We care about your privacy

The short version

• Your partner is the audience. What you send in 2Hearts goes to the one person you've tethered with, and to no one else.
• No ads, no tracking, no selling. We don't show ads, we don't use advertising identifiers, we don't use third-party analytics, and we never sell your data.
• Health data stays health data. Heart readings are used only to let your partner feel your heartbeat. They are never used for advertising or marketing, and never sold.
• The camera never keeps a picture of your finger. When 2Hearts reads your pulse through the camera, the video is processed on your phone and thrown away. Only the resulting pulse, a list of numbers, is sent when you choose to share it.
• You can leave at any time. Untethering deletes your shared history for both of you. Deleting your account (Settings › Delete account) deletes everything we hold about you.

This is a summary. Read the full policy for the details, or email us at [email protected] with any questions.

2Hearts is an app for two people. It lets you share your heartbeat, notes, photos, questions and small "thinking of you" nudges with one partner, on iPhone and Apple Watch. Because what you share is personal (some of it is health data), we've tried to collect as little as possible and explain exactly what happens to it.

This policy covers the 2Hearts app for iPhone and Apple Watch, along with its widget and extensions (together, "2Hearts" or "the app"). The app is provided by Loopsie LLC ("we", "us").

1. Who we are

Loopsie LLC is responsible for your personal data in 2Hearts (the "controller", in the language of some privacy laws).

• Email: [email protected]
• Post: Loopsie LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, USA

2. What we collect, and why

2.1 Your account

You sign in with Sign in with Apple. Apple gives us:

• a stable identifier for your Apple Account, unique to 2Hearts;
• an email address, which can be a private relay address if you choose Hide My Email;
• your name, if you choose to share it.

We use these to create your account and sign you in. We use your name to suggest what your partner will see you called, and you can change it. We don't send you marketing email.

During setup you tell us:

• your name, as your partner will see it;
• your birthday, so your partner can be reminded of it;
• your gender, so the app can refer to you correctly. "Prefer not to say" is always an option.

We also store your phone's time zone, so a birthday reminder arrives at the right time of day.

2.2 Your tether (the connection to your partner)

To connect you, we store the invite code one of you creates, which expires after 7 days, and the fact that the two of you are tethered.

To stop strangers from guessing codes, we count wrong codes entered from your account for a short time. After eight wrong codes in 15 minutes, you have to wait before trying again.

2.3 Your heartbeat (health data)

Heart readings are the heart of the app, and they are health data. We treat them that way.

With your iPhone's camera. You rest a fingertip over the camera and flash. The app reads the tiny changes in light as your blood flows. This happens entirely on your phone: the video is never saved, photographed or sent anywhere. What's left is your pulse as a series of numbers: the waveform, the moments of each beat, and your heart rate in beats per minute.

With your Apple Watch. If you choose to take your pulse from your watch, 2Hearts reads your heart rate from Apple Health (HealthKit) while a short workout session runs on the watch. That session exists only so the watch measures your heart; it is not saved to your Activity or Health. We do not write any data to Apple Health.

What we keep, and who sees it.

• When you send a heartbeat, the recording is stored so your partner can feel it, and it stays in your shared history.
• In a live session, your beats travel to your partner in real time over a private, encrypted connection only the two of you can join. Live beats are not stored.
• We record that a live session took place: when it started, when it ended, and who joined.

2.4 Notes, photos, questions and nudges

• Notes: the words you type, the drawings you make, and any photos you add (from your camera or photo library). Photos are stored with the note so your partner can see them.
• Questions: the questions you ask and the answers you give. Your answer stays hidden from your partner until they've answered too.
• Nudges: that you nudged your partner, and when.

We also record when your partner has seen something, so the app can show what's new.

Taking things back. You can take back a note or question until your partner has seen it. Its content is then destroyed, not just hidden.

2.5 Presence and Focus

So your partner can tell whether you're around:

• Whether your app is open right now. This is shared live with your partner over a private connection only the two of you can join, and isn't stored.
• When you last had the app open. This is stored, so your partner can see something like "here a few minutes ago".
• Whether your phone is silencing notifications (Focus). This is off unless you turn it on, and iOS asks your permission first. Only whether a Focus is on is shared, never which one. To let this work while the app is closed, we keep a scrambled (hashed) key for each of your devices. You can turn it off in Settings at any time.

2.6 Notifications

If you allow notifications, we store your devices' push notification tokens: for your iPhone, your Apple Watch, and the Home Screen widget. Notifications are delivered by Apple's Push Notification service. They include your partner's name and a short line. For a typed note or a new question, that line can include its words. So that content passes through Apple to reach your device.

2.7 Your subscription

Subscriptions are bought through the App Store, and Apple handles the payment. We never see your card or payment details.

We use RevenueCat to keep track of subscriptions. RevenueCat receives:

• your purchase and subscription records from Apple, linked to a random account identifier rather than to your name or email;
• basic technical details, such as your app version and device type.

From that we store your plan, its status, when it renews or ends, and Apple's transaction identifier. We use this to know whether your tether is paid for. One subscription covers both partners.

2.8 Settings

A few settings follow your account between devices, such as whether the background music is muted, which tabs you show, and where your pulse is taken from.

2.9 On your device

The app keeps some data on your iPhone and Apple Watch:

• copies of recent content, so it opens quickly and works when your connection drops;
• your notes, so the Home Screen widget can show them;
• your sign-in, kept in the iOS Keychain.

You can clear the caches in Settings › Storage. Deleting the app removes them.

2.10 Technical data

Our hosting providers keep short-lived server logs, such as IP addresses and the times of requests, for security and troubleshooting.

If you've chosen to share analytics with app developers in your iPhone's settings, Apple may send us crash reports and aggregated usage statistics. These don't identify you to us.

What we don't collect

We don't collect your location, contacts or browsing history. We don't collect advertising identifiers. We don't track you across other companies' apps or websites. We don't use any advertising or analytics SDKs.

3. Our commitments for health data

For heart readings from your camera, and heart rate from your Apple Watch through HealthKit:

• We use them only to let you share your heartbeat with your partner, and to show your own readings back to you.
• We never use them for advertising, marketing or profiling. We never sell them, and never use them for data mining unrelated to the app.
• We never share them with anyone except your partner, at your direction, and the service providers listed below who store and deliver them for us.
• We don't store them in iCloud.
• You can stop 2Hearts reading your heart rate at any time:
  • Camera: iPhone Settings › 2Hearts.
  • Apple Watch heart rate: the Health app › your profile › Apps › 2Hearts.

4. Who can see your data

Your partner. While you're tethered, your partner can see:

• your name, birthday and gender (if you gave one);
• what you send them: heartbeats, notes, photos, questions, answers and nudges;
• whether your app is open, when you were last here;
• whether your phone is silencing notifications, if you've chosen to share that.

Our service providers. These companies store or process data for us, only to run 2Hearts, under contracts that require them to protect it:

When the law requires it. We may disclose data if we're legally required to, for example by a valid court order. We may also disclose it to protect someone's safety or to prevent fraud or abuse.

If our business changes hands. If Loopsie LLC is involved in a merger, acquisition or sale of assets, your data may transfer as part of it. It would still be covered by this policy, and we'd tell you before it became subject to a different one.

We do not sell your personal data. We do not share it for targeted advertising.

5. How long we keep it

When you delete your account (Settings › Delete account), we delete your account and everything linked to it, including your shared history and photos. We also:

• end your Sign in with Apple connection to 2Hearts;
• delete your subscription record at RevenueCat.

Deleting your account does not cancel an App Store subscription. Only you can do that, in your Apple Account's subscription settings.

6. Your choices and rights

In the app:

• Change your details: Settings › Your details.
• Stop sharing Focus, or turn off notifications: in Settings, or in iPhone Settings.
• Stop camera or Health access: iPhone Settings, or the Health app.
• End your tether: Settings. This deletes your shared history for both of you.
• Delete your account: Settings › Delete account. This deletes everything.

Email us at [email protected] for anything else, such as a copy of your data or a correction. Depending on where you live, you may have the right to:

• access the personal data we hold about you, and get a copy in a portable format;
• correct it, or have it deleted;
• object to or restrict how we use it;
• withdraw your consent at any time. This doesn't affect anything we did before you withdrew it.

We'll respond within 30 days. We may need to confirm it's you, for example by asking you to write from the email linked to your account.

If you're in the European Economic Area, the UK or Switzerland, you can also complain to your local data protection authority.

If you're a California resident, you have the rights above under California law, including the right to know what we collect and to have it deleted. We don't sell or share personal information as California law defines those terms. We don't use sensitive personal information (such as health data) for anything beyond providing the app. We won't treat you differently for exercising your rights.

7. Our legal bases (EEA, UK and Switzerland)

We use your personal data on these legal grounds:

• To provide the app you asked for (performance of a contract): your account, your tether, and delivering what you send.
• Your explicit consent, for health data:
  • You give it when you allow camera or Health access and choose to take or share a reading.
  • You can withdraw it at any time, as described in section 3.
• Your consent, for Focus sharing and notifications. You can withdraw it in Settings.
• Our legitimate interests, in keeping 2Hearts secure and working. For example: limiting wrong invite codes, preventing abuse, and fixing problems using logs.
• Legal obligations, where the law requires us to keep or disclose something.

8. International transfers

Loopsie LLC is based in the United States, and the servers that store your data are in the United States. If you use 2Hearts from outside the United States, your data will be transferred to and processed there.

Where data from the EEA, UK or Switzerland is transferred to a country without an equivalent level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

9. Security

We protect your data:

• Encryption in transit. Everything travels encrypted (HTTPS/TLS).
• Encryption at rest. Our hosting provider encrypts stored data.
• Database rules. Access rules built into the database let each person reach only their own data and their partner's.
• Private live connections. Live connections, such as presence and live sessions, are private channels only the two of you can join.

No system is perfectly secure. If a breach affects your data, we'll tell you and the relevant authorities as the law requires.

10. Children

2Hearts is not meant for children. We don't knowingly collect data from anyone under 13, or under the minimum age in their country. If you believe a child has given us personal data, contact us and we'll delete it.

11. Changes to this policy

We'll update this page if our practices change, and change the date at the top. If a change is significant, we'll also tell you in the app before it takes effect.

12. Contact

Questions or requests about your privacy: