
Your moments are yours. We treat them that way.
Last updated: June 2026
To help you send and receive moments, we need to hold a small amount of information:
We don't ask for anything we don't need. No browsing history. No contact lists. No location tracking unless you choose to share it on a postcard.
We use what we hold for one reason: to make Heartfelt work beautifully for you.
Heartfelt is different from a social feed — postcards travel directly from one person to another.
When someone sends you a postcard, we process the information needed to deliver and display it to you. This means the sender's message, photo, or video is stored securely so you can open and enjoy it.
You will only receive postcards from people who choose to send them to you. There is no public feed, no discovery feature, and no way for strangers to reach you.
Everything you create on Heartfelt — every photo, every video, every word — is yours. Full stop.
We don't claim ownership. We don't license it away. We simply hold it safely so you can share it with the people who matter to you.
We believe your moments are sacred. That means:
If we ever need to change this stance, we would ask you first. Trust is not something we take for granted.
We use simple, privacy-focused analytics to understand how Heartfelt is used and how we can improve it.
This may include anonymous measures such as:
We do not review the contents of your postcards, your private messages, or your media as part of analytics. We don't track you across the internet. The numbers simply help us make Heartfelt better.
Your postcards and account data are stored on secure infrastructure with industry-standard encryption. Access is controlled and limited — only you and your intended recipients can see what you send.
We regularly review our security practices to keep your information safe. No system is perfect, but we take this responsibility seriously.
We keep your postcards and account data for as long as your account is active. This means your personal collection of moments remains available to you and the people you shared them with.
When you delete a postcard, we remove it from active systems and schedule it for permanent deletion according to our data retention practices. When you delete your account, we remove your data within a reasonable timeframe — though postcards already received by others may remain visible to them.
You are in control of your data. You have the right to:
If you'd like to exercise any of these rights, just drop us an email. We'll handle it promptly and without fuss.
We work with a small number of trusted partners to keep Heartfelt running:
We only share what is necessary for these services to function, and we choose partners who respect your privacy as much as we do.
If you have any questions about this Privacy Policy, your data, or how we handle your moments, please get in touch.