The promise, written plainly
Privacy
The app sends us nothing. This page explains what Lettera keeps, where it can go, and what remains under your control.
The short version
The Lettera app does not collect personal data for Mama Bloom. It has no account, analytics, advertising or tracking. Your letters live on your device and, only if you switch it on, in a private copy in your own iCloud. Mama Bloom operates no sync server and cannot read that private copy.
What the app stores, and where
Your letters, their dates, your optional first name, your stationery choices and reading progress are stored in the app’s private container on your device. Apple may also include app data in an iCloud or computer device backup, according to your Apple account and backup settings. Mama Bloom cannot access those backups.
Keeping a copy in iCloud (optional)
You can turn on “Keep a copy in iCloud” in the quiet corner. Lettera then mirrors your archive in Apple’s private CloudKit database under your Apple account so it can stay in step across your devices. Mama Bloom operates no server for this feature and cannot access your private CloudKit records.
Sync is off by default. Turning it off stops future syncing but does not delete a copy already in iCloud. “Erase every copy” first connects to your private iCloud and removes Lettera’s CloudKit mirror, whether ordinary syncing is on or off, and then clears the archive on the device. If iCloud cannot be reached, Lettera erases nothing and asks you to try again, so it does not leave an older private copy behind while reporting success. You can also manage Lettera’s stored app data through Apple’s iCloud storage controls.
Payments
Patron is an optional subscription sold through the App Store. Apple handles checkout, billing and account management; Lettera uses Apple’s purchase status only to decide whether Patron stationery is unlocked. Mama Bloom does not receive your card number or billing address. You can manage or cancel the subscription in your Apple account, and your letters are untouched either way.
Notifications
Arrival alerts are scheduled locally on your device and never contain a word of the letter. No push-notification service is used, so nothing about your writing travels over a network to deliver them.
Apple Intelligence (optional)
On supported devices you may ask for a suggested first line. Lettera uses Apple’s on-device Foundation Models and provides only the letter you are currently writing, not your archive. Lettera does not send that writing to Mama Bloom or to a cloud AI service.
What we never do
- No accounts, no tracking, no analytics, no advertising identifiers
- No transmission of your letters to Mama Bloom
- No sale of your data or use of your writing for advertising
- No profiles, no cross-app tracking, no data brokers
- No cloud AI; optional iCloud sync stays in your private Apple account
When data leaves your device
You can deliberately move your words off the device by exporting your archive, sending a sealed letter, or enabling private iCloud sync. Exports and shared letters go to the destination or service you choose; iCloud copies go to your private Apple account. They are not sent to Mama Bloom. A sealed .lettera file is a promise, not a vault — see the Support page before sharing sensitive words.
Your rights
Mama Bloom cannot retrieve, correct or delete letters stored on your device or in your private CloudKit database because we cannot access them. Lettera’s Export control gives you a copy of the on-device archive; “Erase every copy” removes the private CloudKit mirror and then the on-device archive. Apple’s iCloud controls let you manage app data in your account directly. If you contact support, we receive the information you choose to put in your email and use it to answer you. You can ask us about that correspondence at privacy@mamabloom.app, and you retain the right to complain to a data-protection supervisory authority.
Children
Lettera is not directed at children. The app has no account, advertising or analytics and does not ask users to send personal data to Mama Bloom. Patron purchases are handled by the App Store and remain subject to Apple’s age, family and account controls.
Changes to this policy
If this policy changes, the revised version will be posted here with a new effective date.
Contact
privacy@mamabloom.app · Mama Bloom UG (haftungsbeschränkt), Dresden, Germany. Full company details are in the imprint.