Legal
Privacy Policy
Last updated: October 20, 2026
HeartRay is operated by Crescent Mission LLC. This policy explains what data we collect, how we use it, and the choices you have when using the HeartRay mobile app.
Children and Teen Accounts
HeartRay is not available to children under 13. The age screen evaluates the birthday on the device and stores only whether the person is a teen or adult; it does not store the birthday. A user age 13 through 17 must have a parent or legal guardian approve access. We store the guardian email, consent timestamp, and the guardian's feature choices in the account's private safety record. The guardian PIN is stored only on that device as a salted hash. Teen social, health, and location features start off, and disabling a category stops the corresponding collection or sharing. Contact us to withdraw guardian approval or request deletion; the account owner can also delete the account in Settings.
Information We Collect
- Account data such as name, email, and profile photo from your selected sign-in provider.
- Age-safety data: the app stores an age group (teen or adult), not the birthday entered at the age screen. For teen accounts, we also store the guardian email, consent time, and selected guardian controls.
- Health data (with explicit permission): heart rate, resting heart rate, steps, blood oxygen, blood pressure, and sleep.
- Location data (with explicit permission) for map visibility and presence context.
- Trips you choose to share: when you share a trip, the friends you pick see your position, the destination you chose, how you’re travelling and an estimated arrival time until you arrive, end the trip, or it reaches its time limit. A trip uses the same location updates as location sharing, including in the background when you allowed it. When a trip ends, its position and route are removed from what your friends can see, and the trip and its server record are deleted within about two days. The start and arrival notes in your friends’ Post tab stay. They name where you were going (a place, or a friend) and hold no position.
- To label a shared place (for example "Near Van Ness"), your phone asks its built-in map service (Apple Maps on iPhone, the system geocoder on Android) for a nearby street or neighbourhood name. Only the coordinates are sent for that lookup, never your account details or messages.
- When you share a trip, a destination search sends the text you type to your phone’s map service (Apple Maps on iPhone, the system geocoder on Android). On iPhone, the search also sends a search area of about 50 km around where you are, and your phone asks Apple Maps for directions and an arrival time from your position to the destination. Your account details and messages are never sent with these requests.
- If you share your location and allow Always location access on iPhone, HeartRay keeps using your location in the background while sharing is on, so location updates and route history can be collected when HeartRay is closed, only for the people you choose. With While Using, they are collected only while HeartRay is open. On Android, background updates use an ongoing location-sharing notification that you start and can stop. New positions are sent as you move. Delivery depends on connectivity and the operating system, so updates are not guaranteed.
- Social and content data you choose to create, including friend relationships, invites, status notes, reactions, direct messages, shared trips, reports, and blocks.
- Subscription purchase and entitlement status supplied by Apple or Google. HeartRay does not receive your payment-card details.
- Device identifiers used for account integrity and push-notification delivery.
- Usage activity, on iPhone and Android alike: when the app talks to our servers, we record which days you use HeartRay and which app version and platform you are on. We use this to count active accounts, understand retention, and keep the service working. It is kept with your account, never shared or sold, and deleted when you delete your account.
- Feature and error counts, on iPhone and Android: the app tells our servers how often screens and features are used and which kinds of errors happen (for example "map opened" or "a network error"), never what you wrote, your health readings or your location. These are added to daily totals per platform and are not stored with your account.
- On iOS, Firebase Analytics and Crashlytics also collect app interactions and crash information to improve app quality and reliability. The Android app does not turn on Firebase Analytics; the usage activity record above still applies to it.
How We Use Data
- Show your selected signals to friends you explicitly connect with.
- Power messaging, status, reaction, invite, reporting, blocking, and configured alert features.
- Operate authentication, friend graph, and account integrity.
- Verify subscriptions and provide the features included with your plan.
- Apply the age gate and enforce the parent or guardian choices on teen accounts.
- Improve app reliability and core product experience.
How We Share Data
- With your accepted friends according to your sharing settings.
- With infrastructure providers (Firebase, Google Cloud, and Cloudflare) under service obligations.
- When you use the Little World map, or place a HeartRay map widget on an Android home screen, your device requests map tiles and map fonts from OpenFreeMap. The widget does this in the background each time it refreshes, also when the app is closed. HeartRay does not include friend names, notes, health readings, account tokens, or character settings in those requests. Map data © OpenStreetMap contributors and OpenMapTiles. The classic map and the iPhone widgets use Apple Maps on iOS; the classic map uses Google Maps on Android.
- When legally required under valid process.
- We do not sell personal or health data.
Your Controls
- Choose what you share, and with whom, in Me › Who sees what in the app.
- Switch to the classic map or turn off nearby character moments and hand-holding in Map options. Moments are playful artwork, not a record or confirmation of what someone is doing. They do not change location-sharing permissions.
- For teen accounts, a parent or legal guardian can use the guardian PIN to enable or disable friends, health, and location features.
- Revoke Apple Health or Health Connect access in system settings at any time.
- Revoke Location access in iOS or Android system settings at any time.
- Stop background location collection by turning off Location sharing in Me › Who sees what, by changing iPhone location access to While Using or Never, or with Stop in the Android location notification. Signing out also stops it. Your own history can still be recorded while you use the app with location permission.
- End a shared trip at any time from the Map, or with End trip in the Android notification. A trip also ends when you arrive.
- On iPhone, if your trip is still on 15 minutes after its arrival time, HeartRay shows you a reminder notification with an End trip button. It is a local notification: nothing leaves your phone for it. Android has no such reminder.
- Delete your account from Me in the app to remove the data described in Data Retention and Deletion below.
Data Retention and Deletion
We store your account information, friend connections, messages, and saved health and location history while your HeartRay account exists. The history available to view in your plan does not determine when stored data is deleted.
You can delete your account in Me → Delete account, or request deletion through heartray.app/delete-account. Account deletion removes your profile, connections, messages, and saved health and location history from our primary application databases.
Deleting your account also deletes the trips you shared and the Post notes about them. If you share a trip to a friend, its Post notes name that friend, hold no position, and stay in your followers’ feeds even if that friend later deletes their own account.
Uninstalling HeartRay, disabling sharing, or revoking permissions does not by itself delete previously stored data. Deleting your HeartRay account does not delete original records held by Apple Health, Health Connect, or connected wearable services.
Health Data Disclosure
HeartRay reads health data from Apple Health (HealthKit) on iOS and Health Connect on Android with your explicit permission. The specific categories we request are: heart rate, resting heart rate,blood pressure (systolic and diastolic), blood oxygen (SpO₂),step count, and sleep analysis. The iPhone and Android apps request read access to these measurements. The Apple Watch companion requests read access to existing heart-rate measurements and forwards them, with their original measurement time, to your paired iPhone. It does not start workouts, write health samples, or take continuous measurements. Your iPhone controls sharing with friends.
- Health data is used only to deliver HeartRay features — showing your own history, sharing live vitals with friends you explicitly connect with, powering heart-rate alerts you configure, and surfacing your own vitals in the app and widgets.
- You can grant or revoke each category individually at any time from iOS Settings → Health → Data Access & Devices → HeartRay or Android Settings → Health Connect → App permissions → HeartRay.
- Health data is transmitted only to friends you have approved, and only the categories you have toggled on for sharing. We never share it with advertisers or analytics partners.
- We do not sell or rent health data to third parties, use it for advertising, use it to train AI/ML models, share it with insurers or employers, or disclose it to anyone outside HeartRay's infrastructure operators (Firebase / Google Cloud / Cloudflare) under contractual confidentiality.
- Deleting your account from Settings removes your saved health history from our primary application databases, as described in Data Retention and Deletion above.
