📊 Data We Collect

Account Information

• Name, email, and password (stored via Supabase authentication)
• User preferences and selected AI coach
• Premium subscription status

Chat & Conversation Data

• Your messages and AI coach responses (stored in Supabase)
• Conversation timestamps and session IDs
• Selected coach preferences and conversation history
• Messages persist across sessions until you refresh or it's a new day

Daily Reflections & Personal Data

• Daily reflection entries (stored in MongoDB)
• Coaches chatted with, conversation ratings, helpful moments, areas for improvement
• Used by AI coaches to personalize future conversations
• You can view and access all past reflections anytime

Quiz & Assessment Data

• Attachment style quiz responses and results (stored in Supabase)
• Quiz analysis, attachment style classifications, and personalized recommendations
• Quiz completion dates and historical results

Insights & Reports

• Generated personalized insights reports (stored in MongoDB)
• Analysis of emotional patterns, communication styles, and relationship goals
• Healing progress scores and personalized recommendations
• All past reports accessible anytime through your account

Usage Tracking Data (Free Users)

• Daily message count to enforce 10 message limit (stored in MongoDB)
• Automatically resets at midnight UTC
• Retained for 7 days, then automatically deleted

Technical Data

• Device information, operating system, app version
• IP address and usage analytics (for improving service)
• Error logs and performance metrics

🎯 How We Use Your Data

We use your information to:

• Provide personalised AI coaching: Your daily reflections are accessed by AI coaches to tailor conversations to what you want to explore and work on
• Track attachment styles: Quiz results help provide personalized insights and recommendations
• Generate insights reports: Analyze your conversations, mood entries, and reflections to create comprehensive personalized reports
• Enforce usage limits: Track message counts for free users (10 messages/day, resets at midnight UTC)
• Improve our app and AI systems: Only anonymized data is used for service improvements
• Communicate important updates: Security alerts, policy changes, and feature announcements
• Provide crisis support: AI coaches detect sensitive topics and redirect to appropriate helplines (UK Samaritans, National Domestic Abuse Helpline, etc.)

Your chat data and reflections will NEVER be shared with third parties, sold, or used for advertising.

🔒 How We Protect Your Data

Storage Infrastructure:

• Supabase (PostgreSQL): User authentication, chat conversations, quiz results
• MongoDB: Daily reflections, insights reports, usage tracking data
• OpenAI API: AI coach responses processed via OpenAI GPT-4o-mini (conversation data is NOT stored by OpenAI)

Security Measures:

• Encryption: Data is encrypted both in transit (SSL/TLS) and at rest
• Access Control: Only you can access your account via secure authentication
• Row Level Security (RLS): Supabase enforces strict data isolation between users
• Password Protection: Leaked password protection prevents use of compromised passwords
• API Security: Backend APIs use secure authentication and rate limiting

Data Processing:

• AI processing happens server-side through our FastAPI backend
• Conversation context (last 5 messages) sent to AI for continuity
• Your recent reflections (last 3) shared with AI coaches for personalization
• No data is stored on your device except session tokens

📅 How Long We Keep Your Data

Chat Conversations:

Retained until you refresh the page or start a new day. Stored persistently in database to maintain conversation context across sessions.

Daily Reflections:

Retained indefinitely to allow you to track your personal journey. You can view all past reflections anytime.

Quiz Results:

Retained indefinitely so you can review your attachment style history and track changes over time.

Insights Reports:

Retained indefinitely so you can track your personal growth journey. You can view all past insights reports anytime.

Usage Tracking Data:

Automatically deleted after 7 days. Only used to enforce daily message limits for free users.

Account Information:

Retained until you delete your account. After deletion, all personal data is permanently removed within 30 days.

Technical & Analytics Data:

Retained 6–12 months, anonymized where possible.

🚨 Important Safety Information

HeartLift provides wellness coaching, NOT professional therapy or crisis counseling.

Our AI coaches will NOT provide support for:

When these topics are detected, our AI coaches immediately stop and provide crisis helpline resources instead of attempting to provide support.

🌍 Your Privacy Rights

You have the right to:

• Access: View all data we have about you
• Correction: Request corrections to your data
• Deletion: Request deletion of your account and all data
• Portability: Receive your data in a portable format
• Objection: Object to certain data processing activities

To exercise these rights, contact us at: support@heart-lift.com

👶 Children's Privacy

HeartLift is intended for users 13 years and older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately.

🔄 Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available in the app with a revised "last updated" date. Continued use of HeartLift after changes are posted constitutes acceptance of those changes.

📧 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: support@heart-lift.com

App: In-app Privacy Policy at /privacy-policy

---

© 2025 HeartLift. All rights reserved.