Privacy Policy

This policy explains what Crush on You collects, why, and what you can do about it. We collect as little as we can.

What we store

Your letters. The recipient’s name, your name (if you sign), the text, the secret question and answer, the recipient’s email (if you add one), and their answer and message. All of these are encrypted in our database. Photos you add are stored as files and only shown through the letter’s link.

Your account. If you pay, your email address (encrypted), your language and your payment history. We never see or store your card details: Stripe handles them.

Open records. For paid letters, when the letter was first and last opened and how many times. We don’t record the recipient’s IP address or location for this.

Technical data. Our servers keep short-lived logs (such as IP addresses and browser type) to keep the service secure and working.

Drafts on your device

Before you pay, your browser keeps a small cookie that proves it wrote your drafts. It contains only the letters’ random identifiers.

Cookies and analytics

We use the cookies needed to sign you in and to remember your drafts. If you accept the cookie banner, we also use the Meta Pixel to measure ads. Our analytics and support chat (Indiehacker Studio) set no cookies and store no IP address. You can decline, and the site works the same.

Who can read a letter

Anyone with its link. That’s why links are long and random, letters are marked so search engines don’t index them, and you can delete a letter at any time.

Emails we send

To you: sign-in links, receipts, and (for paid letters) a note when your letter is opened or answered. To a recipient: only the letter you asked us to deliver, once. We never add recipients to any list or send them marketing.

Services we use

• Stripe for payments.
• Mailgun to send email.
• Railway to host the app and its database.
• Indiehacker Studio, for cookieless analytics and the support chat.
• Meta, only if you accept cookies.
• Spotify, Apple Music, YouTube, SoundCloud or Vimeo, only when a letter includes a song or video from them. Their player loads inside the letter.

How long we keep things

Free letters stop working after 7 days; we delete their content within 30 days after that. Paid letters stay until you delete them or your account. Payment records are kept as long as the law requires.

Your rights

You can ask for a copy of your data, ask us to correct it, or delete your letters and your account. Under the LGPD (Brazil), the GDPR (EU) and similar laws you also have the right to object and to complain to your data protection authority. Write to hello@crushonyou.app.

If someone wrote you a letter and you want it removed, write to us with its link.

Children

Crush on You is for adults. We don’t knowingly collect data from children.

Changes

We’ll update the date at the top when this policy changes and email paying customers about material changes.

Contact

JOAO AUGUSTO DIAS BATISTA LAMBERT LTDA · hello@crushonyou.app