Heartsong Privacy Policy

Effective Date: September 30, 2026
Last Updated: October 1, 2026

Heartsong is operated by Heartsong Inc. ("Heartsong," "we," "our"). This Privacy Policy explains what the Heartsong iOS app, its Apple Watch companion, the Heartsong web app, and our public website do with information about you.

Three commitments run through everything below: we do not sell your data, we do not advertise against it, and we do not track you across other companies' apps or websites.

The short version

Your heart data drives the music, live, on your device. It is also stored with your account so your sessions follow you between devices.
An account is required. You can sign up with an email address, or with Apple or Google.
Recordings are the music Heartsong generated, not a recording of the room. Heartsong has no microphone access.
We never see your payment details. Apple bills subscriptions; we only learn whether one is active.
Group chat is private to the group, but it is not end-to-end encrypted.
A shared Heartsong link never carries biometrics — music and heartbeat pulse only.
Signing out clears the phone; your data stays in your account.
Deleting your account erases it: your account, your sessions and recordings, and everything you posted in groups (section 7).

1. Information we collect

1.1 Health and fitness data (Apple HealthKit)

With your permission, Heartsong reads from HealthKit:

Heart rate, heart rate variability, and heartbeat series — to shape the music and measure calm.
Respiratory rate — for breath-synced audio and sleep sessions.
Resting heart rate, walking heart rate average, sleeping wrist temperature, and sleep — for your personal baselines.

The Watch app uses its motion sensors to estimate breathing and to notice movement. When a session ends, the Watch app saves it to Apple Health as a Mind and Body workout; that is the only thing Heartsong writes to HealthKit.

The readings a session records are stored on our servers with your account, so your history works across devices and on the web. Walking heart rate, wrist temperature, and sleep stay on your phone.

Your control: revoke access any time in Settings → Privacy & Security → Health → Heartsong. Heartsong keeps working, but the music stops responding to you.

1.2 Session data

For each session we store the soundscape and settings you chose, its times and duration, the readings above, how the music unfolded, the insights we compute, and any note or mood you add.

1.3 Audio recordings

Sessions are saved as audio files and stored with your account. They contain the music Heartsong generated and, if you turned it on, your heartbeat pulse track. They contain nothing from a microphone — Heartsong has no microphone permission.

1.4 Account and profile

Account — your email address, display name, and date of birth. Passwords are held by our sign-in provider; we never store your password.
Sign in with Apple or Google — we receive your name, email address (or Apple's relay address if you hide it), and an account identifier from them. Never your password.
Date of birth — used only to apply our age rules. It is never shown to other members.
Profile photo, if you add one.
Subscription status — your tier, and when a subscription renews or ends. We never receive your payment details.
When you accepted our Terms and Community Guidelines.

1.5 Community — groups, chat, invitations, and the Meditation Room

When you use community features we store the groups you create or join, the messages and photos you send, what you pin or share, your answers to scheduled sits, and your presence in a sit's room. Photos have their location and camera data removed.

What other members see — your display name, profile photo, messages, what you share, and your answers and presence for sits. Never your heart data.
Your email address is not shown to other members, except that a private group's owner and admins can see it.
Public groups and Open Circles can be seen by people outside them: the name, description, picture, labels, size, upcoming sits, and the display name of the owner or host. Their conversations cannot.
Invitations — when you invite someone by email, we store their address and send them an invitation. An invitation creates nothing until they accept.
Join requests, bans, and moderation — we keep a record of requests to join, and of moderation actions and their reasons.
Reports and blocks — if you report a message or a group, we keep the report and a copy of what was reported. Blocks are private: the person you block is not told.
Filtering and limits — we check text you post against a list of disallowed language and refuse matches, and we limit how fast messages and reports can be sent.

What our staff can see. Heartsong staff can see the list of groups and their members, can remove a member or a group, and review content that has been reported. Staff cannot add anyone to a group.

1.6 Shared Heartsong links

You can create a link to one of your recorded sessions.

The page shows the music, heartbeat pulse, waveform, soundscape, cover art, date, and your display name.
It carries no biometrics — no heart rate, no insights.
Anyone with the link can open it, without an account. Treat it as public.
Deleting the session takes its link down; deleting your account takes all your links down.

1.7 Devices and notifications

For each of your devices we store an identifier, a device name, a push-notification token, your time zone, your notification settings, and the app version.

The app also sends a random install identifier when it is first opened, so we can count installs; we link it to your account when you sign in. It stays with the phone when you sign out or delete your account.

Signing out stops notifications to that phone and removes your data from it, as though Heartsong had just been installed. Downloaded soundscapes and music, and the phone's own display and audio settings, stay. Anything not yet sent to us is sent first; the app warns you if something cannot be.

We send notifications for group messages, reminders for sits you said you would attend, group and account updates, and occasional service announcements. We do not send advertising. Settings → Notifications controls each kind.

1.8 Usage analytics

We run our own analytics — no third-party analytics service. It records which screens and features you use, tied to your account, and never your heart data, recordings, notes, or messages. We also count which soundscapes are played and for how long.

Your control: Settings → Privacy → Share Usage Analytics.

1.9 Diagnostics

Each session uploads a log of what the audio engine did, so we can find and fix problems. The app contains no third-party crash-reporting or diagnostics service. You can also choose to attach diagnostic logs to a support email; they may include heart-rate readings.

1.10 Our websites

The Heartsong web app sets one sign-in cookie, which expires after 7 days or when you sign out. Our public website sets only the cookies its host needs to serve the site. Neither sets advertising cookies or tracks you across sites. If you contact us through a form on our website, we use what you enter to reply.

1.11 What we do not collect

Location. Contacts. Calendar. Microphone or ambient audio. Payment information. Government identifiers. Advertising identifiers. Face, fingerprint, or voice prints.

The Heartsong iOS and Apple Watch apps contain no third-party SDKs.

2. How we use information

To generate music that responds to you and to show your history, insights, and baselines.
To sync your data across your phone, Watch, and the web.
To run groups, chat, invitations, and the Meditation Room.
To know what your account is entitled to, and to apply our age rules.
To send the notifications you asked for.
To make your experience better — see section 3.
To understand which features people use, if usage analytics is on.
To investigate problems you report.
To keep the Service safe — filtering, rate limits, reports, blocks, and moderation.

We do not sell your data, share it with data brokers, or use it for advertising. We never use health data for advertising.

3. How we use your sessions, and your privacy switches

Your heart rate and other readings shape the music as you meditate. We keep your sessions in your account so you can follow your practice. And we use them to make your experience better: they teach Heartsong what settles you, and, looked at together and de-identified, they show us how well the music is working. If you would rather we left your sessions out of that, email support@myheartsong.app and we will.

Two switches in Settings → Privacy give you more control:

Share Usage Analytics — permits the analytics in section 1.8.
Share Session Information — permits Heartsong staff to open your sessions under your name, to investigate an issue you report.

Even with that switch off, staff can see basic account information, such as your email address, devices, and session totals, when operating and supporting the Service.

4. Your data on your phone

Heartsong works offline once you are signed in: sessions record on your device and sync when a connection returns. Once your sessions are safely on our servers, your phone keeps your most recent ones and streams older ones from us.

5. Who your information is shared with

Other people, where you choose it: members of your groups, people who see a public group or Open Circle, anyone holding a shared link, and people you invite by email.

Heartsong staff, who need access to operate the Service, within the limits in section 3.

Service providers, who process data on our instructions and may not use it for their own purposes:

Google Cloud Platform — servers, database, and storage, in the United States.
Firebase Authentication (Google) — accounts and sign-in.
Apple — push notifications, Sign in with Apple, and subscription billing.
Google — Sign in with Google.
SMTP2GO — email for verification, password reset, and invitations.
Have I Been Pwned — checks new passwords against known breaches, without receiving the password.
Lovable — hosts our public website.
Font and script providers — serve the web app's fonts and libraries, and receive your browser's IP address.

Legal: we may disclose information where the law requires it, or to protect someone's safety or our rights. If Heartsong is acquired or merged, your information may transfer, and you would be told before a different policy applied.

Never: sold, rented, brokered, or handed to advertisers.

6. Where your data is stored, and for how long

Data is stored in the United States.

Sessions, readings, and recordings — until you delete them or your account.
Chat messages and group records — for as long as the group exists. A removed message is hidden from everyone but kept for our records. Deleting your account erases every message you sent.
Chat inside a sit — deleted shortly after the sit ends.
Reports and moderation records — kept, including after the group or the account is deleted, as our record of what was raised and what we did. A deleted account's name is removed from them.
Notification alerts — up to 90 days.
Device records — for the life of your account.
Server logs — 30 days. They record the pages requested, including searches.
Backups — database backups for 7 days. Our storage may keep earlier versions of files for longer.

7. Deleting your account

You can delete your account in the app or on our website. Deleting it erases it completely:

Your account: name, email address, date of birth, profile photo, sign-in, devices, settings, and usage analytics.
Your sessions: every reading and every recording.
Everything you posted in groups: your messages and photos, board posts, shared resources, the sits you scheduled, and the invitations you sent. Nothing is left in their place, and lines that named you go too.
Every shared link you created is taken down.

Groups you own pass to the group's longest-standing admin. A group with no other admin is deleted with your account; its members are told only that its owner deleted the group. The app lists those groups before you delete; to keep one, make another member an admin first.

We keep two things, without your name or email: your App Store purchase records, so Apple's notices about them can still be matched, and reports and moderation records about you. Remaining copies leave our backups in their normal rotation.

Deleting your account does not cancel your subscription. Cancel it in Settings → Apple Account → Subscriptions first.

8. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your data, and to object to or restrict how we use it. We do not sell or share personal information as California law defines it, and we will not treat you differently for exercising your rights.

In the app you can change your privacy switches, your notifications, and your HealthKit access, delete a session, leave a group, or delete your account. For anything else, email support@myheartsong.app. We respond within 30 days.

9. Security

Data is encrypted in transit and at rest.
We never store your password.
Recordings are kept in private storage.
Access to production systems is limited to staff who need it.

Group chat is not end-to-end encrypted. We can read it, and do so only when a message is reported, when the law requires it, or when you ask us to investigate a problem. Please don't put anything in chat you would not want us to be able to read.

No system is perfectly secure. If you find a vulnerability, please tell us at support@myheartsong.app.

10. Children

Heartsong is not for children under 16. We ask for a date of birth at sign-up, to apply the age rules: 16 for an account, 18 for public community features. We do not create an account for anyone under 16. If you believe a child under 16 has given us data, email support@myheartsong.app and we will delete it.

Heartsong is a wellness app, not a medical device. Our Terms of Service include the full health disclaimer.

11. Changes to this policy

We will update this policy as Heartsong changes and move the "Last Updated" date when we do. For a material change, we will tell you in the app or by email before it takes effect.

12. Contact

Heartsong Inc.

Email: support@myheartsong.app

This Privacy Policy covers the Heartsong iOS app, the Heartsong Apple Watch app, the Heartsong web app at console.myheartsong.app, and our public website at getheartsong.app.