Privacy Policy

Last updated: 12 June 2026

HeartFull ("we", "us", "our") operates the HeartFull mobile application and website at heartfull.online (the "Service"). This policy explains what data we collect, why, and how we protect it.

1. Data We Collect

Account data: Name, email address, phone number, date of birth, gender, and dating preferences you provide during sign-up.

Profile content: Photos, videos, and bio text you upload to your profile.

Messages: Text, voice, and photo messages you send to other users through the Service.

Location: Approximate location (city-level) when you grant permission, used to tag posts and improve nearby matching. We do not track your location continuously.

Usage data: Device type, browser, app version, and crash reports to improve the Service.

Push tokens: Firebase Cloud Messaging tokens to deliver notifications. Tokens are deleted on sign-out.

2. How We Use Your Data

• To create and maintain your account
• To match you with compatible people based on your preferences
• To deliver messages and notifications between matched users
• To display your profile to your matches
• To enforce our community guidelines and prevent abuse
• To improve the Service and fix bugs

3. Data Sharing

We do not sell your personal data. We share data only with:

• Other users: Your profile (name, photos, bio, age) is visible to people you are matched with.
• Service providers: Firebase (hosting, database, auth), Cloudinary (photo/video storage), Google Cloud (backend). These process data on our behalf under their own privacy policies.
• Law enforcement: If required by law or to protect safety.

4. Data Storage & Security

Your data is stored in Google Cloud Firestore (US region) with encryption at rest and in transit. Photos and videos are stored on Cloudinary with secure URLs. We use Firebase Authentication for identity management.

5. Data Retention

Your data is kept as long as your account is active. When you delete your account, we delete your profile, photos, and messages within 30 days. Some data may be retained in backups for up to 90 days. Archived conversation data (from blocks/reports) is retained for safety investigations.

6. Your Rights

You can:

• Access your data through your profile settings
• Correct your profile information at any time
• Delete your account and all associated data from the profile settings page
• Withdraw consent for location access through your device settings

For data requests, contact privacy@heartfull.online.

7. Age Restriction

The Service is for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover an underage account, we will delete it immediately.

8. Cookies & Local Storage

The web app uses browser local storage for preferences and Firebase's IndexedDB cache for offline access. We do not use third-party tracking cookies or analytics beyond basic Firebase Analytics.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the app or by email. Continued use of the Service after changes constitutes acceptance.

10. Contact

HeartFull
Email: privacy@heartfull.online
Website: heartfull.online