1. Who We Are
My Tiny Letter is a mobile app and website that helps parents write and preserve personal letters and memories for their baby. We are based in the United Kingdom. If you have any questions about this policy, contact us at contact@mytinyletter.com.
2. What Data We Collect
We collect only what we need to run the App. That breaks down into three simple categories.
2.1 Account Information
When you create an account, we use a standard authentication protocol. Your password is stored securely using industry-standard hashing and we never have access to it in plain text. We also collect basic personalisation details you choose to provide, such as your preferred language, your role (for example, mother, father, or carer), and your baby's name and due or birth date. This information is used solely to operate your account and personalise your experience.
2.2 Content You Create
The letters, notes, photographs, and voice recordings you save in the App are stored securely and are yours. When you use an AI Studio Feature (Memory Story, Artistic Print, Lullaby), we process the text and preferences you provide to generate that content. The AI-generated output is then stored in your account.
2.3 Technical Data
We automatically collect basic technical information when you use the App such as your device type, app version, and session activity. This is used only to keep the App working, fix bugs, and improve performance. It is not used for advertising.
3. How We Use Your Data
We use the data we collect to:
- create and maintain your account;
- deliver the features you request, including AI-generated content;
- store and display your letters and memories;
- manage your Points balance and process refunds where needed;
- send you transactional messages (for example, when your lullaby is ready);
- keep the App secure and fix technical issues;
- comply with our legal obligations.
We do not use your data for advertising. We do not sell your data to anyone.
4. Legal Basis for Processing
We process your data because it is necessary to provide the service you signed up for (contract performance), because you have given us consent where required, and where we have a legitimate interest in keeping the App secure and functional. We retain financial transaction records to comply with UK tax law.
5. Who We Share Your Data With
We do not sell or share your personal data with third parties for their own purposes. To operate the App, we work with a small number of trusted service providers:
- A cloud infrastructure provider hosts your data securely in the United Kingdom.
- Microsoft Azure OpenAI Service (operated by Microsoft) processes the text inputs you submit when using AI Studio Features to generate your stories and lullabies. Microsoft or OpenAI does not use your inputs to train AI models and applies data protection standards that meet or exceed our own privacy commitments.
- Payments are handled by the app store platform you use to download the App (Apple or Google). We receive only a confirmation that a transaction took place - not your card details.
We may also disclose data if required to do so by law or valid legal process.
6. International Transfers
Most of your data stays in the UK (Azure UK South). In some cases, data may be processed within the European Economic Area or the United States for platform support purposes. Where transfers occur outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses.
7. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Account and profile data | Life of account, deleted within 30 days of closure |
| Content you create (letters, photos) | Life of account, deleted within 30 days of closure |
| AI-generated content | Life of account, deleted within 30 days of closure |
| Points transaction history | 7 years (UK tax records obligation) |
| Technical and usage logs | 90 days |
| Support correspondence | 3 years from last message |
| Shared link access logs | 12 months |
8. Your Rights
Wherever you are, you have the right to access, correct, or delete the personal data we hold about you. You can also ask us to restrict how we use it, or to provide it to you in a portable format. Where we rely on consent, you can withdraw it at any time.
Two rights are available directly inside the app without needing to contact us:
- Delete your account: go to Settings and tap Delete Account. This permanently removes all your data after a 14-day grace period during which you can cancel.
- Withdraw AI consent: go to Settings and tap AI Terms. Withdrawing consent means your data will no longer be sent to Microsoft Azure OpenAI Service for content generation.
To exercise any other right (access, correction, restriction, or portability), email us at contact@mytinyletter.com. We will respond within one month.
If you are in the UK, you can also complain to the Information Commissioner's Office at ico.org.uk.
If you are in the EU, you can contact your national data protection authority (listed at edpb.europa.eu).
9. Security
All stored content is encrypted at rest. All data in transit is protected by TLS 1.2 or higher. Access to your data is restricted to the systems and staff that need it to provide the service. If you think your account has been compromised, contact us immediately.
10. Children
The App is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. The baby details you provide (name, date of birth) are part of your account as the adult user — your baby is not a user of the App.
11. Cookies
The mobile App does not use cookies. Our website uses only essential cookies needed for it to function. We will ask for your consent before setting any non-essential cookies.
12. Changes to This Policy
We may update this Policy from time to time. We will notify you of any material changes by in-app notification or email at least 14 days before they take effect. The date at the top of this page shows when it was last updated.
13. Contact
This Privacy Policy was last updated on 25 June 2026. It supersedes all previous versions.
© 2026 My Tiny Letter. All rights reserved.