Privacy Policy

This Privacy Policy explains how Final (the "App", "we", "us") handles information when you use our service. We have built Final to be deliberately minimal, and we collect only what we need to operate the service.

What we collect

When you send a message through Final, we receive and store:

• The name you choose to sign your message with
• The email address of the recipient you specify
• The text of your message (limited to 280 characters)
• A device identifier generated by your device (not linked to your Apple ID or any personal account)
• The IP address of the device that sends the request and the IP address of the device that opens the message link
• The date and time of each action

We do not collect names, email addresses, phone numbers, location, contact lists, photos, or any other personal information beyond what is listed above.

How we use it

We use the information collected for one purpose: to deliver the single message you have written to the recipient, and to enforce the rules of the service. Specifically:

• Your message and recipient email are used to send a single email through our email delivery provider (Resend).
• The recipient email and your device identifier are stored together to prevent you from sending a second message to the same recipient — the "one per person" rule.
• IP addresses are used to apply rate limits and to identify abuse.

Who we share it with

We share information only with the third-party providers we use to operate the service:

• Resend (email delivery) — receives the recipient email and message content for the sole purpose of delivery
• Supabase (database hosting) — stores the data described above
• Vercel (server hosting) — processes the network requests
• Upstash (rate-limit storage) — stores IP and device identifiers for limit enforcement

We do not sell, rent, or otherwise share your data with advertisers or third parties beyond what is required to operate the service. We do not use your data to build profiles or train models.

How long we keep it

Messages are stored indefinitely so that we can enforce the "one per person" rule. If you wish to have your message and associated data deleted, contact us at volodyakolchin@icloud.com and we will remove it within 30 days.

Rate-limiting counters and one-time security tokens are stored for at most 24 hours and are automatically deleted.

Recipient rights

If you have received a message through Final, you can use the "Report this message" button on the message page. Reports are reviewed by us, and the sender's device will be permanently blocked from sending any further messages through the service.

You can also contact us at volodyakolchin@icloud.com to request deletion of the message sent to your address.

Security

All communication with our servers happens over HTTPS. Messages are stored in encrypted databases provided by Supabase. We use one-time signed tokens to prevent unauthorized use of our delivery service.

Children

Final is not directed at children under the age of 17. We do not knowingly collect data from minors. If you believe a minor has used the service, please contact us at volodyakolchin@icloud.com.

Changes

If we make material changes to this policy, we will update the "last updated" date above. Continued use of the service after such changes constitutes acceptance.

Contact

For questions about this policy, write to volodyakolchin@icloud.com.