Last updated: 20 October 2026
DraftPocket is a private check-in and legacy messaging app. You check in to say you're okay. You can leave letters, photos and videos for the people who matter to you, and name trusted people we contact if we stop hearing from you. This policy explains what information we collect, why, who we share it with, and the choices you have.
DraftPocket is provided by BitA Solutions ("we", "us"). If you have any question about this policy or your data, write to us at support@draftpocket.app.
We collect only what the app needs to work: your account, your check-ins, the people you trust, and the messages you choose to leave.
Your messages stay private. They are sent to the person you chose only if they are released, and only after we have verified.
We don't sell your information, and we don't show ads.
Auto check-in places stay on your phone. We only receive that you checked in and the time, never where you were.
You can delete your account and everything in it at any time.
Account details. Your name and email address from the account you sign in with (Google or Apple), and the account id we create for you.
Phone number. The number you add and verify in your profile. We use it to identify you, and your trusted people may see it so they can recognise and call you.
Profile photo. If you add one.
Trusted people. The names, relationships, phone numbers and email addresses of the people you add. Please only add people who would expect to hear from you, and tell them you have added them.
Messages you leave. Letters, photos and videos, and who each message is for. Letters are encrypted when we store them.
Your settings. Your check-in schedule, reminders, quiet hours, pause dates, release settings and language.
Check-ins. When you check in and how (a tap, a reminder, or auto check-in), and a signal that the app was recently opened.
Missed check-ins. When a check-in was missed, who we tried to reach, how (push notification, SMS or email), and whether it was delivered.
Device information. A push notification token for your device, and a key that lets auto check-in confirm it came from your phone.
Purchases. Your plan, and the purchase records Google Play or the App Store send us so we can confirm your subscription. We never see your card details.
Usage statistics. In the released app, we count how the app is used, for example which screens are opened and which features are used, with Google Firebase Analytics. These events never contain names, contact details, message content or ids, and we don't use an advertising id.
Your location. Auto check-in compares your phone's location with the places you saved, on the phone itself. The places, the location and the devices you connect (such as your car) stay on your phone. When you search for an address, the text you type is sent to our map provider (HERE) to find it, and is not stored by us.
Your contacts list, microphone or files beyond the photos and videos you choose to attach.
We use your information to:
run your account and sign you in;
remind you to check in, and notice when you haven't;
contact your trusted people when you miss check-ins, as your safety plan says;
keep your messages, and release them to the person you chose only when your release settings say so and after we have verified;
show people who named you as a trusted person what they left for you, if it is released;
confirm your plan and its limits;
keep the service secure, prevent abuse (for example limiting how many deletion requests an address can make), and fix problems;
understand, in aggregate, which features are used, so we can improve the app.
We don't use your information for advertising, and we don't sell or rent it to anyone.
Your trusted people. When we contact them, they receive your name, your relationship to them, and your phone number or email so they can reach you. They don't see your messages unless a message is addressed to them and released.
The person a message is for. After a release, only they can open it. They open it in the app, or on a private web page that asks for a code sent to their phone. The release email or text includes your name.
People who named you as their trusted person. They see that you are linked, and your name and profile photo.
We use the following companies to run DraftPocket. They process information only to provide their service to us:
Supabase: Database, sign-in and server functions.
Cloudflare: Storing photos, videos and profile photos (R2), and the release and account web pages.
Google: Sign in with Google, push notifications (Firebase Cloud Messaging), usage statistics (Firebase Analytics), Google Play billing.
Apple: Sign in with Apple, push notifications, App Store billing.
Twilio: Sending SMS to you and your trusted people, and phone number verification codes.
Resend: Sending emails.
HERE: Address search and maps for auto check-in places.
These providers may process information on servers outside your country. Where that happens, we rely on the protections they offer for international transfers.
We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of the service, in which case this policy continues to apply.
We keep your information while you have an account.
When you remove a photo or video, or replace it, the file is deleted from storage within about a week.
When you delete your account, we delete your profile, check-ins, safety plan, trusted people, messages, photos, videos and push tokens. Some records may stay in backups for a short period before they are overwritten.
If someone else added you as a trusted person, or left a message for you, their entry is theirs. It stays in their account after you delete yours, but it is no longer linked to you.
Purchase records may be kept longer where tax or accounting law requires it.
You can delete your account in the app (Settings, Delete account), or on the web at https://account.draftpocket.app without the app installed.
Deleting your account doesn't cancel a Google Play or App Store subscription. Please cancel it in your store account so you aren't charged again.
See and change your information. Your profile, trusted people, messages and settings can all be changed in the app.
Notifications. You can turn reminders off, set quiet hours, or pause check-ins in Settings or in your phone's settings.
Auto check-in. It is optional. You can turn it off, and remove location permission in your phone's settings, at any time.
Delete. See section 7.
Depending on where you live, you may also have the right to ask for a copy of your information, to object to or restrict how we use it, or to complain to your local data protection authority. To use any of these rights, write to us at support@draftpocket.app.
We protect your information with encryption in transit, encrypted storage for letters, private storage for photos and videos that can only be opened with short-lived links, and access rules so that each account can only reach its own data. No service can be completely secure, so please keep your phone and your sign-in account protected.
DraftPocket is not intended for children under 13. We don't knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
If we change this policy, we will update the date at the top. If a change is significant, we will let you know in the app or by email before it takes effect.
BitA Solutions support@draftpocket.app