Your first and last name, a private nickname (the handle your family sees), your password (kept only as a secure hash, never in plain text), and a friend code you share with people you know. We also ask your date of birth once, at sign-up, to confirm you’re old enough.

When you tap the heart, we save the location, the place name, your optional note, and the time. You can hide the location on any check-in by switching off “Share location” first.

Heartvault records your location only when you choose to: when you tap the heart to check in, or — in the phone app — for the “places” (like Home or Work) and live “trips” you switch on yourself. It never follows you in the background.

When you view a journey, the road route is worked out on Heartvault’s own server and saved so it loads fast — and turning a location into a place name now happens on our server too, so your coordinates never leave the box. (Only searching for a place by name when you save it uses OpenStreetMap.)

We store who you’ve sent or accepted friend requests with. Only friends can see your full profile. There’s no search and no public directory — everyone arrives by invite.

Direct messages between you and friends are kept on the site so your conversation history stays available. As with any online platform, use discretion with anything you’d consider sensitive.

When a friend tags you in a check-in, your nickname appears on that check-in for everyone who can see it.

If you’re in a household, Heartvault keeps your shared shopping list, recipes (and any photo you add), and calendar events so everyone at home stays in sync.

To keep you signed in on the app and send you notifications, we store a secure device token (kept as a hash) and your notification settings. You choose what you’re notified about.

Basic usage information is kept to help with safety, abuse monitoring, and to understand who’s actively using the site. It is discarded automatically after about three months.