The promise, written plainly
Privacy
The app sends us nothing. This page explains what Lettera keeps, where it can go, and what remains under your control.
The short version
The Lettera app does not collect personal data for Mama Bloom. It has no account, analytics, advertising or tracking. Your letters live on your device and, only if you switch it on, in a private copy in your own iCloud. Mama Bloom operates no sync server and cannot read that private copy.
What the app stores, and where
Your letters, their dates, your optional first name, your stationery choices and reading progress are stored in the app’s private container on your device. Apple may also include app data in an iCloud or computer device backup, according to your Apple account and backup settings. Mama Bloom cannot access those backups.
Keeping a copy in iCloud (optional)
You can turn on “Keep a copy in iCloud” in the quiet corner. Lettera then mirrors your archive in Apple’s private CloudKit database under your Apple account so it can stay in step across your devices. Mama Bloom operates no server for this feature and cannot access your private CloudKit records.
Sync is off by default. Turning it off stops future syncing but does not delete a copy already in iCloud. “Erase every copy” first connects to your private iCloud and removes Lettera’s CloudKit mirror, whether ordinary syncing is on or off, and then clears the archive on the device. If iCloud cannot be reached, Lettera erases nothing and asks you to try again, so it does not leave an older private copy behind while reporting success. You can also manage Lettera’s stored app data through Apple’s iCloud storage controls.
Payments
Patron is an optional subscription sold through the App Store. Apple handles checkout, billing and account management; Lettera uses Apple’s purchase status only to decide whether Patron stationery is unlocked. Mama Bloom does not receive your card number or billing address. You can manage or cancel the subscription in your Apple account, and your letters are untouched either way.
Notifications
Arrival alerts are scheduled locally on your device and never contain a word of the letter. No push-notification service is used, so nothing about your writing travels over a network to deliver them.
Apple Intelligence (optional)
On supported devices you may ask for a suggested first line. Lettera uses Apple’s on-device Foundation Models and provides only the letter you are currently writing, not your archive. Lettera does not send that writing to Mama Bloom or to a cloud AI service.
What we never do
- No accounts, no tracking, no analytics, no advertising identifiers
- No transmission of your letters to Mama Bloom
- No sale of your data or use of your writing for advertising
- No profiles, no cross-app tracking, no data brokers
- No cloud AI; optional iCloud sync stays in your private Apple account
When data leaves your device
You can deliberately move your words off the device by exporting your archive, sending a sealed letter, or enabling private iCloud sync. Exports and shared letters go to the destination or service you choose; iCloud copies go to your private Apple account. They are not sent to Mama Bloom. A sealed letter sent as a link carries the letter inside the link itself — in the fragment after the #, which browsers do not transmit to servers. The page at mamabloom.app/lettera/l/ therefore receives no letter data; our web host sees only an ordinary page request. A sealed letter is a courtesy, not encryption: anyone holding the link or file could read it early — see the Support page.
Your rights
Mama Bloom cannot retrieve, correct or delete letters stored on your device or in your private CloudKit database because we cannot access them. Lettera’s Export control gives you a copy of the on-device archive; “Erase every copy” removes the private CloudKit mirror and then the on-device archive. Apple’s iCloud controls let you manage app data in your account directly. If you contact support, we receive the information you choose to put in your email and use it to answer you. In relation to that correspondence you have the rights of access, rectification, erasure, restriction of processing, data portability and objection under Art. 15–21 GDPR; write to privacy@mamabloom.app and we respond within one month (Art. 12(3) GDPR).
Legal bases and this website
Where Mama Bloom processes any personal data at all — a support email you send us, or the ordinary request data our web host records — it does so under Art. 6(1)(b) GDPR (answering your request) and Art. 6(1)(f) GDPR (security and operation of this website). We keep support correspondence only as long as needed to resolve your request, and beyond that only where a statutory retention duty applies. Our hosting provider keeps standard HTTP server logs (IP address, user agent, timestamp, response code) for security and operational reasons under Art. 6(1)(f) GDPR. We do not analyse or share these logs. This website sets no analytics or advertising cookies and loads no trackers.
Supervisory authority and UK representative
You may lodge a complaint with our lead supervisory authority, the Sächsische Datenschutz- und Transparenzbeauftragte (SDTB), datenschutz.sachsen.de, or with the supervisory authority of your habitual residence. For users in the United Kingdom we have appointed Prighter Group as our representative under Article 27 UK GDPR: app.prighter.com/portal/19873577792. UK users may also complain to the Information Commissioner’s Office (ico.org.uk).
Children
Lettera is not directed at children. The app has no account, advertising or analytics and does not ask users to send personal data to Mama Bloom. Patron purchases are handled by the App Store and remain subject to Apple’s age, family and account controls.
Changes to this policy
If this policy changes, the revised version will be posted here with a new effective date.
Contact
Controller: Mama Bloom UG (haftungsbeschränkt), Oskarstraße 14, 01219 Dresden, Germany, represented by Managing Director Claudia Nowack. Privacy requests: privacy@mamabloom.app · Phone: +49 152 5826 2078. Full company details are in the imprint.