Heart Beats

Privacy Policy

English · Svenska

1. Introduction

Heart Beats is a daily wellness check-in app that helps you stay connected with the people who care about you. This privacy policy explains how we collect, use and protect your personal data.

2. Who we are

Heart Beats is provided by:

3. Data we collect

• Account data: your name and email address.
• Health data: heart rate, blood oxygen (SpO2) and step count, read from Apple HealthKit with your explicit permission, only when you send a daily heartbeat.
• Usage data: heartbeat timestamps and acknowledgment records.
• Device data: push notification tokens, used to deliver alerts.

4. How we use your data

• To send your daily heartbeat signal to your designated caring contacts.
• To notify your contacts when a heartbeat is missed.
• To deliver push notifications.

We never sell your data, and we never use your data for advertising. Health data is only ever shared with your explicitly designated ICE (emergency) contacts.

5. Who we share data with

• Your designated ICE contacts — heartbeat status and optional health snapshots only.
• Apple (HealthKit, APNs) — governed by Apple's own privacy policy.
• Firebase (Google) — push notification delivery only.
• Supabase — secure data storage, hosted in EU-West-1 (Ireland).
• Resend — email delivery only.

We do not share your data with any other third parties.

6. Data storage and security

• All data is stored in EU-West-1 (Ireland).
• Data is encrypted in transit (TLS) and at rest.
• Row-level security is enforced on all data access.

7. Data retention

• Active data is retained while your account is active.
• Data is deleted within 30 days of an account deletion request.
• Contact privacy@myheartbeats.app to request deletion.

8. Your rights (GDPR)

Under the GDPR, you have the right to:

• Access your data.
• Correct inaccurate data.
• Delete your data.
• Receive your data in a portable format.
• Object to processing of your data.

Contact privacy@myheartbeats.app to exercise any of these rights. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.

9. HealthKit specific

• Heart Beats uses Apple HealthKit to read heart rate, blood oxygen and step count.
• HealthKit data is never used for advertising or sold to third parties.
• HealthKit data is only shared with your designated ICE contacts, as part of your daily heartbeat.

10. Age requirement

Heart Beats is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We will notify users of material changes to this policy via email.

Last updated: July 2026.

12. Contact