Privacy Policy

Last updated: 22 September 2026

HeartFull ("we", "us", "our") operates the HeartFull mobile application and website at heartfull.online (the "Service"). This policy explains what data we collect, why, and how we protect it.

1. Data We Collect

Account data: Name, email address, phone number, age, gender, and dating preferences you provide during sign-up.

Profile content: Photos, videos, and bio text you upload to your profile.

Messages: Text, voice, and photo messages you send to other users through the Service.

Location: Approximate location (city-level) when you grant permission, used to tag posts and improve nearby matching. We do not track your location continuously.

Usage and diagnostic data: Device type, browser and user agent, app version, screen and connection capabilities, language, timezone, IP address, approximate country derived from the IP address, recent network history, and crash reports. We use this information to operate, secure, debug, and improve the Service.

Push tokens: Firebase Cloud Messaging tokens to deliver notifications. Tokens are deleted on sign-out.

2. How We Use Your Data

To create and maintain your account
To match you with compatible people based on your preferences
To deliver messages and notifications between matched users
To display your profile to your matches
To enforce our community guidelines and prevent abuse
To improve the Service and fix bugs

3. Data Sharing

We do not sell your personal data. We share data only with:

Other users: Your profile (name, photos, bio, age) is visible to people you are matched with.
Service providers: Firebase (hosting, database, auth), Cloudinary (photo/video storage), Google Cloud (backend), and country.is (approximate IP-country lookup). These process data on our behalf under their own privacy policies.
Law enforcement: If required by law or to protect safety.

4. Data Storage & Security

Your data is stored in Google Cloud Firestore (US region) with encryption at rest and in transit. Photos and videos are stored on Cloudinary with secure URLs. We use Firebase Authentication for identity management.

5. Data Retention

Your data is kept as long as your account is active. Device diagnostics keep the current device snapshot and up to 10 recent network observations per browser profile. These device records are deleted when you delete your account. When you delete your account, we delete your profile, photos, messages, and device diagnostics; some data may remain in backups for up to 90 days. Archived conversation data (from blocks/reports) is retained for safety investigations.

6. Your Rights

You can:

Access your data through your profile settings
Correct your profile information at any time
Delete your account and all associated data from the profile settings page
Withdraw consent for location access through your device settings

For data requests, contact privacy@heartfull.online.

7. Age Restriction

The Service is for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover an underage account, we will delete it immediately.

8. Cookies & Local Storage

The web app uses browser local storage for preferences and Firebase's IndexedDB cache for offline access. We do not use third-party tracking cookies or analytics beyond basic Firebase Analytics.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes through the app or by email. Continued use of the Service after changes constitutes acceptance.

10. Contact

HeartFull
Email: privacy@heartfull.online
Website: heartfull.online