Privacy Policy

Last updated: June 1, 2026

1. Overview 2. Information We Collect 3. How We Store & Protect Your Data 4. Peer-to-Peer Messaging & Data Routing 5. Third-Party Services 6. Device Permissions 7. Children's Privacy 8. Parental Rights & Removal 9. Data Security 10. Data Retention & Deletion 11. Your Rights 12. Changes to This Policy 13. Contact Us

1. Overview

HeartX (operated by HeartX Technologies) is a peer-to-peer social messaging application. We are committed to protecting your privacy. This Privacy Policy explains how HeartX collects, uses, stores, and protects your personal information — and what rights you have regarding that data.

Because HeartX is built on a peer-to-peer architecture, the nature of our data collection is fundamentally different from traditional social apps. We encourage you to read this policy carefully.

2. Information We Collect

The following table summarizes what information we collect and how:

Account Information (email, nickname, password hash) Provided by you at registration. Stored locally on your device only.
Messages & Content Created by you. Transmitted directly peer-to-peer. Never stored on our servers.
Device & Technical Data Basic technical data (OS version, app version) may be collected for crash reporting and service improvement purposes.
Location Data We do NOT collect GPS, IP-based, or any form of location data.
Contact Lists We do NOT access, collect, or store your device contacts.
Camera, Microphone, Photos Only accessed if you voluntarily choose to send media in messages. Not stored on our servers.
Browsing & Usage Analytics We do NOT use tracking pixels, analytics tools, or behavioral profiling.
Advertising Data We do NOT collect, share, or sell any data to advertisers or ad networks.

3. How We Store & Protect Your Data

Your account information — including your email address, nickname, and a secure one-way hash of your password — is stored exclusively in a local database on your device. This data never leaves your device unless you explicitly choose to sync across your own devices through our built-in sync feature (which uses end-to-end encryption).

Your password is hashed using a secure one-way algorithm before storage. We do not store plaintext passwords.

If your device is lost, stolen, or you uninstall the app without a backup, your locally stored data will be permanently deleted and cannot be recovered by us.

4. Peer-to-Peer Messaging & Data Routing

HeartX messages are transmitted directly between users' devices via a peer-to-peer connection. This means:

5. Third-Party Services

HeartX does not integrate with any third-party analytics, advertising, tracking, or data broker services. We do not share your personal information with any external parties — not for advertising, not for research, not for any purpose.

In the future, if we introduce third-party services (such as a cloud backup provider), this policy will be updated and your consent will be obtained where required.

6. Device Permissions

HeartX may request the following device permissions:

Permission access can be revoked at any time through your device's Settings app.

7. Children's Privacy

HeartX is not intended for children under 13 years of age, and we do not knowingly collect personal information from minors.

Age Requirements

Our Terms of Service require users to be at least 13 years of age. We rely on users self-reporting their age during registration and do not independently verify age. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information.

COPPA Compliance (United States)

HeartX does not knowingly collect, use, or disclose personal information from children under 13 in a manner that would require compliance with the Children's Online Privacy Protection Act (COPPA). If you are a parent and believe your child under 13 has created an account, please contact us immediately.

GDPR / UK GDPR (European Economic Area & United Kingdom)

If you are located in the EEA or UK and your child is under the age at which parental consent is required in your country (typically 16, or lower in some member states), please do not permit your child to use HeartX, as we do not currently provide parental consent mechanisms. If we become aware of data collected from a child in the EEA/UK without appropriate consent, we will delete it promptly.

Other Jurisdictions

If you are subject to other children's privacy laws in your jurisdiction (such as Australia's Privacy Amendment Act or similar), HeartX's policy is to not knowingly collect data from minors and to delete any such data upon discovery.

Important: Because HeartX is a peer-to-peer application with no central message storage, we may not have the ability to delete content that your child has already sent to other users. We strongly encourage parents to discuss online safety and appropriate communication with minors who use this app.

8. Parental Rights & Removal

If you are a parent or guardian and your child has created an account on HeartX:

9. Data Security

We implement reasonable technical and organizational measures to protect your locally stored data, including:

No method of electronic storage or transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your device and account credentials.

10. Data Retention & Deletion

Because HeartX stores data locally on your device:

To request deletion of your account data from our limited systems (e.g., crash reports or support records), contact privacy@heartx.app.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at privacy@heartx.app. We will respond to your request within the timeframe required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, or applicable law. When we make material changes, we will update the "Last updated" date above and, where required by applicable law, obtain your consent before the new policy takes effect.

We encourage you to review this policy periodically. Your continued use of HeartX after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices — including if you believe a child has provided us with personal information without parental consent:

General Privacy: privacy@heartx.app
Safety & Children's Privacy: safety@heartx.app
General Support: support@heartx.app

We aim to respond to all inquiries within 30 days.