← klee.page

Privacy Policy

Last updated: July 26, 2026

Overview

This privacy policy covers klee.page (personal website) and Dispatch (letter-sending app). Your privacy matters — here's exactly what we do and don't do with your data.

klee.page (Personal Website)

klee.page is a static personal website and does not use cookies. Aggregate analytics (page views, referrers) come from Vercel Web Analytics. Separately, each page view records an approximate location — country, state or region, and city — derived from your IP address, so I can see which parts of the world read the site, together with a fingerprint: a one-way hash of your IP address, your browser, and the current date. Your IP address itself is never stored. The fingerprint changes every day, but within a single day it does link your page views to each other, which makes this data pseudonymous rather than anonymous. Your browser and device are also recorded — the device type, operating system, browser, and the full user-agent string your browser sends. These records are deleted automatically after 12 months. If your browser sends a Do Not Track or Global Privacy Control signal, no location or fingerprint is recorded for your visit.

Dispatch (Letter App)

Dispatch is a platform for creating and sending personal letters. When you use Dispatch, we collect:

  • Account information: Name, email, profile photo. Used to identify you and deliver letters.
  • Letter content: Text, photos, media in your letters. Stored encrypted. Only accessible to you and your recipients.
  • Device tokens: Push notification tokens. Used solely to notify you when you receive a letter.
  • Photo metadata: When you use the photo compose feature, EXIF data (GPS coordinates, date) is read locally on your device to auto-tag locations. This data is not sent to our servers unless you choose to include it in your letter.

What We Don't Do

  • We don't read your letters.
  • We don't sell your data to anyone, ever.
  • We don't show you ads.
  • We don't share your information with third parties for marketing.
  • We don't use your content to train AI models.
  • We don't track you across websites.

AI Features

When you use AI writing assistance (polish, translate, voice-to-letter), your text is processed by our AI provider to generate suggestions. This content is processed in real-time and is not stored by the AI provider. AI features are always optional — you can write without them.

Data Storage & Security

Data is stored on Supabase (hosted on AWS in the US). All data is encrypted at rest and in transit. Database backups are encrypted and retained for 30 days. We use row-level security (RLS) policies to ensure users can only access their own data.

Third-Party Services

  • Supabase: Database, authentication, and file storage
  • Vercel: Website hosting, serverless functions, analytics
  • Apple: Sign in with Apple, push notifications (APNs)
  • AI providers: Text processing for writing assistance (no data retention)

Your Rights

  • Access: View all your data within the app at any time.
  • Export: Download all your letters and profile data.
  • Correction: Update your profile information in Settings.
  • Deletion: Delete your account and all associated data permanently from Settings > Delete Account. This cannot be undone.
  • Portability: Request a machine-readable export of your data.

For EU/EEA users: You have additional rights under GDPR including the right to object to processing and the right to lodge a complaint with a supervisory authority.

For California users: Under CCPA, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we don't sell your data).

Children

Our services are not intended for users under 13 years of age (16 in the EU). We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

Data Retention

We retain your data as long as your account is active. When you delete your account, all personal data is permanently deleted within 30 days. Anonymized, aggregate analytics data may be retained indefinitely.

Changes

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.

Contact

Questions about privacy? Contact kevin@klee.page