Heartwood Privacy Policy

What We Collect

Account: the Sign in with Apple user identifier, the display name you choose, and your email address if you choose to share it with Sign in with Apple.

Content you add: photos, videos, voice notes, messages, timeline memories, milestones, and sealed letters. These are encrypted on your device before upload (see below).

Service data: pairing state, identity public keys and wrapped (encrypted) key copies, subscription status from Apple, device push tokens if notifications are enabled, abuse reports you submit, and structural metadata such as dates, object sizes, vault membership, and storage used.

End-To-End Encryption

Your content is encrypted on your device with keys that only your devices and your partner's devices hold. The server stores ciphertext, wrapped keys, and the metadata needed to sync them. It never receives your plaintext content or an unwrapped key, so we cannot read your photos, messages, voice notes, letters, captions, or notes.

Operational metadata stays visible to us, including account and vault membership, object dates and sizes, subscription state, device records, storage usage, and report reason metadata.

Use And Sharing

We use data only to provide the app: sign-in, pairing, sync between you and your partner, storage limits, subscriptions, support, security, abuse handling, export, and deletion.

Your content is shared only with the one partner you pair with. We use a cloud hosting provider to store encrypted data on our behalf. We do not sell data, run ads, track you across apps or websites, or run AI processing over your content.

Retention And Deletion

Encrypted content is kept until you delete it, unpair and the 30-day unpair window ends, or delete your account. Deleting your account from Settings starts a purge of your account rows and encrypted media; completion can take up to a few days while retries and shared references are resolved.

Backups age out on the provider's schedule. Deletion records are kept so that if a backup is ever restored, deleted data is purged again instead of reappearing.

Children

Heartwood is for adults 18 and over and is not directed at children.

Contact

Email megan@twohearth.com.