Privacy
SlothBox is a private correspondence app that uses your Apple Account and iCloud to store, synchronize, and share letters with people whose mail routes you accept. There is no separate SlothBox account, and the publisher does not operate a server that stores routine letters.
Your letters and iCloud
Letter text, revisions, and delivery timing are stored in CloudKit fields encrypted on your device. An accepted iCloud share gives your correspondent read-only access to the shared records. CloudKit also uses service metadata, including record identifiers and share participants, to synchronize data and control access.
SlothBox keeps protected local copies needed to run the app. Unplaced drafts and unsynchronized edits stay on the device where you create them. Opened, archived, ignored, and closed-route state is private to the recipient, with relevant state synchronized through that person's iCloud account.
iCloud's protection depends on Apple's services and your Apple Account settings. SlothBox does not promise universal end-to-end encryption. A recipient's device may synchronize an encrypted letter before its simulated arrival; the app keeps it sealed until arrival. That delay is an app behavior, not a cryptographic timed-release lock.
Invitations and recipient controls
You choose how to share invitation links through the system share sheet. An invitation link can be retained or forwarded by its recipient or the service used to send it. Send invitations through a trusted private channel. SlothBox does not upload your contacts.
Ignore Mail files a correspondent's mail quietly. Close Mail Route prevents future mail from that identity from appearing in the app and refuses new invitations from that identity. It does not send a closure receipt. Future content may still synchronize into a private quarantine; closure does not erase the sender's records.
Support and reports
Contact Support opens an email draft addressed to sloth-box@benriordan.com. Nothing is sent unless you choose to send it. Your mail provider handles the message and sender address, and the publisher can read them if delivery succeeds. SlothBox does not include or share letter text automatically.
Report Letter is available for an incoming letter that has arrived and been opened. You choose a reason and explicitly consent before the app prepares report text for your full review. The readable text includes the selected letter, sender label and app-scoped identity, letter/route/report identifiers, pickup and arrival dates, your report reason, report and consent timestamps, and the disclosure version. It does not include other letters or your contacts. You can then prepare an email whose body contains that report text, addressed to sloth-box@benriordan.com. Ben is responsible for handling reports received at this address.
The reporting email is separate from routine iCloud correspondence. Your mail provider and the receiving mailbox process the contents and sender address. The support/report mailbox is hosted by Proton Mail, and Ben is its only authorized inbox user. He uses received messages to handle support requests and reports. Ben checks received SlothBox reports daily; daily checking is not a guarantee of a response within 24 hours. The app does not automatically monitor routine letters or upload reports to a separate report queue.
Mail may report that a message was sent or queued. This does not prove that the report reached the support mailbox or was reviewed. Saving a Mail draft does not send it. If you cancel, sending fails, or Mail is unavailable, the app does not treat the report as successfully delivered. You can retry or share the same readable report text through another app; the app also displays the recipient address. Completing a share is not proof of sending or receipt. Any service or person you choose as a share destination can receive the report text. Opening ordinary Contact Support does not include a letter or submit a report automatically.
Notifications and filtering
Arrival notifications are optional. Their previews contain neither the sender nor letter text. Ignored mail does not generate arrival alerts or an app badge. Letter bodies are not exposed through Spotlight, widgets, or Siri in this release.
The compose filter runs on the sender's device. It can stop a limited set of prohibited phrases and offer an optional reflection prompt. It does not scan incoming letters. Composing a letter does not send its text to a moderation service.
Retention and deletion
Local app data may be included in device backups according to your device and backup settings. iCloud records can outlast an app installation. Removing the app is not a guarantee that all iCloud or backup copies are deleted.
Archive preserves a letter; it is not deletion. Recipients cannot erase a sender-owned letter through a read-only share. The inspected app does not provide a complete Delete All Data operation. Closing a route hides future mail and preserves earlier arrived letters; it does not erase all related data.
Ben deletes resolved support and report emails, and any downloaded copies, 30 days after resolution unless they are needed for an ongoing case or legal requirements. This is a manual operating practice, not an automatic deletion feature in the app. Copies in provider backups are governed by Proton Mail's retention practices. This policy does not promise that provider backups are erased when an inbox message is deleted.
Contact
For questions about this policy or to request deletion of support/report correspondence, email sloth-box@benriordan.com. This address is not an emergency service or a real-time safety channel.