Privacy

Hart stores the itineraries you save and write, and nothing else about you that it does not need. There is no advertising, no analytics, no third-party tracking, and no sale of anything to anyone. Hart asks for an email address and a password so your account can be reached from more than one place — and asks for nothing else to identify you.

When you first open Hart it creates an anonymous account so the app works immediately — that account is a random identifier, tied to nothing about you. After the short setup, Hart asks you to add an email address and a password to it.

That is the same account, not a new one. Anything you wrote before adding an email stays exactly where it was; the email is added to the account you already had.

One thing worth knowing before you choose a password: Hart cannot currently send you a reset email, so a forgotten password cannot be recovered and the account behind it cannot be reached again. Keep it somewhere safe.

Your email address is used to identify your account and nothing else. Hart does not send marketing, does not share it, and does not show it to other people who use Hart.

• Your email address. Used to identify your account when you sign in, and for nothing else.
• An account identifier. A random ID created on first launch. It is attached to everything below.
• Profile details you choose to enter. A first and last name, a username, a short bio, a city, your taste tags, and a profile picture if you add one. All of it is optional; skipping onboarding leaves it empty.
• Itineraries and saves. The itineraries you write — titles, descriptions, and the places on them, including addresses and notes — and which ones you have saved.
• Planned dates. When you plan a date with someone, the date and time and any notes the two of you write together.
• Memories. Private journal entries about dates you finished, and any photos you attach to them.

• No phone number. Signing in uses an email address and a password; Hart never asks for a phone number.
• Your password, in readable form. It is handled by Supabase Auth, which stores a hash. Nobody at Hart can read it, which is also why nobody at Hart can tell you what it was.
• No device location. The city on your profile is one you pick from a list. Hart never asks for location access and never reads your position.
• No advertising identifiers and no analytics. Hart contains no advertising SDK, no analytics SDK, and no crash-reporting service.
• No tracking. Hart does not track you across other apps or websites, and shares nothing with data brokers.

• The featured catalog is public. Those itineraries are written by us, not by users.
• Itineraries you write are private unless you choose otherwise. Every Hart you write starts private: only you can see it, plus anyone you send it to as a planned date. You can choose to publish one to the public catalogue, and you can withdraw it again at any time.
• Publishing a Hart publishes its stops. That means the addresses and the notes you wrote on them, not just the title. If a stop says where you live, do not publish that Hart. Nothing you wrote before this option existed was published — those Harts stayed private, and still are.
• Public Harts are filtered and can be hidden. Text is checked before a Hart becomes public, and a Hart that several people report is hidden automatically while it is looked at. Being hidden does not change your setting, and you are told on the Hart itself.
• A planned date is visible to its two participants and to no one else. Your shared notes are not readable by anyone outside that pair.
• Memories and their photos are yours alone. Photos attached to a memory are stored privately and are not readable by other accounts.
• Your name, username, city and picture can be seen by people you plan a date with, and by anyone who can already see an itinerary you wrote — which today means only those same people, because the itineraries you write are private. They appear on a read-only profile so they know who they are planning with. Your bio, your taste tags, your birthday and your email are never shown to anyone. Removing your picture in Profile → Edit profile deletes the image, not just the link to it.
• You can report or block anyone whose profile you can see. Blocking works in both directions: neither of you can accept the other's invitations afterwards. Reports go to us, and are not visible to the person reported — or to you afterwards.
• If you send someone a link, they see the itinerary and your first name so they know who invited them. They do not see your shared notes, your memories or the rest of your profile.

Hart's data lives in a Postgres database, with authentication and file storage, operated by Supabase on Amazon Web Services in the United States. This website is served by Cloudflare. Those two providers process data on Hart's behalf and do not use it for their own purposes.

Open Hart and go to Profile → Delete account. That permanently removes your profile, the itineraries you wrote, your saves, your planned dates, and your memories and their photos. It cannot be undone.

Deleting the app from your iPhone is not the same thing. It leaves your account and everything in it on the server — you can sign back in later and find it again, which is the point of having an email on the account. If you want your data gone, delete the account rather than the app.

Hart is not directed to children and is not intended for anyone under 13. Hart does not knowingly collect information from children under 13.

If this policy changes in a way that affects what Hart collects or who can see it, the date at the top of this page will change with it.

Questions about any of this, or about your data, go to support@usehart.app.