevent duplicate sends.

Push notifications contain generic text and opaque IDs. They do not contain your writing, streak number, name or invitation code. Push registration tokens and short-lived delivery receipts enable delivery through Expo, Apple and Google.

Your choices

Streak sharing is on for your chosen Pals by default and can be turned off. Analytics and marketing choices are separate and off by default. You can withdraw either optional choice in Settings. No analytics or marketing collection is enabled merely by storing your declaration.

Consent receipts record your account ID, policy versions, server time, country, app version, age affirmation and the minimum age that applied. The pilot requires age 18 or older in India, the digital-consent age of your country in the EEA and the UK (13 to 16), and 16 or older everywhere else; this is the pilot eligibility rule, not a claim about every jurisdiction’s legal minimum.

You can remove, block or report a pal. Reports contain only a reason you choose, expire after 30 days, and never automatically copy your private writing. You can export your account data and request deletion. Account recovery has a 30-day window. Your own cloud backup remains unless you choose to delete it too.

Contact and account deletion

For help or a privacy request, email contact@argentnexuscommunications.com. See Delete account for instructions, the recovery window and data retention details.