user2989

Verified purchaser

Deals bought: 128Member since: Nov 2023
1 stars
1 stars
Aug 20, 2026

BEWARE!!! Critical Issues!!!

I have one code (one device) plan. The page where you can see logged in users and log them out has a public url without logging in. After logging out the user on this page, he can still edit the notes until the page is refreshed. In addition, the already logged-out android device can log in again with one click, without authorization (still has an invitation)

Founder Team
elenafromletterly

elenafromletterly

Sep 3, 2026

Hi, thank you for raising these concerns. We’d like to clarify a few important points.

The Account Manager page is private and account-specific. The link to it is sent directly to your account email, so someone cannot simply find this page and access your account management area.

Also, the Account Manager never gives access to the notes of other people using the devices you’ve activated. Their notes and content are not visible there.

Device access is determined by the number of active devices assigned to a particular email. If you remove a device in Account Manager, its paid access is revoked. If the app is still open at that moment, the change may only become visible after the page/app refreshes.

Removing a device does not delete the user’s Letterly account or their existing notes. Instead, that account moves to the Free plan, where they can continue managing their most recent 10 notes. This is why access to the notes does not disappear completely after the device is removed.

We take security concerns seriously, so if anything still looks unexpected, please email us at [email protected] with the details and we’ll be happy to investigate the exact case.

Helpful?
4
Share
Ratings