Privacy notice

Who we are

Heartplot is the data controller for your personal data. Contact us at support@heartplot.app.

What we collect

Your email address. You sign in with a link we email you, so there's no password.

Your 18+ confirmation. We record that you ticked the box and when.

Your stories. Your messages, the characters' replies, the story starters you picked and a short summary of each story so the character remembers what happened.

Your subscription. You pay through Stripe Checkout, and Stripe takes your card details. We don't receive your full card number. Stripe tells us whether you've paid, your plan, your renewal date and the last four digits of your card.

Usage counts. How many messages you've sent this month, so we can apply the allowance.

Safety flags. When the filter blocks a message, we record the category, a score and the time. That record doesn't include the message itself.

The free sample chat. If you try the 3-message sample without signing up, we set a cookie with a random id and keep a scrambled form of your IP address, so each visitor gets 3 messages. We delete the sample messages after 24 hours. If you subscribe within that time, the sample becomes the start of your story and we keep it as part of your stories. The cookie and the hashed IP expire after 30 days.

Site logs. Our hosting provider logs page requests for a short time for security.

Cookies

We use a sign-in cookie and the sample-chat cookie. Both are needed for the service to work. A tag in the link you arrived from tells us which post or ad brought you. We don't use advertising cookies.

Things you choose to tell us in a story

Your stories may include details about you, such as your health, sexuality or beliefs, if you choose to write them. The law gives this information extra protection. When you sign up, we ask for your explicit consent to store it and to send it to our AI processing provider to write replies. You can withdraw consent at any time by deleting your stories or your account. We can't run your stories without it.

Why we use it

Email, sign-in, stories, story summaries and usage counts run the service you pay for, under the contract.

Sensitive details you write in a story are used to run your stories, with your explicit consent.

The safety filter, safety flags and the 18+ confirmation keep the service adult-only and free of sexual content. That is a legitimate interest in keeping people and the service safe.

The sample chat cookie and hashed IP limit the free sample to 3 messages a visitor.

Payment records are kept for tax and accounting, which the law requires.

Account emails (sign-in links, receipts and cancellation notices) run the service. We don't send marketing emails, sell your data or use your stories to train ai.

How replies are made

An automated filter checks each message you send. If it passes, we send it to our AI processing provider with the character's instructions, the story summary and the recent part of the story. The provider writes the reply, and the filter checks it before you see it.

We don't read your stories as part of normal service. We may look at a message you report, or one the filter flags.

The filter decides automatically whether to block a message. If it flags that an account may belong to someone under 18, or may be trying to produce sexual content involving children, we suspend the account and review it before closing it. You can ask us to look again by emailing support@heartplot.app.

Who else handles your data

Payments (Stripe, through Stripe Checkout) take payments and manage your subscription. Hosting runs the app and stores your account and stories. Email delivery sends sign-in links, receipts and account notices. AI processing writes the characters' replies and checks messages. Analytics counts visits and which post or ad brought you. Each provider works under a contract that limits what it can do with your data.

Some of these providers handle data outside the UK, including in the United States. When they do, we rely on safeguards UK law recognises, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.

We share data with the police or a court only if the law requires it. If a message suggests a child is at risk, we may report it to the relevant authorities.

How long we keep it

Stories and summaries stay until you delete them, or 30 days after your account closes. Free sample messages last 24 hours, unless you subscribe, in which case they become part of your story. The sample chat cookie and hashed IP last 30 days. Safety flags last 12 months. Your email address and account record last while the account is open, then 30 days. Payment records last 6 years after the end of the tax year, as the law requires. Copies held by our AI processing provider for abuse checks last up to 30 days.

You can ask us to delete a story, or your whole account, by emailing us. Deletion takes effect straight away in the app, and backups clear within 30 days.

Your rights

You can ask to see your data, correct it, delete it, limit or object to how we use it, or get a copy to take elsewhere. Email support@heartplot.app. We reply within one month.

If you're unhappy with how we've handled your data, tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Age

Heartplot is for adults 18 and over. If we learn that a user is under 18, we close the account, delete the stories and refund any payment.

Changes

If we change this notice in a way that affects you, we'll email you before the change takes effect.