Privacy

This policy explains how Stay in Touch (“Stay in Touch,” “we,” or “us”) handles personal information collected through sit-app.com (the “Site”). The Site is a web app for writing and sending personal notes to people you know, and for planning to see them. Stay in Touch is a product of SIT App, Inc., a Delaware corporation based in Brooklyn, NY.

If you have a question about this policy, write to hi@sit-app.com.

When you submit the form on the Site, we collect:

• the email address you entered,
• the mode preference you selected (“read,” “write,” “both,” or “interest in updates”),
• the date and time of submission,
• any URL parameters present when you arrived (for example, utm_source, utm_medium, utm_campaign), which tell us how you found the page.

Unless you choose to sign in with Google (see below), we do not collect names, payment information, government identifiers, precise location, or contact-list data. The Site uses Vercel Web Analytics, a privacy-friendly, cookieless tool, to record aggregate page views and basic usage events (for example, that a draft was reviewed by the coach, or handed off to send). These events never include your email content, recipients, or names, and the tool does not set tracking cookies. Our hosting provider may set a minimal session cookie required to serve the page; it is not used to profile you.

On our invite landing pages (for example, pages reached from a community post or an ad), we additionally keep our own simple counters: which landing page was viewed, whether a draft was started or handed off to send, and a short label from the link you arrived on (for example, src=warm). These counters contain no email address, no IP address, no device details, and no message content. If you request an invite, we store the email address you entered so we can send you the invite link, and if you join through an invite we keep a note of which landing page and which member’s invite brought you in.

Signing in with Google. Sign-in is optional; the drafting page and sending work without it. If you choose to sign in, Google shares your name, email address, and profile photo with us, and we set a sign-in cookie so you stay logged in between visits. While you are signed in, we store your account profile (name, email, photo), the drafts you save, and a record of the SITs you send (the subject, the text, the date, and how many people you sent to) in our database, so your drafts follow you across devices and you can see your send history. Any photos you add to a SIT or your profile are stored as image files (through Vercel) and served from an unguessable public web link, so they can appear in the recipient’s email and inside the app. Anyone with that exact link can view the photo. We also store the email addresses of the people you send to, so your note can appear inside the app as well as in their email, and so that a recipient who later signs in can see the notes that were sent to them. We use those addresses only to deliver and link your notes; we never email recipients anything except the note you addressed to them, and a recipient can ask us to delete what we hold about them at hi@sit-app.com. If coach memory is on, the coach also distills durable notes from the SITs you send — the topics you return to, and a private model of how you write (your voice and style) that we use to make the coach’s suggestions sound like you — to personalize future coaching. That model is stored with your account, never shared, and you can turn it off or reset it in Settings. We use your email to recognize you and to apply a per-account limit on coach usage. The sign-in cookie is functional, not a tracking or advertising one. Sign out to clear it, or write to hi@sit-app.com to ask what your account holds, for a copy of it, or to have it deleted.

Connecting Google Contacts. Connecting your contacts is optional. If you choose to, we use Google’s People API to read your Google Contacts (names, email addresses, and phone numbers) on a read-only basis, so you can pick who to send a SIT to without retyping addresses. We use this only to fill your recipient picker and the contacts list inside the app. We do not modify your Google Contacts, we do not use them for advertising, and we do not sell them. You can disconnect at any time, and ask us to delete imported contacts at hi@sit-app.com.

Uploading a contacts file. You can also add contacts by uploading a CSV or vCard file exported from Google, Outlook, or Apple Contacts. The file is read in your browser; we store only the names, email addresses, and phone numbers it contains, the same way as Google-imported contacts, and only to fill your recipient picker and contacts list. You can ask us to delete uploaded contacts at hi@sit-app.com.

Sending through Gmail. Sending through Gmail is optional; you can always hand a draft off to your regular email app instead. If you choose “Send via Gmail,” we use Google’s Gmail API (the send-only permission) to send the SIT you wrote, from your Gmail account, to the recipients you chose. We use this permission only to send the specific message you composed when you ask us to. The send-only permission cannot read mail: on its own it gives us no access to your inbox.

Reading replies to your notes. This is a separate permission, it is off unless you turn it on yourself, and you can turn it off again at any time. If you turn it on, we use Google’s Gmail API (the read permission) to look at the email threads started by the SITs you sent, so that the replies people write back appear in the app beside your note instead of only in your email. We read those threads and nothing else. We do not search your mailbox, we do not open messages unrelated to a note you sent, and we do not use any of it for advertising or sell it. We store the text of those replies and the sender’s name and address so the conversation can be shown to you, and we mark a reply as read once you have read it in Gmail. Turn it off in Settings, disconnect it in your Google Account, and ask us to delete what we hold at hi@sit-app.com.

Your calendar. Calendar access is optional and you are asked for it at the moment it is needed. Two features use it. To show someone the times you are free, we read only the free and busy blocks on your calendar, never the titles, guests, or details of your events. To put a get-together on your calendar once you and the other person have agreed a time, we create that one event, add the person you are meeting as a guest so their own calendar invites them, and remove it again if the plan changes. If you also choose to share travel plans, we read the whole-day date ranges of trips already on your calendar and store only those dates and the city, never the event titles or any other detail, so a friend you write to can be told you may be in the same place. We do not read your calendar for any other purpose, we do not use calendar data for advertising, and we do not sell it. You can turn any of this off in Settings or disconnect it in your Google Account.

Text messages (SMS and RCS). If you choose to send a SIT by text message, we use Twilio to deliver it, and depending on the recipient’s carrier and device it may arrive as a standard text message (SMS) or over RCS (Rich Communication Services). We store the mobile numbers of the people you choose to text and your sender name, and use them only to deliver your note and to route any replies back to you inside the app. A recipient’s number comes from the sender’s own contacts; we do not buy, rent, or build phone-number lists. We do not sell, rent, or share mobile phone numbers, or any SMS opt-in or consent information, with third parties or affiliates for their own marketing or promotional purposes. A text is sent only when a sender chooses to message you, and it names the person it came from. Reply STOP at any time and we stop texting that number. That covers texts from every member, not only the sender who wrote to you, and we keep a record of the request. Reply HELP for help. Recurring messages, like a sign-in code or an alert when someone writes to you, go only to people who create an account, verify their own number, and turn them on; you can see that consent screen at sit-app.com/sms. Message frequency varies. Message and data rates may apply.

We use what you submit to:

• send you a real example SIT (a short catch-up email written by Andrew), if you selected “read,”
• offer to set up a short coaching session over email or a call, if you selected “write,”
• add you to a low-volume update list (typically once every couple of weeks), if you selected “interest in updates,”
• understand which traffic sources are reaching us (using the URL parameters above),
• recognize you and apply your per-account coach usage limit, if you sign in with Google,
• save your drafts and a record of the SITs you send, so they sync across your devices and you can see your history, if you sign in with Google,
• read your Google Contacts, or contacts you upload from a CSV or vCard file (names, emails, and phone numbers), to fill your recipient picker, if you connect or upload contacts,
• send the SIT you wrote from your Gmail account, if you choose “Send via Gmail,”
• show you the replies to a note you sent, beside that note in the app, if you turn on reading replies,
• show someone the times you are free, and put an agreed get-together on your calendar and invite the person you are meeting, if you connect your calendar,
• respond to you if you write to us, and
• comply with applicable law.

We do not use your information for advertising, profiling, or sale to third parties.

Stay in Touch’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not transfer or sell Google user data for advertising, and we do not use it for any purpose other than providing and improving the features described above.

We use these service providers (“sub-processors”) to operate this Site. Each processes only what is necessary for its role:

• Formspree (formspree.io) receives form submissions and forwards them to our inbox.
• Vercel (vercel.com) hosts the Site, serves it to your browser, stores the photos you upload as files (Vercel Blob, served from unguessable public links), and provides privacy-friendly, cookieless analytics (Vercel Web Analytics) that count visits and basic usage.
• Cloudflare (cloudflare.com) manages DNS and provides SSL.
• Google (google.com) provides optional Google Sign-In, Google Contacts, Gmail sending, reading the replies to notes you sent, and your calendar. If you sign in, Google authenticates you and shares your name, email, and profile photo with us. If you connect contacts, Google’s People API provides your contacts’ names, email addresses, and phone numbers on a read-only basis. If you send through Gmail, Google’s Gmail API sends the message you wrote from your account. If you turn on reading replies, the Gmail API returns the threads started by the SITs you sent. If you connect your calendar, Google’s Calendar API returns your free and busy blocks, and creates or removes the one event for a get-together you agreed to.
• Resend (resend.com) stores your email address as a contact and delivers email from us (a welcome note and the occasional update).
• Twilio (twilio.com) sends the text messages (SMS and RCS) you choose to send and routes replies back into the app.
• Neon (neon.tech), provided through Vercel, is the database that stores your account, your drafts, and your sent-SIT records when you are signed in.
• Anthropic (anthropic.com) provides the AI writing coach: when you ask for help, your draft text is sent to Anthropic’s API to generate suggestions, and (if coach memory is on) to distill the notes described above. Anthropic does not train on this data.

If we add or change a sub-processor in a way that materially affects how your data is handled, we will update this page and, where required, notify you.

We use commercially reasonable measures to protect submitted data, including HTTPS in transit and access controls on the inbox where submissions arrive. No transmission method is perfectly secure, and we cannot guarantee absolute security, but if we ever become aware of an incident affecting your data we will notify you promptly where required by law.

We keep your submission while you remain on the update list or until you ask us to delete it. If you ask us to delete, we will delete within seven (7) days. We may retain a minimal record (your email address and the fact of deletion) for legal-compliance and abuse-prevention purposes for a limited additional period.

Details you give about yourself. When someone asks you for your contact details through Stay in Touch and you fill them in, we keep what you entered so that you can correct it once instead of repeating yourself, and so a later request from someone else arrives already filled in for you to check. We keep it as yours: if the person who asked you closes their account, your details stay with us on these same terms rather than being deleted with them. If you have an account and close it, we delete them.

We do not sell or rent this information, and we do not use it to advertise to you. Only you and the people who ask you for it ever see it — a request only ever shows a person their own details, never anyone else’s. You can ask us what we hold, correct it, or delete it at any time at hi@sit-app.com, and we will respond within seven (7) days.

You can:

• unsubscribe at any time using the link in any email we send, or by replying “unsubscribe,”
• ask us what we have on you,
• ask us to correct it,
• ask us to delete it,
• ask us for a portable copy of it.

To exercise any of these rights, write to hi@sit-app.com. We will respond within seven (7) days.

We are not currently targeting users in the European Economic Area, the United Kingdom, or California, but we recognize you may still find us. If you are located there:

• GDPR (EEA/UK). You have the rights listed above, plus the right to lodge a complaint with your national data-protection authority. Our lawful basis for processing your email is your consent (your submission of the form).
• CCPA/CPRA (California). You have the rights to know, correct, delete, and portability described above, and the right not to be discriminated against for exercising them. We do not sell or share personal information for cross-context behavioral advertising.

Stay in Touch is not directed to children under 13 (or under 16 in the EEA/UK). If you are under that age, please do not submit the form. If we learn we have collected information from a child under that age, we will delete it.

The Site is operated from the United States, and our sub-processors are based in the United States. If you submit from outside the U.S., your information will be transferred to and processed in the U.S.

We may update this policy as Stay in Touch evolves. The “Last updated” date below will reflect any change. If a change is material (new categories of data, new sub-processors, new uses), we will email everyone on the update list before it takes effect.

hi@sit-app.com