Privacy Policy

Last updated: April 17, 2026

Your privacy is foundational to everything we build at Sealed. This policy explains what information we collect, how we use it, and the controls you have over it. We will never sell your data or use your message content for advertising.

1. Information We Collect

Account information: Your name, email address, and password (stored as a secure hash) when you create an account. If you sign in with Google, we receive your name and email from Google.

Message content: Text, audio, and video messages you create, along with their delivery conditions and designated recipients. This content is encrypted at rest using AES-256.

Recipient information: Names and contact details (email or phone) of people you designate to receive messages.

Usage data: Log data such as IP addresses, browser type, pages visited, and timestamps. This helps us maintain security and improve the Service.

2. How We Use Your Information

To operate and deliver the Service as you configured it
To authenticate your identity and secure your account
To send transactional emails (account verification, check-in reminders, delivery notifications)
To respond to support requests
To detect and prevent fraud or abuse
To comply with legal obligations

We do not use your message content for advertising, analytics, or any purpose beyond delivering the message to your intended recipient.

3. Message Encryption

All message content is encrypted at rest using AES-256 and transmitted over TLS. Our team cannot read your message content. Encryption keys are managed separately from message data. In the event of a data breach, your message content would remain unreadable.

4. Sharing Your Information

We do not sell your data. We share information only in the following circumstances:

With recipients: When delivery conditions are met, your designated recipients receive your message.
With service providers: We use trusted third-party services for infrastructure, email delivery, and payment processing. These providers are contractually bound to handle data securely and only for their designated purpose.
For legal compliance: We may disclose information if required by law, court order, or to protect the safety of users or the public.

5. Data Retention

Your account and messages are retained for as long as your account is active and your delivery conditions have not yet been met. Once a message is delivered, it is retained for 30 days to allow recipients to re-access it, then permanently deleted. If you delete your account, all associated data is permanently deleted within 30 days.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Request a portable copy of your data

To exercise these rights, contact us at privacy@sealed.ink.

7. Cookies

We use only essential cookies required to operate the Service (session authentication). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Children's Privacy

The Service is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you by email of any material changes and revise the "Last updated" date above. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at privacy@sealed.ink.