What we collect, and what we do with it.

What we never do

• We do not sell, rent or share your personal data with anyone for their own purposes.
• We do not send your letter content to analytics, advertising or any third-party tool, and nothing you write is used to train a model — not ours, not anyone else’s. The one time your words leave the delivery path at all is when you press the AI writing help yourself; see Dictation and writing help below for exactly where they go. No advertising code runs on any page where a letter, an attachment, a recipient or a payment form appears.
• We do not read your letters. Support staff can see that a letter exists and whether delivery succeeded, not what it says.
• We set no tracking cookies of our own — the only cookie we set is the one that keeps you signed in. On the public pages listed below, Google's advertising script may set its own; see Advertising for what to do about that.
• We do not charge you to delete your data, and we do not make you contact support to do it.

When you write or post anonymously

Anonymous here means anonymous to other people. It does not mean we cannot tell it was you. When you send a letter without your name, or tick Post anonymously on a public post, the recipient or the feed sees no name and no profile — and MyWishLetter still holds the record connecting that letter or post to your account. We will not tell you otherwise, and you will not find the words “completely anonymous” or “100% anonymous” anywhere in this product, because they would not be true.

The reason is the one you would want if a stranger wrote something frightening to you: anonymity that nobody can ever look behind is anonymity that cannot be answered for. Someone being harassed by an unsigned letter has to be able to report it and have something happen.

What is recorded

Your account, the letter or post, when it was written, and the security information the platform already keeps for every account — the network address the request came from, and the country on your profile. Nothing new is collected because a post is anonymous. There is no fingerprinting, no device identifier we invent for you, no access to your camera or microphone, and no location beyond the one you were asked for and agreed to share when you posted. That position is an approximation from your device or from your network address; it is not a precise place, and we do not present it as one.

Who can see it, and when

Not other users, not the recipient, not the person who reported the post, not a search engine, and not anything in the page’s source or in an API response. Inside MyWishLetter, a named administrator with the right role can read the account behind an anonymous item — and only for a safety, abuse, fraud, legal or platform-security reason, which they have to choose from a list and explain in writing before the information appears. Most people with admin access cannot do it at all: moderating a post and identifying its author are separate permissions, and support staff have neither.

Every one of those looks is written to an audit record — who, when, which item, which reason, and what they were shown. Administrators cannot edit or delete that record. Reading the letter itself, opening an attachment and revealing the account are recorded separately, because “glanced at a report” and “read their letter” are not the same act and should not look the same afterwards.

What we do with it outside the company

Nothing automatically. An anonymous author’s identity is not disclosed to a recipient, to a reporter, or to anyone outside MyWishLetter except where our terms and the law require it — a court order, a lawful police request, or a serious safety matter. Our position on legal requests is in Where your data is stored above and applies here without exception.

How long

The network address recorded with an anonymous item is cleared after two years by default. The link to your account is kept for as long as the letter or post exists, because a report filed next year about something posted this year has to be answerable. Both periods are settings rather than fixed numbers, so they can be shortened — what we will not do is delete something we are legally required to keep, and we will not claim a period we have not configured. Deleting your account does not erase a letter that has already been delivered; the terms explain why a delivered letter is permanent.

Who else processes your data

We keep this list short deliberately — every name here is another company that can technically touch your data.

Where your data is stored

In India, in Amazon Web Services’ Mumbai region — account, letters, attachments, recipients, posts, wallet entries, identity records, all of it. Email is sent from there. The AI writing help runs inside our own account in the same region. We do not copy your data to another country as a matter of course, and the three companies listed above are the only ones that can technically touch any of it.

MyWishLetter is operated by an Indian company and we comply with Indian law — the Digital Personal Data Protection Act 2023, the Information Technology Act and its rules. Under the DPDP Act we are the data fiduciary for what you store with us, and you are the data principal.

Anyone in the world can open an account, and if you are outside India you are choosing to send your data to India and to have it held under Indian law. What we do not undertake is to satisfy the data-protection statute of every country somebody might be sitting in. If your own law requires your data to stay inside your country, or requires a transfer mechanism or a local representative we have not set up, then this is not a service you should use — and choosing to use it anyway is your decision. We are not responsible for data voluntarily sent to us from a jurisdiction whose rules we have not undertaken to meet.

We will hand over data where an Indian court, the police or a statute requires it, and we will co-operate with a lawful request from an authority elsewhere where Indian law permits it. We will tell you when we are allowed to.

Advertising

Free accounts and visitors who are not signed in may see advertising, served by Google AdSense, on one public page — the FAQ.

Nowhere else. There is no advertising while you are writing, editing, scheduling or reading a letter; none on a page holding an attachment; none on the page a recipient opens to read what you sent them; and none on the payment, settings, security or account pages. Those pages do not load Google's script at all, so nothing about them reaches an ad network — this is not an ad being hidden from view.

If you are on any paid plan, the advertising script is never loaded, on any page. That is what paying removes, and it is removed by not requesting it rather than by concealing it.

We give Google nothing about you. No email address, no letter, no recipient, no plan, no title of anything you have written. Like any script running in your browser, Google sees the address of the page it is on, your IP address and its own cookies, and it may use those to choose which advertisement to show. You can control that at My Ad Center, which is Google's own setting and applies wherever you see their ads, not just here.

Dictation and writing help

Two features on the writing screen are optional, are off until you press them, and are the only parts of MyWishLetter where your words go anywhere other than to your recipient. If you never use them, nothing in this section applies to you.

Speaking instead of typing

When you use the microphone, your speech is turned into text by your own browser. The audio never reaches MyWishLetter: we do not record it, upload it, store it or transcribe it, and there is no audio file of your voice anywhere in our systems. Words appear as you speak and are yours to edit before anything is saved.

What we will not pretend is that the recognition all happens on your phone. Some browsers — Chrome and Safari among them — do it by sending the audio to their own speech service, which means Google or Apple may receive it under their own privacy terms and not ours. That is your browser’s behaviour rather than ours and we cannot turn it off from here, which is why we say the audio never reaches us and stop there.

The AI writing help

If you ask for a suggestion or a first draft, this is what happens. For a letter: Your title and letter are sent to an AI model in our own AWS account to make this suggestion. We do not store the suggestion, and your attachments are never sent. For a public post: Your title and post are sent to an AI model in our own AWS account to make this suggestion. We do not store the suggestion, and your photos, videos and voice notes are never sent.

The model runs inside our own AWS account, in the same region as the rest of your data. Your words are not used to train it, are not added to any dataset, and are not shared with any other company for their own purposes. The suggestion itself is not written to our database — it is returned to your screen, and nothing reaches your letter or your post until you choose it. We do keep a count of how many times you have used the feature today, because each plan includes a daily number; the count is a number, not a copy of anything you wrote.

Anonymous Thoughts

A member can create a private link and share it with whoever they choose. Anybody who opens that link can send them a short message without their identity being shown to the person receiving it. This section is about both sides of that, and the first half is for people who do not have a MyWishLetter account and were not expecting to read a privacy policy today.

If you sent somebody a message

You do not need an account and we do not ask for one. We do not ask your name, your email address or your phone number, and there is no field on the page that would let you give them to us by accident. The person who receives your message is not shown who sent it — not a name, an address, an account, a number, a network address or a device. There is no field for it on the record they read and nothing in the product that lets them find out.

What we will not tell you is that nothing at all is kept. When your message reaches us, the request carries technical information of the ordinary kind — an IP address, and a short-lived cookie our systems set so that one browser cannot flood one person with hundreds of messages. We keep that for a limited period so that the service works, so that spam and automated abuse can be stopped, and so that we are able to act if somebody is threatened or harassed through this feature. We do not build a profile of you from it. We do not use it for advertising or for any kind of targeting. We do not sell it or share it with anybody for their own purposes. And we do not use it to answer a recipient who asks us who sent something.

MyWishLetter does not disclose a sender's identity to the recipient except where required by applicable law, valid legal process, or where necessary to address serious misuse, safety, fraud, harassment, or violations of our Terms. A court, or the police acting under Indian law, can require us to produce what we hold, and we will comply with a request that is lawful. That is the plain limit of anonymity here, and it is the reason we describe your message as anonymous to the person who receives it rather than as untraceable.

Your message itself is content you have written, and it is stored so that the person can read it. It is screened for the things our terms prohibit. If it is reported, a person at MyWishLetter may read it in order to decide what to do — and deciding what to do about a message never involves telling the recipient who wrote it.

If you are the person receiving them

Your link is tied to an anonymous ID you choose, and that ID is deliberately not your public name, your email address or any internal identifier of ours — a link you paste into a Status post should not tell a stranger anything about your account. The public page for your link shows your public name if you have set one, and nothing else: not your email address, not your letters, not your profile, not your plan.

What you receive is yours. You can pause the link so nothing new arrives, change your ID so the old link stops working, or delete a message from your list. Deleting one removes it from your view for good. Where a message has been reported to us, or where we are required to keep a record for safety or legal reasons, the underlying record may be retained for that purpose after it has left your list — we do not destroy an abuse record because the person who reported it also tidied their inbox. Nothing about the sender becomes visible to you at any point in any of this, and we do not show you counts, locations, times of day or any other statistic that would narrow down who somebody is.

If you delete your account, your link stops working and the messages you received go with it, on the same terms as the rest of your data described above.

Your rights

• ✓Ask for a copy of everything we hold about you.
• ✓Correct anything that is wrong.
• ✓Delete any letter, or your whole account, at any time and without giving a reason.
• ✓Withdraw consent to marketing email without losing access to the product.
• ✓Complain to a data protection authority if we get this wrong.

To exercise any of these, email support@mywishletter.com. We will respond within thirty days, and usually much sooner.

If you want to complain rather than ask, the same address reaches our Grievance Officer. We will acknowledge a complaint within twenty-four hours and resolve it within fifteen days, as the Indian rules require. If we get it wrong, you can take it to the Data Protection Board of India, and nothing in our terms stops you.

A word about letters delivered after death

If you schedule a letter to be released under a condition — such as confirmation by your trust circle — that release is a delivery of a message and nothing more. It grants no legal authority, and it is not a will. Your trust circle can confirm a condition; they cannot read your letters, and they cannot change who receives them.

Changes to this policy

If we change anything that materially affects you, we will email you before it takes effect rather than quietly editing this page. The date at the top always reflects the last revision.