Privacy Policy

Last updated: October 25, 2026

Heartly holds things about the people you care about, so we keep what we collect small, say plainly where it goes, and let you take it all away. This policy explains what Heartly collects, why, who else sees it, how long it's kept, and what you can do about it.

Gemite Labs Inc. ("Heartly", "we") runs Heartly and is responsible for your information. You can reach us at [email protected].

What Heartly collects

What you give it

• Your email address, to sign you in. We email you a one-time code; there's no password. If you sign in with Apple or Google instead, we keep which one, its id for you, and the email it gives us, and nothing else from it: not your name or photo. If you choose Apple's Hide My Email, that's a private address Apple forwards to you.
• The people in your Circle: their names, how you know them, their birthdays and other dates, and a photo if you add one.
• What you keep about them: moments, notes, plans, updates, how things went, reminders, and photos.
• What you tell Heartly: the words you type, and recordings when you speak (see below for how briefly recordings are kept).
• Things you share in from other apps: the text or link you share.
• Your settings: your time zone and when you'd like reminders.
• Feedback you send from the account screen, with which version of the app and kind of phone it came from, so we can read it and reply by email.

What your phone tells it

• A push token, so reminders can reach your phone, and which kind of phone it is (iPhone or Android).
• The IP address you signed in from, kept with your sign-in session.

From your contacts, only when you ask

When you choose to bring people in from your contacts, Heartly reads names and dates on your phone to show you who has a birthday or anniversary. Only the people you choose are sent to Heartly, with their names and those dates. Nothing else in your contacts leaves your phone, and Heartly never reads them unless you ask.

What Heartly does not collect

Heartly doesn't read your messages, your calendar, your location or your other apps. It has no ads and no advertising trackers.

On our website

• If you join the waitlist, your email address, to tell you when Heartly launches and now and then what's new. It's never shared or sold.
• Visits are counted without cookies, and only as: whether you came from a search, a social site or another link, any campaign named in the link, and whether you were on a phone. We don't record your IP address, your browser or anything else about who you are, and a browser set not to be tracked isn't counted.

Usage counts

We record what happens in the app as counts, such as that a capture was made or a reminder arrived, so we can tell whether Heartly works. These records never contain names, words you wrote, or anything about the people in your Circle.

How much Heartly's AI is used is recorded for each request: which feature, which model, how many tokens or seconds it took, and for which account, so that we know what it costs. Never what was sent or what came back. It's deleted with your account.

How it's used

Only to run Heartly for you:

• to keep what you add, show it to you, and remind you about it;
• to read what you tell Heartly and suggest how to keep it, and to suggest messages and gift ideas when you ask;
• to sign you in and keep your account secure;
• to know whether you have Heartly Plus;
• to understand, from the usage counts, whether Heartly is working.

We don't sell your information, use it for advertising, or use it to train AI.

Who else sees it

We use a small number of service providers to run Heartly. Each one sees only what it needs:

People at Heartly don't see what you keep. The tools we use to run Heartly show counts, dates and whether things worked, never your words. The one exception is fixing a fault: when something you told Heartly couldn't be read, one of us may open that one thing, and only after writing down why. Who looked, when and why is recorded, and can't be removed.

We'll also disclose information if the law requires it, and we'd tell you first where the law lets us.

How long it's kept

• What you keep stays until you delete it or your account.
• The words you type or say to Heartly are cleared 30 days after you keep what Heartly made of them. A capture still waiting for you to keep it keeps its words until you keep it or throw it away.
• Recordings are deleted as soon as they've been turned into words. Heartly never stores them.
• Exports are deleted after 7 days.
• Waitlist addresses are kept until you take yours off, with the link in any email we send, or by writing to [email protected].
• Server logs, which record IP addresses but never what you write, are kept no longer than 30 days.
• Sign-in sessions, with the IP address you signed in from, are deleted once they expire after 90 days, or when you sign out. Sign-in codes are deleted once they expire.
• Forgetting a person, moment or note deletes it, along with the words of anything you told Heartly about it.
• Deleting your account deletes everything Heartly holds about you, including the usage counts and any feedback you sent. Our own record of what we did for the account, such as deleting it when you asked, stays, without your account. So does anything you write about why you're leaving as you delete it, with only whether you were paying and how long you'd had your account.

Service providers keep what they receive only as described above.

What you can do

• See and change everything Heartly holds, in the app.
• Export all of it, as JSON or spreadsheets with your photos, from the account screen.
• Forget any person, moment or note, which deletes it.
• Delete your account, and everything with it, from the account screen.
• Turn off reminders for one person, or notifications for Heartly altogether.
• Ask us about anything here at [email protected]. We answer within 30 days.

Where it's processed, and your rights

Heartly's servers are in the United States, so whichever country you're in, what you keep in Heartly is stored and processed there, with a copy of some of it on your phone. The providers above process what they receive in the United States too, except that Anthropic may process it elsewhere, each under the terms described above.

Wherever you live, you can see, correct, export and delete what Heartly holds yourself, in the app, and ask us about anything else. If you're in the European Union or the United Kingdom, we use your information because you've asked us to run Heartly for you, and we keep usage counts and protect accounts because we have a legitimate interest in Heartly working and being safe. You can object to that, or complain to your local data protection authority. In Canada, you can complain to the Office of the Privacy Commissioner of Canada.

We don't sell your information or share it for advertising, as the laws of California and other US states define those terms.

Keeping it safe

Information travels to and from Heartly over encrypted connections, and what you keep in Heartly is encrypted where it is stored. Our database is backed up every day and backups are kept for 7 days, so something you delete or forget is gone from them within 7 days. Sign-in codes and session tokens are stored only as one-way digests, so a copy of the database can't be used to sign in.

Children

Heartly isn't for anyone under 16, and we don't knowingly collect information from them. If you think a child has signed up, tell us and we'll delete the account.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.