Privacy Policy

Capsulo · Last updated: July 17, 2026

Capsulo is a time capsule app. What you write is personal. This policy explains what we collect, how we use it, and what we will never do with it.

1. What we collect

We collect only what the app needs to work:

Account information — your email address and display name, provided when you sign up with email, or shared with us by Google or Apple if you sign in with those providers (see "Signing in with Google or Apple" below).
Capsule content — the messages, photos, and voice recordings you attach, unlock dates you choose, and mood or prompt selections you make. This content is yours and is only readable by you and the people you explicitly share it with.
Device token — a push notification token generated by your device so we can deliver unlock notifications to you via Firebase Cloud Messaging (FCM). We do not use this token for advertising.
Timezone — auto-detected once at signup so your capsules unlock at 7am in your local time. Not shown to other users.
Usage metadata — capsule counts, storage used, subscription status. Used to enforce plan limits and show you your storage usage in the app. Not sold or shared.
Crash reports — if the app crashes, anonymised diagnostic information (device model, OS version, stack trace) is sent to Firebase Crashlytics. This contains no capsule content or personal identifying information beyond a random device ID.

Signing in with Google or Apple

If you choose "Continue with Google" or "Continue with Apple" instead of creating an email/password account, that provider shares your name and email address with us so we can create your Capsulo account — we never see or store your Google or Apple password. This sign-in is handled by Supabase Auth on our behalf. Google's and Apple's own privacy practices for their sign-in services are described at policies.google.com/privacy and apple.com/legal/privacy.

2. What we do not collect

We do not track your location.
We do not read your contacts (you type recipient emails manually).
We do not run advertising SDKs or analytics beyond crash reporting.
We do not sell, rent, or share your data with third parties for marketing.

3. How your data is stored

Your account information and capsule content are stored in Supabase — a managed PostgreSQL database hosted on AWS infrastructure in the US region. Data is encrypted in transit (TLS) and at rest (AES-256).

Photos are stored in Supabase Storage in a private bucket. Only you and the recipients you have explicitly invited can access them. Direct URLs are signed and time-limited; they cannot be guessed or shared without your action.

Crash diagnostic data is stored in Google Firebase Crashlytics, and push notifications are delivered via Google Firebase Cloud Messaging (FCM). Both are subject to Google's privacy policy.

4. Who can read your capsules

Your capsule content is protected by database-level Row Level Security policies. The rules are strict:

Solo capsule — only you can read it, and only after the unlock date.
Gift capsule — the sender can see the title and unlock date. Only the recipient can read the message, and only after the unlock date.
Group capsule — the owner and contributors can each read their own contribution before unlock. After unlock, all contributors can read everyone's messages.

Capsulo staff cannot read the content of your capsules. We do not have a "view as user" admin panel. Access would require direct database access, which is restricted to automated backend processes only.

5. Purchases and payments

Capsulo Pro is a one-time purchase (not a subscription) handled entirely by Google Play (Android) and Apple App Store (iOS). We never see or store your card number, UPI details, or any payment credentials. Your plan is synced to our database as a plain string (free or pro) via RevenueCat, which also lets you restore a previous purchase if you reinstall the app or switch devices. RevenueCat's privacy policy is available at revenuecat.com/privacy.

6. Push notifications

If you grant notification permission, your device token is stored so we can send you unlock notifications, gift capsule alerts, and special day reminders. You can disable notifications at any time in your device settings or in Capsulo's Profile > Notifications settings. Disabling notifications does not affect your ability to use the app.

7. Data retention

Your data is retained for as long as your account exists. If you delete your account from Capsulo's Profile page:

Solo capsules you own are deleted immediately.
Gift capsules you sent are transferred to the recipient.
Group capsules you owned are transferred to the earliest contributor.
All remaining personal data (account record, device tokens, special days, dismissed nudges) is removed within 30 days.

A 30-day soft-delete window exists so you can recover your account if the deletion was accidental. After 30 days the deletion is permanent and cannot be reversed.

8. Children's privacy

Capsulo is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us at saidinesh1020@gmail.com and we will delete it promptly.

9. Your rights

You can, at any time, from within the app:

Access your account information and capsule content — everything you've stored is visible to you in the app itself.
Correct your display name, avatar, and other profile details from the Profile page.
Export your data by requesting a copy — email us at saidinesh1020@gmail.com and we will send you a machine-readable export within 30 days.
Delete your account and data as described in "Data retention" above.

If you are in a jurisdiction with statutory data protection rights (e.g. GDPR, CCPA), these rights are provided in addition to, not instead of, any rights you already have under applicable law.

10. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date at the top of this page and, where appropriate, notify you in-app. Continued use of Capsulo after changes become effective constitutes your acceptance of the revised policy.

11. Contact

Questions about privacy? Email us at saidinesh1020@gmail.com.

Developer contact: Saidinesh · saidinesh1020@gmail.com