Privacy Policy

HeartTap collects and stores the following categories of information only as needed to send, receive, show, and support private pings:

• Account data: Firebase Auth user ID, email address, display name, password authentication data handled by Firebase Auth, and Google sign-in identifiers when you choose Google sign-in.
• Pair data: display name, avatar initial, active pair ID, pair owner and partner IDs, invite codes, pair status, relationship setup dates, and the information needed to keep your private ping space connected.
• Ping data: ping text, ping type, photo or sticker ping details, custom ping labels, sender and recipient IDs, delivery state, saved or archived state, and related timestamps.
• Notification data: notification preferences, app installation ID, Android device label, app version, push-enabled status, Firebase Cloud Messaging token, and notification payload data needed to deliver and route private pings.
• Local device data: appearance settings, home-screen ping display preferences, ping achievement state, and other local settings stored on your device.
• Support data: any information you choose to send to Moriatz when contacting support or requesting account, access, correction, or deletion help.

• HeartTap does not use third-party advertising SDKs.
• HeartTap does not use a third-party analytics SDK in the current implementation.
• HeartTap does not process payments in the current implementation.
• HeartTap does not request contacts, microphone, precise location, health, or financial account permissions in the current Android implementation.
• Moriatz does not sell personal data.

• Create, authenticate, and maintain your HeartTap account.
• Create and manage a private ping space between two paired users.
• Store, sync, deliver, and display private pings between paired users.
• Send partner notifications through Firebase Cloud Messaging when notification preferences allow it.
• Keep local ping preferences, home-screen ping moments, and app display settings working on your device.
• Respond to support, privacy, correction, access, and deletion requests.
• Protect the app, debug operational issues, enforce app rules, and comply with applicable law.

HeartTap is designed for two-person ping spaces. Pings you create inside a pair space, including text pings, photo pings, sticker pings, custom ping labels, delivery state, and related metadata, are stored in Firebase/Firestore and are visible to your paired partner. Do not send ping content that you do not want your paired partner to see.

HeartTap uses Firebase Cloud Messaging to deliver private ping notifications. To support notifications, HeartTap may store an app installation ID, app version, Android device label, push-enabled state, notification preferences, Firebase Cloud Messaging token, and notification payload data needed to route a tap back to the relevant ping. Home-screen ping moment data is stored locally on your device and may show recent partner ping activity depending on your settings.

HeartTap uses Google Firebase services, including Firebase Authentication, Cloud Firestore, Firebase Cloud Messaging, and Firebase Functions. Google and Firebase process data as service providers for authentication, database, backend, and private ping notification operations. HeartTap may also rely on the Google sign-in service when you choose Google sign-in.

Moriatz does not sell personal data. Moriatz may share information only as needed to operate HeartTap through service providers, comply with law, respond to valid legal process, protect users or the app, investigate abuse, or complete a business transfer such as a merger, acquisition, or asset sale.

HeartTap keeps account, pair, ping, device, and preference data for as long as needed to operate the app, provide support, comply with law, and protect the service. Account and ping-data deletion can be started in the app from Settings. Email support@moriatz.com to request access, correction, or deletion. Deleting ping data may affect both people in a pair space, and some records may be retained where required for security, legal, abuse prevention, or backup purposes.

You can also review the public account deletion instructions at moriatz.com/heart-tap/delete-account.

HeartTap uses Firebase security rules and platform protections to protect private ping data, but no app, network, device, database, or storage method can be guaranteed perfectly secure. Do not send emergency, legal, medical, financial, or highly sensitive safety-critical information through HeartTap pings.

HeartTap is not intended for children under 13. Moriatz does not knowingly collect personal information from children under 13. If you believe a child has provided information to HeartTap, contact Moriatz at support@moriatz.com.

Moriatz may update this Privacy Policy as HeartTap changes. The updated policy will be posted at this page with a new last updated date. Continued use of HeartTap after an update means the updated policy applies.

For privacy, support, access, correction, or deletion requests, email Moriatz at support@moriatz.com.

This policy is a practical disclosure for HeartTap and is not a guarantee that any app, device, network, or provider is perfectly secure.