Privacy policy
How Dear Future handles your account, messages, receipts, recovery information, and verification records.
Last updated: May 2026
This page explains how Dear Future approaches privacy in plain English. It is an MVP policy summary, not legal advice. If something is unclear, please contact us.
Introduction
Dear Future provides a way to write messages, pay by card, and create preservation and verification records. This policy describes the kinds of information that may be collected, how it is used, and what you should expect when using recovery kits and public verification pages.
What information we collect
Depending on how you use the service, Dear Future may process account and profile details, message metadata, encrypted message payloads, content fingerprints, payment transaction references, receipt metadata, verification-related information, and recovery key metadata. Not every item applies to every user or every message.
Account information
If you create an account, we may store details needed to operate your account, such as your email address and basic profile or session information. This helps you sign in, manage messages, and receive service-related communications where appropriate.
Message information
When you compose a message, Dear Future may store the text and settings you provide, metadata such as titles or visibility choices, and technical data needed to prepare preservation. Messages are handled according to the visibility and timing options you select within the product.
Payment information
Card payments are processed by Stripe. Dear Future does not store your full card number, card security code, or equivalent raw card details on its own systems. We may receive and store references that Stripe provides (for example payment or customer identifiers), amounts, currency, and status information needed for receipts and support.
Preservation and verification metadata
When a message moves through preservation, Dear Future may create and store records such as transaction references, preservation references, content fingerprints, timestamps, and status fields. These items help receipts, verification pages, and support workflows function. Some records may be intended to be permanent or difficult to change once processing has completed, where technically possible and consistent with how the service is built.
Recovery kits and recovery keys
After preservation completes, your private receipt area may offer a recovery kit. Recovery kits are sensitive because they may include your recovery key and the preserved encrypted payload, along with related references.
Recovery keys are shown on your private receipt and recovery kit flow within Dear Future. We do not email raw recovery keys. You are responsible for downloading or copying the recovery kit, storing it safely, and deciding who may access it. Anyone with the recovery key and preserved payload may be able to read the message outside Dear Future, so treat the kit like highly confidential material.
How we use information
Information is used to provide the service: creating and displaying messages, processing payments, running preservation workflows, generating receipts, powering verification pages, offering recovery materials, and responding to support requests. We also use data as needed for security, fraud prevention, troubleshooting, and legal compliance where applicable.
What we do not sell
Dear Future does not sell your personal information to data brokers. We do not treat your private message text as a product to be resold for advertising profiling.
Public verification pages
Public verification pages are designed to show receipt-style metadata (for example fingerprints, references, visibility, and status). They are not intended to publish private drafts or full private message text by default. What appears still depends on the type of message and the settings involved, so review what your verification link exposes before sharing it widely.
Data security
Dear Future uses technical and organisational measures that fit the stage of the product. No online service can promise perfect security. You should use a strong password, keep devices updated, and protect recovery materials offline where you can.
Data retention and permanence
Some records are designed for long-term preservation and may be intended to be permanent or costly to remove once processing has finished. Where removal or correction is technically possible and appropriate, we will consider requests in line with applicable law and operational reality. Even then, copies may exist in backups or third-party systems for a period.
Your responsibilities
You are responsible for the accuracy of what you submit, for reviewing content before payment, and for safeguarding recovery kits and any links that grant access to private areas. Do not share recovery keys in insecure channels.
Contact
Questions about this policy or your data can be sent via the details on our Contact page.