Privacy Policy

This Privacy Policy explains what information Heartuned collects, how we use it, who we share it with, and the choices you have. We aim to collect only what we need and to protect it carefully.

The data controller is Aya Caps LLC, 8 The Green, STE B, Dover, DE 19901, United States, which operates Heartuned. For any privacy question or request, contact support@heartuned.org.

Account information: your name, email, and login details.

Profile information you provide: your timezone, notification preferences, and, if you choose to add it, your child's first name and age band, used to personalise guidance.

What you write to us: messages to our AI helper, our support chat and our support email, community posts, comments and the photos or videos you add, live session chat and questions, and reflections you send us. What a parent tells us about her child and herself can be health information; Your health data explains how we treat it.

Usage information: pages viewed, lessons watched, community activity, and progress, used to operate and improve the Service.

Payment information: handled by our payment processors, Stripe and PayPal. They share with us what an order needs, such as your billing name, email, phone and address. We store payment metadata (such as status and the last renewal) but never full card numbers.

Device information: your IP address, your browser and device, and the cookies described in section 7.

To provide and personalise the Service, process payments and memberships, answer you, send transactional and (with your preferences) lifecycle emails, keep the community safe, measure our advertising (section 6), and comply with legal obligations.

The Service is for parents and caregivers, not children. Any child information you provide (a first name and age band) is treated as sensitive, minimised, restricted to staff who need it, and retained only as long as necessary. You can edit or remove it at any time in your profile.

Our AI helper, our support chat and our replies to support email are written with AI models from Anthropic. What you type, and the conversation it belongs to, is sent to Anthropic to write the reply. To find the right lesson for a question you ask the helper, the words of your question are also sent to Voyage AI. Both act on our instructions under contract.

We store your helper conversations and your support chats and emails, so you can see them again, so our team can follow up, and to keep you safe. Deleting your account deletes your helper conversations.

On our public pages, including our sales and checkout pages, we use the Meta Pixel and Meta's Conversions API, so we can measure our ads on Facebook and Instagram and show them to people likely to find them useful. We do not use them in the member area (your lessons, replays, the community and the helper), in onboarding or in our admin pages.

What Meta receives: the address of the page you are on, your IP address and browser, Meta's cookie ids (_fbp and _fbc), a random id for your browser (and your account id, if you are signed in), and, when you start a checkout or buy, what you bought and the amount. With a checkout or a purchase it also receives, when we know them, your email, name, phone, city, state, zip and country, scrambled (hashed) before they leave our servers so Meta can only match them to people it already knows. We never send Meta what you write to us.

How to opt out of this sharing: turn on Global Privacy Control in your browser (many privacy browsers and extensions offer it). We honour it automatically: that browser gets no Meta Pixel, we set no Meta cookies for it, and no page view or purchase from it is sent to Meta. You can also email support@heartuned.org and ask us to stop sharing your details with Meta; we stop sending Meta anything that carries your email address and confirm by email.

htn_vid: a random id for your browser, kept for a year, so we can count visits and connect a visit to an order.

htn_ab: a number from 0 to 99, kept for a year, that places your browser in a test group so a test shows you the same version each time.

_fbp and _fbc: Meta's id for your browser and for the ad you clicked, kept for 90 days, used as described in section 6. They are not set when your browser sends Global Privacy Control.

htn_touch: which ad or tagged link brought you here, kept for 90 days and saved with your order. htn_ref: the affiliate link you arrived through, kept for the referral window.

Sign-in cookies, htn_in and htn_last_email: keep you signed in and fill in your email on the sign-in page.

Live sessions are recorded, and the recording is shared with members as a replay. If you join on camera or speak, your video and voice will be in the recording. The room tells you this, and asks you before your mic or camera first turns on. Messages you post in a live session's chat are stored.

Posts, comments, photos and videos you share in the community are seen by other members. Photos and videos are stored privately and shown only through links that stop working after about an hour, to people who may see that post.

We share data with vetted processors only as needed to run the Service: Vercel (hosting), Supabase (database, sign-in and file storage), Stripe and PayPal (payments), Resend (email delivery), Google (our support mailbox), Bunny (video streaming), LiveKit (live video and recording), Zoom (when a live session is held there), Anthropic and Voyage AI (the AI tools in section 5), and Meta (advertising, section 6). After a purchase, Trustpilot receives your name and email so it can invite you to review us. These providers act on our instructions under contract.

We do not sell your personal information for money. Sharing data with Meta for advertising (section 6) may count as "selling" or "sharing" under some US state laws, and you can opt out of it as described there.

We keep personal data for as long as your account is active or as needed to provide the Service and meet legal obligations.

You can export your data or delete your account at any time from your account settings. Deleting your account cancels your membership, scrubs your profile (including your child's name), deletes your helper conversations, and removes the words of your community posts and comments.

Depending on where you live, you may have rights to access, correct, delete, or port your data, or to object to certain processing. To make a request, contact us.

California residents have the right to know what personal information we collect, use and share, and why; to delete it; to correct it; to opt out of its sale or sharing (section 6); and not to be treated differently for using these rights. To use them, email support@heartuned.org or use your account settings. We will confirm the request comes from you before acting on it, and an agent you authorise may ask for you.

We use technical and organisational measures, including row-level database access controls, to protect your data; no system is perfectly secure.

Your data may be processed in countries other than your own; we rely on appropriate safeguards where required.

We may update this policy and will note the effective date. Questions or requests: support@heartuned.org.