Last updated: August 3, 2026

Privacy Policy

Information handled by the app

The app may store information you enter or generate while using it, including:

• Sender and recipient names and addresses.
• Saved contacts created inside the app.
• Envelope drafts, selected envelope sizes, templates, colors, and fonts.
• Print history used for reprinting previous envelopes.
• App preferences such as appearance, language, and return address settings.
• Purchase entitlement status provided through Apple's StoreKit system.

How information is used

Information is used to provide the app's core features: envelope layout, address reuse, preview, printing, history, subscription access, and iCloud sync where available. We do not use this information for advertising or cross-app tracking.

What stays private

Sender and recipient names, postal addresses, contact details, envelope text, and your saved envelope records are used only for features you request. They are not included in Analytics or Crash Reports. We do not operate an account system and do not ask you to create an Envelope Printer account.

Contacts permission

If you choose to import an address from Contacts, iOS will ask for your permission. Contact information is used only to fill envelope fields or create a saved contact at your direction. You can disable Contacts access at any time in iOS Settings.

iCloud and CloudKit

Envelope Printer Studio uses Apple's iCloud and CloudKit infrastructure to sync user-created data across devices signed in to the same Apple ID, when iCloud is enabled. Apple processes iCloud data under Apple's own terms and privacy policies.

Printing

Printing is handled through iOS and AirPrint. The app prepares the envelope layout and sends it to the printer you select through Apple's system print interface.

Purchases and subscriptions

In-app purchases and subscriptions are processed by Apple through StoreKit. We do not receive or store your full payment card number. The app receives purchase status information from Apple so premium features can be unlocked or restored. With your permission, the app sends the purchased product, price, currency, and outcome to Firebase Analytics to measure subscription and paywall performance. It does not send your transaction ID, receipt, Apple ID, or payment card information to Firebase.

Analytics, advertising, and tracking

Only if you select "Share Insights" or later enable Usage Analytics, Envelope Printer Studio uses Google Firebase Analytics to understand feature usage and improve the app. Analytics events may include an app installation identifier, app version, device model and operating system, language, a general region derived by the service, envelope size and template choices, feature entry points, printing outcomes, PDF export, reprinting, paywall interactions, and the purchase metrics described above.

Analytics never receives sender or recipient names, postal addresses, contact details, envelope text, Core Data record identifiers, Apple account information, transaction identifiers, or receipts. The app uses the Firebase Analytics package without advertising identifier support, disables advertising personalization signals, does not request App Tracking Transparency permission, and does not track you across other companies' apps or websites. The app does not include a third-party advertising SDK.

Crash reports and diagnostics

Only if you select "Share Insights" or later enable Crash Reports, Envelope Printer Studio uses Firebase Crashlytics to receive crash reports and sanitized non-fatal technical errors. Reports may include crash stack traces, a Crashlytics or Firebase installation identifier, app version, device model, operating system version, memory and disk state, timestamps, and a limited technical description of the operation that failed. Free-form error descriptions and envelope or contact content are not attached to reports.

App Privacy summary

When you enable the relevant optional category, the App may collect:

• Device identifiers for Analytics and app functionality.
• Product interaction and purchase history for Analytics.
• Crash data and other diagnostic data for app functionality.

These categories are not linked to your identity, are not used for tracking, advertising, or third-party marketing, and are not used to determine credit or make eligibility decisions.

Your analytics and diagnostics choices

The initial privacy notice gives equally accessible choices to share optional insights or select "Not Now." Nothing is preselected, and Analytics and Crashlytics are not configured before you enable at least one category. You can customize the two categories independently or change either choice at any time under Settings > Privacy & Diagnostics. Disabling Usage Analytics stops future Analytics collection and resets Analytics data and its installation-level identifier on the device. Disabling Crash Reports disables automatic uploads and deletes reports waiting to be sent; the SDK's collection setting may fully take effect after the next app launch.

Data retention and deletion

Data saved in the app remains until you delete it, reset app data, remove the app, or delete the corresponding iCloud data from your Apple ID account. You can delete envelopes, contacts, and history from inside the app where those features are available.

Firebase Analytics event data is retained for no longer than 14 months under our Analytics configuration. Firebase Crashlytics generally retains crash stack traces and associated installation identifiers for 90 days before beginning deletion from active and backup systems. Disabling a category stops future collection but does not instantly erase reports that were already sent; those records expire under the applicable retention period. We do not enable a BigQuery export, so we do not create an additional analytics warehouse copy.

Service providers

Google LLC processes Analytics and Crashlytics data as our service provider under Firebase's applicable terms and privacy documentation. Learn more in Firebase Privacy and Security and Google's Privacy Policy.

Firebase services may process data on Google's global infrastructure. Data is protected in transit using HTTPS, and Firebase applies security controls described in its privacy and security documentation.

Your rights and controls

You can decline optional Analytics and Crash Reports, change either choice in the app, revoke Contacts access in iOS Settings, delete locally stored records in the app, and manage iCloud data through your Apple account. Where applicable law provides additional access, correction, deletion, restriction, or objection rights, contact us using the address below. Because the app has no account system and does not link Firebase data to your identity, we may need information from you to determine whether a request can be verified.

Children's privacy

The app is not directed to children and does not knowingly collect personal information from children for advertising or tracking.

Changes to this policy

We may update this Privacy Policy when the app changes or legal requirements change. The updated date at the top of this page will reflect the latest version.

Contact

For privacy questions or support requests, contact andychung.cc@gmail.com.