Heart Eyes Privacy Policy

Effective date: October 14, 2026
Last updated: October 14, 2026

This policy explains what information Heart Eyes collects, why, who it goes to, how long we keep it, and the choices and rights you have. We've tried to write it in plain English. If anything is unclear, email us at support@septasoftcanada.com.

1. Who we are

Heart Eyes (the "App") is provided by SeptaSoft Solutions Inc., Milton, Ontario, Canada ("we", "us"). It's offered in the United States and Canada. We're responsible for the personal information described here; for the purposes of the EU and UK General Data Protection Regulation (GDPR), we're its controller.

Privacy contact: support@septasoftcanada.com
Privacy Officer (the person responsible for personal information, Canada and Quebec): support@septasoftcanada.com (section 8.3)

2. The short version

Heart Eyes is a chat app for adults (18+) in the United States and Canada, with fictional AI characters. Your messages are processed by an AI model so your companion can reply, and stored so your companion can remember your conversations.
Your information is stored and processed in the United States, including if you live in Canada (sections 5 and 9).
You don't need to give us your email, phone number or real name to use Heart Eyes.
We don't sell your personal information, don't show ads, and don't use your conversations to train AI models.
Payments are handled by Apple or Google. We never see your card details.
You can delete a single conversation, or your whole account and everything in it, from inside the App at any time.
On a voice call (Heart Eyes Plus), your iPhone turns what you say into text on the phone itself. Your voice never leaves your phone: only the words are sent, and they're kept with your chat like any message (section 3.5).
Companions can know roughly where you are (your city and its weather) so their messages feel personal. You see exactly what they can see in Profile → Location, and you can change it, turn it off or clear it. Knowing when you travel, and the kind of place you're at (like "near a park"), are off unless you turn them on. We never use background location and never keep a history of where you've been (section 3.4).

3. Information we collect

3.1 Information you give us

Information	Details	Required?
Display name	The name you'd like companions to call you. It can be a nickname.	Optional
Relationship choice	Whether you want a girlfriend, boyfriend, partner or friend. With the gender preference, it may suggest your sexual orientation; we treat it as sensitive (section 4.2).	Optional
Saved account (optional)	If you choose "Save your account": your Apple, Google or email sign-in. We receive a sign-in identifier and, for Google and email, your email address (with Apple's "Hide my email", a relay address). Used only to sign you back in. With Apple, we also keep a token Apple issues to the App, used only to ask Apple to remove the App's Sign in with Apple access when you delete your account.	Optional
Companion gender preference	Which companions you'd like to see first (female, male, non-binary, or any).	Optional
Age confirmation	Your confirmation that you're 18 or older, the time you confirmed it, and how it was checked: your own confirmation, or the age range your Apple Account shared (section 3.3). We don't ask for your date of birth or ID.	Required to chat
Chat messages	Everything you write to a companion, and the companion's replies.	Required to use the core service
What you say on a voice call (Heart Eyes Plus)	The text of what you say during a call you start, as your iPhone transcribes it, and the companion's spoken replies as text. Kept with your chat like other messages. Not your voice: the audio stays on your phone (section 3.5).	Optional
Reports	If you report a companion message: the reason you chose, any note you add, and a copy of that message and the 6 messages before it.	Optional
Support messages	Anything you send us by email, such as your email address and what you write.	Optional

Please be thoughtful about what you share in chat. You don't need to share your full name, address, financial details, or other people's personal information for Heart Eyes to work. If you choose to talk about your health, mental health, sex life or sexual orientation, religion or other sensitive topics, that information is stored with your conversation. We use it only to provide the service to you (see section 4.2).

3.2 Information we create or collect automatically

Information	Details
Account identifier	A random ID created when you first open the App (a "guest account"). It's stored on your device in secure storage and linked to your data on our servers.
Companion memory	To help companions remember you, our systems automatically pull short facts from your conversations (for example, "has an exam on Friday" or "has a dog called Biscuit") and keep a rolling summary of older messages. These are stored per conversation. You can see these facts and remove any of them in the App (section 7). Our systems are designed not to keep crisis or self-harm content, or anything suggesting you're under 18, as memory facts.
Crisis card country	When a companion shows crisis support, whether the card named the helplines of the US or Canada (taken from the city we already know, section 3.4), so the card looks the same when you reopen the chat. Deleted with the conversation.
Usage counters	How many messages you've sent today, used to apply the free plan's daily limit, and how many seconds of voice calls you've had today, used to apply the daily call limit. Automatically deleted after 3 days.
Subscription status	Whether you have Heart Eyes Plus, which plan, trial status, renewal status and expiry date. We receive this from Apple/Google through RevenueCat (section 5).
Technical and security logs	When the App talks to our servers, we record limited technical information, such as request time, account ID, IP address, error codes and safety events (for example, that a message was blocked by our safety filter).
Photos companions send you	AI-generated pictures of the fictional character (never of you), and the portraits of any character you create. Stored with the conversation or character.
Push notification token (when enabled)	If you turn on morning messages, a token that lets us send notifications to your device.
Crash and diagnostic data (only if we turn on crash reporting; the App doesn't include it today)	Crash reports and performance data: device model, OS version, app version and the error that occurred, with a pseudonymous code derived from your account ID (not the ID itself). Never the text of your messages.
Product analytics	Events describing how the App is used, such as "finished onboarding", "viewed subscription options" or "started trial", linked to your account ID and a random ID created when the App is installed. They never include the text of your messages, names you type, or your location. We record them in our own server logs; if we enable an analytics provider (PostHog, section 5) they're also sent there.
Apple Ads attribution (iPhone)	Whether you installed Heart Eyes after tapping one of our ads in the App Store (Apple Ads), and if so which campaign, ad group and keyword. Apple's AdServices framework gives the App a one-time token; the RevenueCat SDK sends it to Apple, and Apple answers with this campaign information, which RevenueCat stores with your account ID and your purchases so we can see which ads lead to subscriptions. It doesn't use your advertising identifier (IDFA), and Apple doesn't treat it as tracking, so the App doesn't show the App Tracking Transparency prompt.

We don't collect your contacts, photos, camera data or advertising identifier (IDFA/AAID), and we never collect location in the background. We never receive or store audio of your voice: the microphone is used only during a voice call you start, and your phone turns it into text (section 3.5). We don't track you across other companies' apps or websites. Location is described in section 3.4.

3.4 Location

Companions can refer to where you are ("rainy in Seattle?"), at three levels. Profile → Location shows exactly what they can see (for example "Seattle · near a park · updated 5 min ago"), with a switch for each level and a Clear button.

Level	What we use	How we get it	Default
1. City & weather	Your approximate city, its country, your device's time zone, and the weather there	Your IP address is looked up once in a while (at most every 30 minutes) to estimate your city; if it doesn't match your device's time zone (for example, a VPN), we don't use it. You can type your city instead. We get the weather for that city.	On (you can turn it off)
2. Notice when you travel	That your city changed by more than 100 km, and when	Compares new city readings (level 1 or 3) with your home city	Off until you turn it on
3. Where you are right now	Your city, neighbourhood and the kind of place you're at (for example park, trail, beach, airport, gym, café, campus)	Only in the iOS/Android app, only after you turn it on and allow location "while using the app". The App reads your location when you open it or send a message, sends it to us once, and we turn it into those coarse details	Off until you turn it on

What we keep: only the latest coarse details (city, region, country, neighbourhood, kind of place, time zone, when it was updated, your current trip if level 2 is on), plus coordinates rounded to about 11 km (0.1°) for the weather and the 100 km travel check. We never store your precise location, and we never keep a history of places. Each new reading replaces the last one. We don't share your location with other users or advertisers, and it's never part of analytics (analytics may record that you turned a level on or off, or that a trip started, without any place). Location is deleted when you tap Clear, when you turn a level off (for its readings), and with your account.

Characters near you: when we know your city (from level 1 or 3, or a trip), we also use it to list the characters whose fictional home city is nearest to yours first, and to show how far away that city is (for example "near you", "1,400 mi away" in the US or "550 km away" in Canada). The distance is worked out on our servers from city to city; it isn't shared with anyone, and it isn't kept in analytics (we record only whether a location was known and how many characters were "near you"). The characters are fictional AI characters: no real person is near you, and nobody sees your location.

Adults only: if an account may belong to someone under 18, we use only its time zone: no city, weather, travel or place.

3.5 Voice calls

Heart Eyes Plus members can call a companion and talk out loud. Here's what happens to what you say:

The microphone is used only during a call you start, and only while the call screen is open. A call ends when you leave the App. The first time, your iPhone asks you to allow the microphone and speech recognition; you can change this any time in your iPhone's Settings.
Your voice stays on your phone. Your iPhone's own speech recognition turns what you say into text on the device. Heart Eyes asks for on-device recognition only, so the audio isn't sent to Apple, to us or to anyone else, and a phone that can't do it on the device can't make calls. We never record, receive or store your voice, and we never create a voiceprint.
Only the text is sent. Each thing you say goes to our servers as text, is checked by the same safety filters as a typed message (including crisis support), and is stored with your conversation as chat messages, so you can read the call afterwards and your companion remembers it. You can delete it like any conversation (section 7).
Her voice: the companion's reply is written by the AI model (section 5) and read out by Amazon Polly in her voice. Only her reply text is sent to Polly. We don't store the audio of her lines.
Minutes: we count how many seconds of calls you've had today to apply the daily limit (usage counters, section 3.2). Product analytics record that a call started or ended, how long it lasted and why it ended, never what was said.

3.3 Information from third parties

Apple / Google / RevenueCat: confirmation of purchases, renewals, cancellations, refunds and billing issues for your subscription, linked to your Heart Eyes account ID. We don't receive your name, email or payment card details from them.
Apple (age range): on an iPhone with iOS 26 or later, when you confirm you're 18 or older, the App asks Apple whether your Apple Account is 18 or over. Apple asks you whether to share this. If you share it, we receive only whether you're 18 or over, and whether that age was declared by you, set by a parent or guardian in Family Sharing, or confirmed by Apple. We keep that (with your age confirmation), never your date of birth or exact age. If Apple says you're under 18, we don't set up an account and don't keep the answer. If you don't share, your own confirmation is used.

4. How we use your information and our legal bases

4.1 Purposes

Purpose	Information used	Legal basis (EU/UK GDPR)
Generating companion replies	Your messages, recent conversation history, companion memory, display name	Performance of our contract with you (Art. 6(1)(b))
Remembering you across conversations	Messages, memory facts, summary	Contract (Art. 6(1)(b))
Running your account, applying plan limits and subscription benefits	Account ID, usage counters, subscription status	Contract (Art. 6(1)(b))
Keeping Heart Eyes safe and non-explicit: blocking prohibited content, detecting crisis language to show support resources, reviewing reports, preventing abuse and fraud	Messages, reports, logs	Legitimate interests in running a safe service and protecting users (Art. 6(1)(f)); legal obligations where they apply (Art. 6(1)(c))
Morning messages and notifications (when enabled)	Push token, notification settings, memory	Consent, which you can withdraw in the App or your device settings (Art. 6(1)(a))
Fixing crashes and improving the App (when enabled)	Diagnostic data, analytics events	Legitimate interests in a working, improving product (Art. 6(1)(f)). Where local law requires consent for analytics, we'll ask first.
Measuring our App Store ads (iPhone): which Apple Ads campaign led to an install, trial or purchase	Apple Ads attribution, account ID, subscription and purchase events	Legitimate interests in knowing which of our ads work (Art. 6(1)(f)).
Responding to support and privacy requests	Your email and request	Contract / legal obligation (Art. 6(1)(b), (c))
Complying with law, enforcing our Terms, defending legal claims	Relevant records	Legal obligation / legitimate interests (Art. 6(1)(c), (f))

4.2 Sensitive information

Your companion gender preference, and things you choose to say in chat, may reveal sensitive information such as your sexual orientation or health. We process this only to provide the service you asked for, based on your explicit consent, which you give by choosing to share it (GDPR Art. 9(2)(a)). You can withdraw consent at any time by editing your preference or deleting the conversation or your account. We don't use sensitive information to infer characteristics about you for any other purpose, and never for advertising.

4.3 AI processing and automated decisions

Replies are written by an AI model (section 5). Companions are fictional, and their replies can be wrong.
Automated safety filters check messages. A message that breaks our content rules isn't sent to the AI and isn't stored, and you'll see a notice. An AI reply that breaks our rules is withheld and replaced.
We don't make decisions about you that have legal or similarly significant effects based solely on automated processing. If you think a safety filter got something wrong, contact us.
We don't use your conversations to train or fine-tune AI models, and our AI provider doesn't use them to train its models (section 5).

4.4 Human review

Our staff don't routinely read conversations. A limited number of authorised people may view conversation content only:

when you report a message (they see the reported message and the 6 before it);
to investigate a safety, abuse or security issue;
when you ask us for help and give permission; or
when required by law.

We don't sell personal information and don't share it for cross-context behavioural advertising. We share it only with service providers ("processors") who handle it on our behalf, under contract, and only as needed to run Heart Eyes:

Provider	What they do	Data involved	Location
Amazon Web Services, Inc.	Cloud hosting and database (Amazon DynamoDB), server logs (Amazon CloudWatch)	All account and conversation data	United States (us-east-1)
Amazon Web Services: Amazon Bedrock (AI models running inside AWS, such as DeepSeek, Google Gemma and Amazon Nova; the models we use may change, and they always run on Bedrock)	Generates companion replies (including on voice calls) and captions, and extracts memory facts and summaries	Your recent messages (including the text of what you say on a call), memory, display name, companion persona	United States. AWS states that Bedrock doesn't store prompts and outputs, doesn't use them to train models, and doesn't share them with the companies that make the models.
Amazon Web Services: Amazon Polly	Turns a companion's reply into a voice note, and speaks her replies on a voice call	The companion's reply text only (not your messages, never your voice)	United States (us-east-1)
Amazon Web Services: Amazon Cognito (when enabled: Google or email-code sign-in)	Signs you in with Google or an email code (and with Apple outside iOS)	Sign-in identifier, email address	United States (us-east-1)
RevenueCat, Inc.	Validates App Store / Google Play purchases and tells us your subscription status. On iPhone, also collects the Apple Ads attribution token and gets the campaign information from Apple (section 3.2)	Account ID, purchase receipts, product and renewal details, limited device information collected by the RevenueCat SDK; on iPhone, the Apple Ads attribution token and the campaign, ad group and keyword Apple returns	United States
Apple Inc. / Google LLC	Sell and bill subscriptions, and distribute the App. If you save your account with Sign in with Apple (or Google), they confirm your sign-in to us. Apple also answers the Apple Ads attribution request (section 3.2)	Handled under Apple's and Google's own privacy policies. They are independent controllers for payments and for their sign-in services. For sign-in we receive a sign-in identifier and, if you share it, your email address (or Apple's relay address).	Global
Expo (650 Industries, Inc.) (when enabled)	Delivers push notifications	Push token, notification content (by default the companion's name and a neutral line like "Sent you a message"; a message's text only if you turn on Profile → Notifications → Show message text)	United States
Functional Software, Inc. (Sentry) (only if enabled; not used today)	Crash reporting	Crash and performance diagnostics and a pseudonymous code derived from your account ID; never message text	United States
PostHog, Inc. (when enabled)	Product analytics	Analytics events, account ID, device type	United States
Replicate, Inc. (when enabled)	Generates the photos companions send: photos you ask for in chat, the photos from a date, story photos, and morning-message photos (when those are enabled)	The character's AI-generated reference picture (a studio character, or one you created) and a text description of the photo: the outfit, the place and the pose. The description is studio-written, except that for a photo you ask for in chat it can include your own words for the outfit and the place, after our safety filters have checked and, where needed, rewritten them. We don't send your account ID, display name, location, other messages or anything about you.	United States
Amazon Web Services: Amazon Location Service	Finds the city you type (level 1), and turns your device location into city, neighbourhood and kind of place (level 3)	The typed city name; for level 3, your device's coordinates for that single request (not stored by us)	United States (us-east-1)
GeoJS (get.geojs.io)	Estimates your city from your IP address (level 1)	Your IP address	Global (the provider's servers are in several countries)
Open-Meteo (open-meteo.com)	Weather for your city	City-level coordinates (rounded to about 11 km). No account ID or IP address of yours is sent.	EU (Switzerland/Germany)

We may also disclose information:

if required by law, court order or a valid government request;
to protect the safety of any person (for example, an imminent threat to life);
to protect our rights or investigate fraud or abuse; or
to a successor if we're involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

6. How long we keep information

Information	Retention
Account, profile, conversations, memory	Until you delete them or your account. Accounts that haven't opened the App for 12 months are deleted automatically, with everything in them (an account with an active subscription is kept until the subscription ends, and an account that still holds credits you paid for is kept, because credits don't expire).
Photos companions send you, and your characters' portraits	Until you delete the conversation ("Start over"), the character, or your account
Location (section 3.4)	Only the latest reading, replaced by the next one; until you tap Clear, turn that level off, or delete your account. Level-3 coordinates are not stored.
Daily usage counters (messages, voice notes, call seconds)	3 days
Audio	None: your voice never leaves your phone, and the audio of her lines on a call isn't stored
Subscription status	While your account exists. Apple/Google keep their own purchase records.
Reports	Up to 24 months from the report, de-identified if you delete your account (see section 7)
Server and security logs, including the product analytics events in them	Up to 90 days
Backups	Deleted data can remain in encrypted backups for up to 35 days before it's overwritten
Support emails	Up to 24 months after the request is resolved
Crash data and analytics sent to a provider (when enabled)	Up to 12 months; analytics there are deleted when you delete your account

We may keep information longer where the law requires it or to resolve a dispute.

7. Deleting your data

See or remove what a companion remembers: on the companion's profile, tap "What … remembers" (with the companion's name). You can remove any single fact, or choose "Forget everything" to delete all of that companion's memory facts and the summary without deleting the chat. So that a removed fact isn't learned again from your recent messages, we keep a short copy of its text on that conversation, used only to filter it out. That copy is deleted when you choose "Forget everything", start over or delete your account.
Delete a conversation: go to Profile → "Start over with a companion". This permanently deletes its messages, companion memory and the photos sent in it.
Delete your account: Profile → Delete account. This permanently deletes your account, profile, all conversations, messages, memory, photos, characters and usage data from our live systems immediately, and your analytics profile at our analytics provider when one is enabled. Backups roll off within 35 days.
What deleting your account doesn't remove:
- Reports you submitted are kept for safety purposes with your account ID removed. The reported message snapshot may still contain text you wrote.
- Server logs, and the product analytics events recorded in them, can't be edited one entry at a time. They never contain your messages, identify you only by random IDs, and are deleted automatically within 90 days.
- Deleting your account doesn't cancel a subscription. Cancel it in your Apple or Google account settings (see our Terms).
Deleting without the App: see https://hearteyes.septasoftcanada.com/delete-account, or email support@septasoftcanada.com with the account ID shown in the App.
Deleting the App from your phone doesn't delete your account data. Because guest accounts are tied to your device, uninstalling means you lose access to that account. Use "Delete account" before uninstalling if you want the data removed.

8. Your rights

Wherever you live, you can:

see and edit your display name and preferences in the App;
see what each companion remembers about you, and remove it, in the App;
delete conversations and your account in the App; and
email us at support@septasoftcanada.com with any privacy request.

We'll respond within the time required by law, usually within 30 days. Because guest accounts have no email or password, we may ask you to verify a request from inside the App or by giving your account ID.

8.1 EEA, UK and Switzerland

You have the right to:

access your personal data and get a copy (portability);
correct inaccurate data;
erase it;
restrict or object to processing, including processing based on legitimate interests; and
withdraw consent at any time, without affecting processing that took place before.

You can also complain to your local data protection authority. In the UK, that's the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to resolve your concern first.

8.2 California and other US states

If you're a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

know what personal information we collect, use and disclose;
delete it;
correct it; and
not be discriminated against for exercising these rights.

CCPA category	Examples	Collected	Disclosed for a business purpose to
Identifiers	Account ID, IP address, display name	Yes	Service providers (section 5)
Geolocation data	Approximate city (from IP or what you type); with level 3 on, the kind of place you're at. Never precise coordinates, never a history.	Yes	AWS (including Amazon Location Service), GeoJS (IP only), Open-Meteo (city-level coordinates only)
Commercial information	Subscription plan and status	Yes	RevenueCat, AWS
Internet or other electronic network activity	App usage events, logs; on iPhone, which Apple Ads campaign (if any) led to your install	Yes	AWS; RevenueCat and Apple (Apple Ads attribution); PostHog and Sentry when enabled
Sensitive personal information	Content of your messages; information revealing sexual orientation or health that you choose to share	Yes	AWS (including Bedrock)
Inferences	Companion memory facts drawn from your chats	Yes	AWS

Sale and sharing: we don't sell or "share" (for cross-context behavioural advertising) personal information, and haven't done so in the past 12 months. Apple Ads attribution only tells us which of our own App Store ads led to your install; it isn't used to target ads to you. We have no actual knowledge of selling or sharing information about anyone under 16.
Sensitive personal information: we use it only to provide the service you request and for security, as permitted by CPRA regulations. We don't use it to infer characteristics about you.
Global Privacy Control: because we don't sell or share, there's nothing to opt out of. We'll honour GPC signals if that changes.
Authorised agents: you can use an authorised agent to make a request. We'll need proof of their authority.

Residents of other US states with comprehensive privacy laws (for example Virginia, Colorado, Connecticut, Utah, Texas and Oregon) have similar rights to access, correct, delete and port their data, and to opt out of sale, targeted advertising and profiling. You can exercise them the same way. If we deny your request, you can appeal by replying to our decision. If the appeal is denied, you may contact your state Attorney General.

8.3 Canada

If you live in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle your personal information, and if you live in Quebec, so does Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25.

Why we collect it. Only for the purposes in section 4.1, and we collect only what those purposes need. We tell you about any new purpose and, where the law requires, ask for your consent first.
Consent. You consent to the collection, use and disclosure described in this policy by creating your account and using the App. Optional features (saving your account, notifications, knowing when you travel, "where you are right now") are used only if you turn them on. Things you choose to share in chat that may be sensitive, such as your health or sexuality, are used only to provide the service you asked for (section 4.2). You can withdraw consent at any time, subject to legal or contractual limits, by changing your settings or deleting your account, but some features can't work without the information they need.
Location (Quebec). City & weather (section 3.4, level 1) is on by default, and uses your IP address to estimate your city.
Access and correction. You can ask to see the personal information we hold about you and how it's been used and disclosed, and ask us to correct anything inaccurate or incomplete, by emailing support@septasoftcanada.com. We'll answer within 30 days, or tell you within that time if we need longer as the law allows. In Quebec you can also ask for the information you gave us in a structured, commonly used technological format. Because guest accounts have no email or password, we'll ask you to confirm the request from inside the App or with your account ID.
Safeguards. We protect your information with the security measures in section 10, appropriate to how sensitive it is.
Processing outside Canada. Your information is stored and processed in the United States: our servers are with Amazon Web Services in the us-east-1 region (northern Virginia), and the service providers in section 5 (such as RevenueCat, Apple and, when enabled, Replicate, Expo, Sentry and PostHog) process it there or in the other places that table lists. Weather requests go to Open-Meteo in the EU with city-level coordinates only. While your information is outside Canada it's subject to the laws of those countries, and courts, law enforcement and national security authorities there may be able to access it. Our providers handle it under contracts that require them to protect it and use it only for us. You can ask us about our providers' practices at support@septasoftcanada.com.
Privacy officer. Our Privacy Officer is the person in charge of the protection of personal information, reachable at support@septasoftcanada.com.
Privacy incidents. If a breach of our security safeguards involving your personal information creates a real risk of significant harm (PIPEDA) or a risk of serious injury (Quebec), we'll notify you and the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information du Québec, as soon as feasible. We keep a record of every breach.
Automated decisions (Quebec). Our safety filters decide automatically whether a message is sent (section 4.3). If you're in Quebec, you can ask us which personal information and which main reasons led to such a decision, and ask for a person to review it, at support@septasoftcanada.com.
Commercial messages. We don't send marketing emails or text messages. App notifications (morning messages, when you turn them on) come from inside the App and aren't email.
Complaints. Please contact us first at support@septasoftcanada.com. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

9. International transfers

We're based in Ontario, Canada, and our servers are in the United States. If you use Heart Eyes from outside the US, your information is transferred to and processed in the US, which may not have the same data protection laws as your country. If you're in Canada, section 8.3 explains what that means for you. For transfers from the EEA, UK and Switzerland, we rely on:

the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where applicable; and/or
our providers' certification under the EU-US Data Privacy Framework (and its UK and Swiss extensions), where they are certified.

You can ask us for a copy of the relevant safeguards.

10. Security

We use industry-standard measures to protect your information, including:

encryption in transit (TLS) and at rest (AWS-managed encryption);
secure on-device storage for your account token;
access controls that limit which staff and systems can reach user data; and
secrets management for our credentials.

No system is perfectly secure. If a data breach is likely to put your rights at risk, we'll notify you and the relevant authorities as the law requires (in Canada, see section 8.3).

11. Adults only

Heart Eyes is only for people aged 18 and over. On iPhones with iOS 26 or later we also check the age range from your Apple Account (section 3.3), and we don't set up an account when it says you're under 18. We don't knowingly collect personal information from anyone under 18. If we learn that someone under 18 is using Heart Eyes, we'll delete the account and its data. If you believe a minor is using Heart Eyes, contact support@septasoftcanada.com.

12. Your choices

Notifications (when enabled): turn morning messages on or off in Profile, or in your device settings.
Location: Profile → Location shows what companions can see. Turn city & weather, travel, or "where you are right now" on or off, set your city yourself, or tap Clear. You can also withdraw the device permission in your phone's settings at any time.
Analytics (when enabled): where consent is required, you can decline or withdraw it in Profile → Privacy.
Subscription: manage or cancel it in your Apple ID or Google Play account settings.

13. Changes to this policy

We'll update this policy when our practices change, for example when we enable a new provider listed as "when enabled" above. We'll change the "Last updated" date. If a change is material, we'll tell you in the App before it takes effect, and we'll ask for your consent where the law requires it.

14. Contact us

SeptaSoft Solutions Inc.
Milton, Ontario, Canada
Privacy: support@septasoftcanada.com
General: support@septasoftcanada.com