Privacy Policy

You sign in with Google or X. Elmrow stores the account id from that sign-in, your display name, your handle, and the public half of your letter key. The private key stays on your device. Elmrow does not receive your Google or X password.

Letters and ward-square notes are sealed on your device before they are sent. Elmrow stores the sealed text, not the words. The people who run Elmrow cannot open them. A ward square can be read only by people who live there and hold that square's key. If you leave, you lose that key.

The President and a ward's Mayor can see who lives in a ward, read reports, and remove someone from a ward or from the city. They cannot open private letters.

A passphrase of at least 12 characters locks the key on this device. A backup file is optional. It is sealed with that passphrase and saved only where you put it. Elmrow does not keep a copy of the backup.

A voice, camera, or screen call is sealed between the devices on the call. Elmrow passes the setup, not the sound or the picture. Elmrow can see who is ringing whom. The Android app still blocks screenshots during a call. A browser on a computer may not.

The installed Elmrow app blocks screenshots and screen recording. Opening Elmrow in a phone browser does not.

Elmrow does not sell your profile, your letters, or your ward. There are no ads built from what you write.

If this policy changes, the date at the top changes with it.