Your small days belong to you.

2026-10-16-pilot-2

On your device

Habits, notes, personal postcards, monthly letters, stamp albums and saved Pals history stay encrypted on your device. Aposa never receives the text of your personal writing.

Your own backup

Your encrypted backup belongs in your own iCloud or Google Drive account. Aposa does not host the backup or hold its encryption keys. Cloud storage and key recovery depend on your chosen Apple or Google account and the backup mode you select. If the required recovery key is lost, Aposa cannot reset it.

When you connect

Sign-in creates a minimal account identity and secure sessions. Pals stores your connections, first name, optional shared streak number and the public encryption keys needed for sealed letters. Your phone computes the streak; writing dates and text are not uploaded.

Nudges and buddy stickers are allowlisted gestures, removed after the receiving app confirms delivery or after seven days. Pal letters are end-to-end encrypted on the sending device. The server holds only the sealed envelope and delivery timing, removes the envelope after the recipient confirms encrypted local receipt, and expires undelivered envelopes seven days after the due time. Content-free IDs and hashes may remain for 30 days after the due time to prevent duplicate sends.

Push notifications contain generic text and opaque IDs. They do not contain your writing, streak number, name or invitation code. Push registration tokens and short-lived delivery receipts enable delivery through Expo, Apple and Google.

Your choices

Streak sharing is on for your chosen Pals by default and can be turned off. Analytics and marketing choices are separate and off by default. You can withdraw either optional choice in Settings. No analytics or marketing collection is enabled merely by storing your declaration.

Consent receipts record your account ID, policy versions, server time, country, app version, age affirmation and the minimum age that applied. The pilot requires age 18 or older in India, the digital-consent age of your country in the EEA and the UK (13 to 16), and 16 or older everywhere else; this is the pilot eligibility rule, not a claim about every jurisdiction’s legal minimum.

You can remove, block or report a pal. Reports contain only a reason you choose, expire after 30 days, and never automatically copy your private writing. You can export your account data and request deletion. Account recovery has a 30-day window. Your own cloud backup remains unless you choose to delete it too.