Privacy policy
AngelSwitch is built so that we cannot read what you leave for the people you love. This policy explains what we can see, what we can’t, and what we do with the little we hold. For the technical detail, see Privacy & security.
What we can’t see
Your letters, videos, recordings, scans and files, including their titles and file names; your loved ones’ names, relationships, birthdays, notes and postal addresses; the answers to the questions you set; your questionnaire answers and drafts; your password and recovery code. All of these are encrypted on your device before they reach us, with keys we never receive.
What we hold, and why
- Your name and email, to run your account and send check-ins.
- Your loved ones’ email addresses and the question you set for each, to send each person one message when it’s time. We don’t contact them before then.
- Confirmers’ names and email addresses, to ask them one question if you stop checking in.
- Switch settings and activity: check-in dates, reminders, confirmer answers, and the sizes and dates of encrypted items.
- If you turn on public-notice checks: your full name, city and birth year.
- Billing: handled by our payment processor (Stripe). We keep the plan, its status and a customer reference, never your card number.
Optional features that change what’s possible
Open without a question keeps a key for that person’s messages in a separate key store, so those messages are not protected the same way. Print and mail seals a copy so that only our printing partner can open it, and only after release, in order to print and mail it. Both are off unless you turn them on.
Who we share with
Only service providers needed to run AngelSwitch: hosting and database, encrypted file storage, email delivery, payments and, if you use it, printing and postage. They receive encrypted data except where described above. We do not sell data or use advertising trackers.
How long we keep things
While your account is active. After a release, messages are kept for at least five years after each person last opens them, and we offer a download before deletion. You can delete your account and everything in it at any time from Settings.
Your rights
You can access, correct, export or delete your data. Because content is encrypted with your keys, exports of content happen in your browser. Write to hello@angelswitch.com with any request.