Privacy Policy

Slowletter is a social discovery app. We take your privacy seriously because anonymity, trust, and personal safety are central to the experience we are building.

Last updated: 1 June 2026 — Effective: 1 June 2026

1. Who we are

Slowletter (“Slowletter”, “we”, “us”, or “our”) operates the Slowletter platform, including the website at slowletter.app and any associated mobile applications. For the purposes of applicable data protection law, Slowletter is the data controller for personal data collected through the platform.

You can contact us at: support@slowletter.app

2. Data we collect

Data you provide directly

Account data: email address, password, display name, and username.
Profile data: avatar image, bio, country or region, age band, languages, interests, and connection intents.
Letters and messages: the text content of letters you compose and messages you send in chat.
Reports: information you include when reporting a user, letter, or message to our safety team.

Data collected automatically

Usage data: pages visited, features used, actions taken (such as sending or accepting a letter), timestamps, and session duration.
Device and technical data: IP address, browser type and version, operating system, device identifiers, and approximate location derived from IP (country or city level only).
Cookies and similar technologies: see our Cookie Policy for details.

3. How we use your data

We use personal data only for the following purposes:

Providing and improving the service: operating your account, matching you with compatible people, delivering letters, enabling chat, and improving product quality.
Safety and trust: reviewing reports, enforcing our Community Guidelines, detecting abuse, and protecting users from harm. While your conversations are private by default, if content is reported by another user or flagged for a potential safety violation, a limited excerpt of the relevant content may be reviewed by our moderation team solely for safety, legal compliance, and abuse prevention purposes. Access is strictly limited, subject to confidentiality obligations, and excerpts are retained only as long as necessary to investigate and take appropriate action. We do not routinely monitor private conversations.
Communications: sending transactional notifications (new letter, letter accepted, new message) and service emails (account confirmation, password reset). We do not send marketing email unless you explicitly opt in. You may opt out of marketing communications at any time by following the unsubscribe link in any such email or changing your notification preferences in Settings.
Safety verification: we may ask you to verify your account to prevent fraud and ensure you are not using automated tools. This is done to protect the integrity of the platform and the safety of all users.
Legal obligations: complying with applicable laws, responding to lawful requests from authorities, and establishing, exercising, or defending legal claims.

4. Anonymity and identity reveals

A core feature of Slowletter is that your identity is not disclosed to a letter recipient until you both accept a connection. Your identifying profile data, display name, avatar, and username, is withheld from the recipient until that mutual acceptance occurs.

After a connection is accepted, profile information is shared between the two connected users only. Ending a connection does not re-expose previously private information.

5. Legal basis for processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

Contract performance: processing necessary to provide the service you signed up for.
Legitimate interests: operating and improving the platform, preventing fraud and abuse, and ensuring safety, where our interests are not outweighed by your rights.
Consent: for optional cookies and marketing communications.
Legal obligation: where applicable law requires processing.

7. Data retention

Account and profile data is retained while your account is active. You may delete your account at any time from Settings.
On deletion, your identifying profile data is removed, active conversations are closed, and pending letters are cancelled. We may retain a minimal pseudonymised record for safety and legal compliance purposes for a limited period, after which it is permanently deleted.
Moderation records (reports, bans) may be retained longer where required by our safety policies or legal obligations.
Aggregated, de-identified analytics data may be retained indefinitely.

8. Your rights

Depending on your location, you may have the following rights regarding your personal data:

Access: request a copy of the data we hold about you.
Correction: update inaccurate or incomplete data (most profile data is editable directly in the app).
Deletion: request deletion of your account and personal data.
Restriction: ask us to stop certain types of processing while a dispute is resolved.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interests.
Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, email support@slowletter.app. We will respond in a timely manner. If you are in the EEA, you may also lodge a complaint with your local supervisory authority.

9. Children and minors

Slowletter requires users to be at least 13 years old. We do not knowingly collect personal data from anyone under 13. If we become aware that a child under 13 has created an account, we will delete it and all associated data.

If you are a parent or guardian and believe a child under 13 is using the platform, please contact us at support@slowletter.app and we will take action to remove the account.

10. Security

We implement technical and organisational security measures appropriate to the risk, including encrypted data transmission, secure credential storage, access controls on our systems, and regular review of our practices. No system is completely secure; we encourage you to use a strong, unique password and to report any suspected security issues to support@slowletter.app.

11. International transfers

Slowletter uses infrastructure that may involve transfers of personal data to countries outside your home country, including the United States. Where such transfers occur from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure adequate protection.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide reasonable notice by email or through a prominent notice in the app before the change takes effect. Continued use of Slowletter after that date constitutes acceptance of the revised policy.

13. Contact

For any questions or requests related to this policy, please contact us at support@slowletter.app.