Privacy policy

Last updated: November 9, 2026.

This policy applies to the Dearseal app for Android and to this website.

Who we are

Dearseal is published by Haven Global Services Ltd, a company registered in England and Wales under number 16267495, registered office: 3 Hornton Place, London W8 4LZ, United Kingdom. We are the controller of the limited personal data described below. Contact: support@dearseal.com.

What the app stores

Your letters, voice messages, videos, photos and settings are stored only on your device, in the app's private storage. They are not encrypted by the app and are protected by your device's own security. The app has no account, no advertising and no analytics, and it does not send your capsules or any identifier to us or to anyone else. Android backup is turned off for Dearseal, so your capsules are not copied to your Google account.

Permissions

The microphone and camera are used only when you record. Photos are chosen with the Android photo picker, so the app sees only the photo you pick. Notifications tell you that a capsule is ready; they are scheduled on your device. Fingerprint, face or screen-lock checks are handled by Android, and we never receive them.

The lock

A capsule opens when your device's clock reaches its date. Changing the device's date can open it early. Dearseal is a sealed envelope, not a safe: do not use it for passwords or secrets.

Sharing

If you tap Share, the app creates an image and a short text and hands them to the app you choose. What happens next is governed by that app's own privacy policy.

Backups

Backup files you export are not encrypted and contain all your capsules, including sealed ones. Anyone who has the file can read them. You choose where to keep them.

Data we process about you

• Emails to support or to join the beta. We use your email address and message to reply and, if you ask to join the beta, to add your address to the Google Play test list. Legal basis: our legitimate interest in answering you, or steps you ask us to take (UK GDPR and GDPR, Art. 6(1)(f) and (b)). We keep these emails for up to 24 months after our last exchange, and remove you from the test list when the beta ends or when you ask.
• This website. It uses no cookies, no analytics and no third-party scripts. It is hosted by Google (Firebase Hosting), which processes your IP address and technical request data to deliver the pages and keep the service secure.
• Google Play. Google distributes the app and may collect data under its own privacy policy, for example installs and crash reports (Android vitals). Google is responsible for that processing.

Who receives data

Only our service providers: Proton AG (Switzerland) for our mailbox, Cloudflare for email forwarding, and Google for website hosting and app distribution. Some of them process data outside the UK or the EEA; in that case they rely on adequacy decisions or standard contractual clauses.

Your rights

You can ask to access, correct or delete the personal data we hold about you (in practice, your emails), to restrict or object to its use, or to receive a copy. Write to support@dearseal.com; we reply within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority of your country in the EU.

Deleting your data

In the app, open Settings, then Delete all my data. This erases your capsules, their media and your settings from the device. Uninstalling the app has the same effect. Neither erases backup files you exported. To delete your emails, write to us.

Children

Dearseal is not directed at children under 13. If you are under the age of digital consent in your country, ask a parent before emailing us.

Changes

We will update this page, and the date above, before any change that affects your data, including before any cloud, account or payment feature is turned on.