privacy_policy.txt

privacy policy

EFFECTIVE OCTOBER 14, 2026 · LAST UPDATED OCTOBER 14, 2026

the short version

  • Your diary is yours. We store it so it syncs to your phones, and that's what we use it for.
  • No ads. No selling or renting your information. No tracking you across other apps or websites.
  • No followers, no public profile, no feed. Nothing you write is shown to other people unless you share it yourself.
  • You need to be 13 or older to use heart.zip.
  • You can delete your account and everything in it whenever you want.

who we are

heart.zip is a mood check-in, diary and mini-games app run by its developer ("we", "us"; full details are in the contact section at the bottom of this page). If you have any question about your information, email hello@heartzip.app.

what we collect

informationwhy we need it
Your email address or phone numberTo sign you in with a one-time code and keep your account secure. We don't use it for marketing.
Your birth month and yearTo make sure you're old enough to use heart.zip (13+) and to know whether you're a teen, so we can apply the extra protections teens get. We don't ask for your full birthday.
Check-ins: mood, energy level, what your day was mostly about, the best part of your day, quick-fire answersTo show them back to you in your month view, diary and recap cards, and to sync them to your other devices.
Diary pages you writeSame as above.
Photos you add to a day, and your profile pictureSame as above. Photos are kept in private storage that only your account can open.
Your "my corner" profile: display name, bio, now playing, about me answers, top 3, sticky note, theme, wallpaper, font and stickersTo show your corner to you and keep it the same on every device. It is not public.
Arcade best scoresTo remember your best score for each game.
Your daily reminder time, if you turn reminders onTo remind you to check in. The reminder is scheduled on your phone; the time isn't sent to us.
Subscription status (whether mood+ is active, and when it renews or ends)To unlock mood+ games and features you paid for.
Technical information: sign-in tokens, and the IP address and request details our servers see when your app connectsTo keep you signed in, run the service, and protect it against abuse. Server logs are kept for a short period by our hosting provider.

We do not collect your contacts, precise location, advertising ID or browsing history, and we don't use cookies for tracking or advertising.

Payments. If you subscribe to mood+, Apple or Google handles the payment. We never see or store your card details.

how we use it

  • To run heart.zip for you: saving, syncing and showing your check-ins, diary, photos, profile and scores.
  • To sign you in, keep your account secure, and prevent abuse.
  • To provide mood+ if you subscribe, including restoring it on a new phone.
  • To answer you if you contact us.
  • To meet legal obligations.

We don't read your diary. The people who run heart.zip only access account data when you ask us to (for example to help with a problem), when it's needed to keep the service safe, or when the law requires it.

We don't use your diary, photos or check-ins for advertising, and we don't use them to train artificial intelligence models.

who we share it with

We don't sell or rent your personal information, and we don't "share" it for targeted advertising. We only use these service providers to run the app. They may only use your information to provide their service to us:

  • Supabase: hosts our database, sign-in and photo storage (servers in the United States).
  • RevenueCat: manages mood+ subscriptions. It receives your account ID and purchase information from Apple or Google, never your diary.
  • Apple and Google: process mood+ payments and deliver the app.
  • Our email and text-message providers: send your sign-in codes.

The app's fonts and graphics are built in, so opening heart.zip doesn't contact any advertising or analytics company.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of heart.zip (in which case this policy would still apply to your information).

Things you share yourself. When you post a mood card or "my corner" card to Instagram, Snapchat or anywhere else, that image is shared under that app's rules. You choose what goes on a card, and your diary text is never put on one.

how we protect it

  • Everything is sent over encrypted connections (HTTPS), and our hosting provider encrypts stored data.
  • Database rules make sure every account can only read and change its own check-ins, diary, photos, profile and scores.
  • Sign-in uses one-time codes, so there's no password that can leak.
  • Deleting your account removes your photos from storage and your account from our database right away.

No system is perfectly secure. Your diary is not end-to-end encrypted, which is why we limit who can access it as described above. If we ever learn of a breach that affects you, we'll tell you as the law requires.

how long we keep it

We keep your account information for as long as your account exists. When you delete your account, your check-ins, diary pages, photos, profile and scores are deleted from our live systems immediately, and from all of our systems within 30 days. Backups held by our hosting provider are overwritten on their regular schedule. We may keep limited records longer if the law requires it (for example, purchase records).

your choices and rights

  • See and change your information: everything you've written is in the app, and you can edit it there.
  • Delete your account: in the app, go to my corner → privacy.txt → delete my account, or email us.
  • Get a copy: email us and we'll send you a copy of your data.
  • Cancel mood+: in your Apple or Google subscription settings. Deleting your account does not cancel a subscription by itself.

Depending on where you live (for example the EU, the UK, Brazil or California), you may have extra rights: to access, correct, delete or move your information, to object to or restrict how it's used, and to complain to your local data protection authority. Email us to use any of these rights. We won't treat you differently for using them. Where the EU or UK GDPR applies, we use your information because we need it to provide the app you asked for (contract), to keep it safe (legitimate interests), and to meet legal obligations.

kids and teens

heart.zip is for people 13 and older. We don't knowingly collect personal information from children under 13. If you're a parent and believe your child under 13 has an account, email us and we'll delete it.

If you're under 18, or under the age of digital consent where you live (for example 14 in Spain or 16 in Germany), please use heart.zip with a parent's or guardian's permission. On iPhone and Android, purchases by younger users go through the family's approval settings (Ask to Buy or Family Link).

if you're going through something hard

heart.zip is a diary, not a crisis or medical service, and nobody monitors what you write. If you're thinking about hurting yourself or you're in danger, please reach out right now: call or text 988 (Suicide & Crisis Lifeline, US), call your local emergency number, or talk to an adult you trust.

international users

Our servers are in the United States. If you use heart.zip from another country, your information is transferred to and stored in the United States, with the protections described in this policy and, where required, standard contractual safeguards.

changes to this policy

If we change this policy, we'll update the date at the top. If a change is important, we'll tell you in the app before it takes effect.

contact

Nathalie Guillen
Email: hello@heartzip.app