Heartfelt

Privacy
Policy.

Your moments are yours. We treat them that way.

Last updated: June 2026

What we collect

To help you send and receive moments, we need to hold a small amount of information:

  • Account details — your name and email, so we know who you are and can keep your moments safe.
  • Postcards — the photos, videos, and messages you choose to send.
  • Usage analytics — anonymous numbers that help us understand how Heartfelt is being used, like how many postcards are created, opened, or replied to. We never review the contents of your postcards as part of analytics.

We don't ask for anything we don't need. No browsing history. No contact lists. No location tracking unless you choose to share it on a postcard.

How we use your information

We use what we hold for one reason: to make Heartfelt work beautifully for you.

  • To deliver the postcards you send to the people you send them to.
  • To keep your account secure and working smoothly.
  • To understand how people use Heartfelt so we can make it better — using anonymised patterns, never personal details or postcard contents.

When someone sends you a postcard

Heartfelt is different from a social feed — postcards travel directly from one person to another.

When someone sends you a postcard, we process the information needed to deliver and display it to you. This means the sender's message, photo, or video is stored securely so you can open and enjoy it.

You will only receive postcards from people who choose to send them to you. There is no public feed, no discovery feature, and no way for strangers to reach you.

Your content belongs to you

Everything you create on Heartfelt — every photo, every video, every word — is yours. Full stop.

We don't claim ownership. We don't license it away. We simply hold it safely so you can share it with the people who matter to you.

What we will never do

We believe your moments are sacred. That means:

  • We will never sell your personal data to anyone.
  • We will never share your content with advertisers or data brokers.
  • We will never use your photos or videos to train AI models without your explicit permission.

If we ever need to change this stance, we would ask you first. Trust is not something we take for granted.

Analytics

We use simple, privacy-focused analytics to understand how Heartfelt is used and how we can improve it.

This may include anonymous measures such as:

  • how many postcards are created, opened, or replied to
  • which features people find most helpful
  • general patterns of app usage

We do not review the contents of your postcards, your private messages, or your media as part of analytics. We don't track you across the internet. The numbers simply help us make Heartfelt better.

How we protect your data

Your postcards and account data are stored on secure infrastructure with industry-standard encryption. Access is controlled and limited — only you and your intended recipients can see what you send.

We regularly review our security practices to keep your information safe. No system is perfect, but we take this responsibility seriously.

How long we keep your data

We keep your postcards and account data for as long as your account is active. This means your personal collection of moments remains available to you and the people you shared them with.

When you delete a postcard, we remove it from active systems and schedule it for permanent deletion according to our data retention practices. When you delete your account, we remove your data within a reasonable timeframe — though postcards already received by others may remain visible to them.

Your rights

You are in control of your data. You have the right to:

  • Access — see what information we hold about you.
  • Correct — update your account details if they change.
  • Delete — remove individual postcards or your entire account.

If you'd like to exercise any of these rights, just drop us an email. We'll handle it promptly and without fuss.

Third-party services

We work with a small number of trusted partners to keep Heartfelt running:

  • Authentication providers — we offer sign-in through trusted providers such as Google and Apple, so you can log in securely without another password to remember.
  • Hosting and storage — secure cloud infrastructure that keeps your postcards safe and accessible.
  • Analytics providers — privacy-respecting tools that help us understand how Heartfelt is used, without identifying individuals.

We only share what is necessary for these services to function, and we choose partners who respect your privacy as much as we do.

Contact us

If you have any questions about this Privacy Policy, your data, or how we handle your moments, please get in touch.

Contact us