# MyWishLetter for Android — release notes

## 1.1.0 (build 2) — 10 August 2026

**Everything the app sends is now encrypted in transit.**

The previous build talked to the server over plain HTTP, because the domain had no certificate yet.
That meant anyone sharing your network could read your sign-in token and your letters. The certificate
is now in place, the app uses `https://www.mywishletter.com`, and the exemption that permitted
unencrypted connections has been removed entirely rather than merely switched off — so the app can no
longer fall back to an unencrypted connection even by accident.

**If you installed 1.0.0, please update.** It will keep working, but not privately.

Nothing else changed: same account, same letters, nothing to move across.

---

## 1.0.0 (build 1) — 10 August 2026

The first release. It does the core of what the website does, from your phone.

**What works**

- Sign in with your email address. There is no password — we email you a link, you paste it into the
  app once, and it stays signed in for a week at a time.
- Write a letter, give it a title, and save it.
- Choose exactly when it should arrive: a date *and* a time.
- Edit anything you have written, reschedule it, or take the date off to put it back to a draft.
- See all your letters with their status — draft, scheduled, delivered, paused or archived.
- Light and dark, following your phone's setting.

**What is not in the app yet**

- **Attachments.** Photos, voice notes, videos and documents are on the website only. Those files are
  encrypted on your own device before they are uploaded, and that encryption currently lives in the
  browser. Rather than rebuild it in the app and risk files that upload successfully but cannot be
  opened years later, the app leaves attachments alone.
- **Recipients.** Who receives a letter is managed on the website for now.
- **Tapping the sign-in link directly.** For now you copy the link from your email and paste it into
  the app. Tapping the link to open the app is not wired up yet.

**Known limitations**

- The app talked to the server over plain HTTP, because the domain had no certificate at the time of
  this release. Anyone on the same network could read what was sent, including your letters. **Fixed
  in 1.1.0 — please update.**
- Requires Android 7.0 or newer.

**Installing it**

The download page has step-by-step instructions and the file's SHA-256 fingerprint. Check the
fingerprint before you install — it is the only way to know the file is the one we published.