Your story
stays yours.

Only what the product actually needs:

• —Account data: your email, the password hash (we never see your password), and — if you sign in with Google — your name and Google account ID.
• —Your content: the answers you give in guided mode, the draft you paste in enhance mode, the fragments you save in the journal, and every generated vow draft.
• —Generation logs: timestamps, which mode you used, how many generations have been consumed, and minimal error logs when something breaks. These let us enforce the generation allowance and debug failures.
• —Payment metadata: the order ID, amount, country and tax line that Lemon Squeezy sends us. We do not see your card number, billing address, or full payment details.
• —Basic technical data: IP address and user agent attached to requests, kept only as long as needed to detect abuse.

We don’t run third-party advertising trackers, session replay, or behavioural analytics. The cookies the site sets are the ones Supabase needs to keep you signed in.

• —To run your account and keep your drafts accessible to you across sessions and devices.
• —To generate the output you asked for, by sending your inputs to Anthropic’s Claude API through our edge function.
• —To enforce the generation allowance on your account, and to send the receipt and email confirmations you expect.
• —To investigate and stop abuse: scraping, scripted load, prompt-injection attempts, payment fraud.

The legal bases (where they matter): performance of contract for everything tied to delivering the service you bought, and legitimate interest for the narrow security and anti-abuse cases.

• —We don’t train AI models on your content. Not ours, not anyone’s.
• —We don’t sell your data, rent it, or share it with advertisers.
• —We don’t expose your vow to your partner, your friends, or any other user — even if you share an IP address or a household.
• —We don’t read your drafts as a hobby. The team only opens an individual account when you ask us to (a support ticket) or when we have a documented security reason, and we log it when we do.

We use a small set of vendors. Each one is contractually limited to the purpose listed here:

• —Supabase — hosts the database, authentication, and the edge function that talks to Anthropic. Servers are operated by Supabase and its underlying cloud provider.
• —Anthropic — runs the Claude model that produces your draft. We send your input as part of a generation request. Anthropic does not use API content to train its models by default, and we have not opted in.
• —OpenRouter — used only as a fallback if the Anthropic API has a transient failure. Same model family. Same posture on training.
• —Lemon Squeezy — merchant of record for payments, invoicing, and tax. Card data lives with them, not us.
• —Resend — sends transactional email (sign-in, receipts, the final draft if you email it to yourself).
• —Vercel — hosts the website itself and handles the request edge.

We may add or replace vendors over time. If we add one that materially changes how your data is handled, we’ll update this page and bump the effective date.

Our infrastructure is global, and your data is likely to be stored or processed outside the Philippines — including in regions operated by our vendors (United States, European Union, Singapore). We rely on the vendors’ standard contractual protections for international transfers. If you have a specific regional requirement, write to us before signing up.

Account and content data are kept for as long as your account is open. If you delete your account, we delete your vow content and journal entries within 30 days. We keep a minimal record of the transaction (order ID, amount, date) for tax and accounting purposes for as long as Philippine law requires — typically up to ten years.

Error logs and security logs are kept for up to 90 days, then aged out.

Under Philippine Republic Act 10173 (the Data Privacy Act), and under equivalent laws where you live, you have the right to:

• —See what we hold about you.
• —Correct anything that's wrong.
• —Delete your account and the content tied to it.
• —Export your drafts in a portable format.
• —Object to a specific use and ask us to stop.
• —Complain to the National Privacy Commission (privacy.gov.ph) or your local supervisory authority.

The fastest path on any of these is an email to [email protected] from the address on your account. We aim to respond within 30 days, usually sooner.

We use TLS for everything in transit and rely on Supabase’s row-level-security primitives to keep accounts cleanly separated. Passwords are hashed and salted at rest. We don’t store secrets in client code and we don’t log raw user input in plaintext. No system is perfect — if we ever discover a breach affecting your data, we’ll tell you and the National Privacy Commission within the timelines the law requires.

Heart Script is for adults. We don’t knowingly collect data from anyone under 18. If you believe a minor has signed up, write to us and we’ll remove the account.