Privacy Policy

1. Who We Are

Hearth Dating Inc. ("Hearth," "we," "us," or "our") operates the Hearth mobile application and the website at hearthdating.com (together, the "Service"). We are the data controller responsible for your personal information.

Contact:

• Email: gwen@hearthdating.com
• Address: Available upon request

2. Information We Collect

2.1 Information You Provide

2.2 Information Generated by AI

2.3 Information Collected Automatically

Note on Firebase Analytics: Firebase Analytics data collection is disabled in the Hearth app. The Firebase SDK is included for push notification functionality only.

2.4 Cookies and Similar Technologies

hearthdating.com uses cookies and similar browser storage for two purposes: first-party product analytics (PostHog), which we treat as an essential part of operating the site, and a third-party advertising-measurement pixel (TikTok), which loads by default on an opt-out basis. The TikTok Pixel is used solely to measure clicks on our TestFlight install button from people who arrived via a TikTok ad. You can opt out at any time via the "Do Not Sell or Share My Personal Information" link in the footer, the "Manage Cookies" toggle in the footer, or by enabling Global Privacy Control in your browser. See Section 5.4 for the full ad-measurement disclosure.

Your choice and Global Privacy Control. A click on "Do Not Sell or Share My Personal Information" in the footer (a one-click opt-out method provided under 11 CCR § 7026(b)), a Global Privacy Control signal sent by your browser (navigator.globalPrivacyControl) (honored as a binding opt-out preference signal under 11 CCR § 7025), or selecting "opt out" in the "Manage Cookies" panel is treated as a binding opt-out: we do not load the TikTok Pixel, we ask any already-loaded pixel to stop tracking via its consent revocation API, and we clear first-party TikTok cookies on hearthdating.com. Third-party cookies on tiktok.com are not accessible from this site; clear them via your browser or TikTok account if you previously visited TikTok. You can revisit your choice at any time via the "Manage Cookies" link in the footer or by emailing privacy@hearthdating.com.

The Hearth mobile application does not use cookies and does not contain any advertising pixel. Analytics in the app are delivered via the PostHog SDK as described in Section 2.3.

3. How We Use Your Information

We use your information for the following business purposes:

We do not sell your personal information. We do not use information you provide inside the Hearth mobile app — your profile, messages, voice transcripts, photos, embeddings, AI-generated content, or matching data — for advertising. Our only use of personal information for advertising is the website-side TikTok conversion-measurement pixel described in Section 2.4 and Section 5.4, which is opt-out and never runs in the Hearth mobile app.

4. AI and Automated Processing

Hearth uses artificial intelligence extensively. This section describes each type of AI processing.

4.1 Personality Extraction

When you chat with Ember (our AI coach), your conversations are analyzed to generate structured personality profiles ("preference documents"). These profiles describe who you are and what you want in a partner across six categories. This processing is performed by Anthropic's Claude API. The resulting preference documents are stored in your account and used for matching.

4.2 Embedding-Based Compatibility Scoring

Your preference documents are converted into 768-dimensional numerical vectors ("embeddings") by Google's Gemini embedding model. These embeddings are compared against other users' embeddings using cosine similarity to calculate compatibility scores. Candidates pass through radius filtering, matching gates (hard filters), two-pass scoring, and preference filters before being presented to you.

4.3 AI Reranking

After initial scoring, an optional AI reranker (Anthropic Claude) may evaluate the top candidates and adjust the final selection. This reranking considers both users' full preference profiles.

4.4 AI-Generated Match Portraits

For each match recommendation, Ember writes a text portrait describing the other person. These portraits are generated by Anthropic's Claude API using both users' profile data and preference documents. Portraits are shown to potential matches.

4.5 Voice AI

Voice conversations with Ember are streamed in real time to Google's Gemini API. Audio is not stored by Hearth. Only text transcripts of voice conversations are retained. Hearth does not create, store, or use voiceprints for identification purposes. See Section 8 for additional voice data disclosures.

4.6 Connection Coaching

When two users match, Ember can provide connection coaching within the conversation. Coaching is user-initiated. The AI has context on both users' profiles and compatibility data to inform its responses. Coaching is processed by Anthropic's Claude API.

4.7 Date Planning

Ember assists with date planning by searching for venues via Google Places API. Search queries and location preferences are sent to Google. See Section 5 for details on data shared with Google.

4.8 Automated Decision-Making Disclosure

Hearth uses automated decision-making technology ("ADMT") in the following ways:

• Match recommendations: Your daily match recommendations are generated entirely by automated processing (embedding similarity scoring, filtering, and AI reranking). No human reviews or selects your matches.
• Profiling: Ember extracts personality profiles from your conversations, which are used to determine compatibility with other users.
• Safety filtering: Automated content moderation may flag or restrict content or accounts.

Your right to opt out: You have the right to opt out of automated decision-making technology. To exercise this right, contact gwen@hearthdating.com. Note that opting out of matching ADMT will prevent Hearth from providing match recommendations, as the service relies on automated compatibility scoring.

4.9 Crisis Signal Detection (California SB 243 Companion Chatbot Safety)

Ember qualifies as a "companion chatbot" under California SB 243 (effective January 1, 2026). This section describes our safety protocol.

Automatic detection. When you communicate with Ember (text or voice), we automatically scan your messages and voice transcripts for crisis signals — specifically language indicating suicidal thoughts, self-harm intent, domestic violence, or immediate danger. Detection uses two layers:

• AI tool signal: In voice sessions, the AI model itself may flag a concern by calling an internal flag_safety_concern function when it recognizes crisis signals in conversation.
• Keyword scan: In both text and voice surfaces, a server-side keyword scan runs on each user message and each voice transcript turn, matching against a list of high- and medium-confidence crisis phrases.

In-moment response. When a high-confidence crisis signal is detected, Ember is instructed to pause the current conversation and share the following crisis resources: 988 Suicide & Crisis Lifeline (call or text 988), Crisis Text Line (text HOME to 741741), National Domestic Violence Hotline (1-800-799-7233), and 911 for immediate danger.

What we log. Every detection creates a record in our internal safety_events collection containing: timestamp, surface (Ember chat, Relationship Mode check-in, voice), detection source (AI tool signal, keyword scan, or both), severity level, matched keywords or model reason, a short message excerpt, session identifier, and whether resources were delivered. Records are internal and are not shared with other users.

Human review. Logged events are reviewed internally on a weekly cadence (48-72 hour response target) to verify that resources were delivered and to improve the detection list. We do not proactively contact users flagged by the system — our posture is in-moment referral only. If you want to speak with someone about a crisis signal on your account, email privacy@hearthdating.com.

Retention. Safety event records are retained after account deletion, consistent with how we retain other safety records (see Section 10). This is because crisis signal logs support documented compliance with SB 243 and platform-safety obligations.

Not a substitute for professional help. Ember is not a therapist, counselor, or clinician, and this safety protocol is not a mental-health service. It is a documented referral mechanism as required by California SB 243. If you are in crisis, please contact 988 or your local emergency services directly.

5. How We Share Your Information

We share your information with the following third parties, solely for the purposes described below. We require each provider to maintain data protection standards at least equivalent to our own.

5.1 AI Providers

5.2 Infrastructure and Services

5.3 Authentication

5.4 Analytics and Conversion Measurement

PostHog does not receive message content, profile text, photos, voice audio, or AI-generated data. Web pageview events are tagged with platform: "web" and are separate from in-app events.

TikTok Pixel scope. The TikTok Pixel fires only on hearthdating.com pages. It is not embedded in the Hearth mobile app. It does not have access to your Hearth account, profile, messages, photos, voice transcripts, ID-scan data, embeddings, or AI-generated content.

Automatic Advanced Matching: disabled. We have not enabled TikTok's "Automatic Advanced Matching" feature, which would otherwise let TikTok collect email or other identifiers from on-page form fields (such as the waitlist form).

Opt-out. The TikTok Pixel loads by default on hearthdating.com. You can opt out at any time via the "Do Not Sell or Share My Personal Information" link in the footer (a one-click opt-out method per 11 CCR § 7026(b)), the "Manage Cookies" toggle in the footer, by enabling Global Privacy Control in your browser, or by emailing privacy@hearthdating.com. If your browser sends a Global Privacy Control signal, we honor it automatically: we do not load the pixel, we ask any already-loaded pixel to stop tracking via its consent revocation API, and we clear first-party TikTok cookies on hearthdating.com.

5.5 ID Scan

The ID scan happens entirely on your device. No third-party sub-processor is involved in the barcode path, and no images are captured. The barcode scan on your device decodes the date of birth and expiry from your US driver's license; Hearth receives only those decoded fields plus a one-way hash of the document number used to detect when the same ID has been used to register a different account. We do not receive or store your name, ID photo, or any image of your ID.

5.6 What Other Users See

Other users may see: your profile information (name, age, photos, demographics you chose to share), and AI-generated match portraits about you.

Other users do not see: your raw conversation transcripts with Ember, your preference documents, your embeddings, your ID scan data, or your analytics data.

5.7 What We Do Not Do

• We do not sell your personal information for money. We have not sold personal information in the preceding 12 months.
• We do not share your Hearth account, profile, messages, photos, voice transcripts, embeddings, or AI-generated content with any advertising network.
• We do not embed advertising pixels in the Hearth mobile app. The TikTok Pixel described in Section 5.4 runs only on hearthdating.com.
• We do not use Automatic Advanced Matching with TikTok or any other advertising provider. We have not enabled features that would scrape email or other identifiers from on-page forms.
• The TikTok Pixel is the only third-party advertising tag on hearthdating.com. It loads by default on an opt-out basis. It does not load if you have opted out (via the footer "Do Not Sell or Share" link, the "Manage Cookies" toggle, or Global Privacy Control).

6. Sensitive Information

Hearth collects the following categories of sensitive personal information as defined under applicable state privacy laws:

• Gender identity and pronouns -- collected during onboarding; used for matching and profile display
• Sexual orientation -- implicit in partner gender preferences; used for matching
• Religious beliefs -- collected during onboarding if provided; used for matching preferences
• Lifestyle habits -- smoking, drinking, and similar preferences; used for matching filters
• Precise geolocation -- used for distance-based matching and date venue search
• Government-issued ID data -- date of birth, document type, and expiry date extracted from the barcode of a US driver's license. No images are captured or stored.

We collect sensitive personal information only with your consent and only for the purposes of providing the Hearth service (matching, AI coaching, and age confirmation via ID scan). We do not use sensitive personal information for purposes beyond those disclosed here.

To limit our use of your sensitive personal information, see Section 15.

7. Consumer Health Data (Washington My Health My Data Act)

This section applies to consumers covered by the Washington My Health My Data Act.

7.1 Consumer Health Data We Collect

Under the Washington My Health My Data Act, the following data Hearth collects may qualify as "consumer health data":

• Gender identity
• Sexual orientation (implicit in partner preferences)
• Precise geolocation

7.2 Purposes

We collect this data for the following purposes:

• Gender identity and sexual orientation: to match you with compatible partners based on your stated preferences
• Precise geolocation: to calculate distances between users for location-based matching, and to search for date venues

7.3 Third Parties Receiving Consumer Health Data

• Google (Cloud Firestore): stores profile data including gender identity and location
• Google (Gemini API): receives profile context including gender identity for embedding generation
• Anthropic (Claude API): receives profile data including gender identity for personality extraction and matching
• Google (Places API): receives location data for venue search
• PostHog: receives location-related analytics events (not precise coordinates)

The TikTok Pixel described in Section 5.4 receives website navigation and click events on hearthdating.com only. It does not receive gender identity, sexual orientation, precise geolocation, or any other category that may qualify as consumer health data under the Washington My Health My Data Act.

7.4 Your Rights

• Right to withdraw consent: You may withdraw consent for the collection of consumer health data at any time by contacting gwen@hearthdating.com. Withdrawing consent for gender identity or location data will prevent Hearth from providing matching services.
• Right to delete: You may request deletion of your consumer health data by contacting gwen@hearthdating.com or deleting your account.
• Right to opt out of advertising cookies: If you are a Washington consumer, you may opt out of the TikTok Pixel on hearthdating.com by clicking "Do Not Sell or Share My Personal Information" or "Manage Cookies" in the footer, or by enabling Global Privacy Control in your browser. Opting out does not affect your ability to use the Hearth mobile app.

7.5 No Sale of Consumer Health Data

We do not sell consumer health data. We will not sell consumer health data without your signed authorization.

7.6 Geofencing

Hearth does not geofence around healthcare facilities and will not use location data to identify consumers seeking healthcare services.

8. Voice Data

8.1 How Voice Data Is Processed

When you use voice mode to speak with Ember, your audio is streamed in real time to Google's Gemini API for processing. The audio stream is used solely to generate a conversational AI response.

8.2 Storage

Hearth does not store your voice audio. Audio is streamed to Google Gemini in real time and is not recorded or retained by Hearth.

Only text transcripts of voice conversations are retained by Hearth. These transcripts are stored in your account and are subject to the same retention and deletion policies as other chat messages (see Section 10).

8.3 No Voiceprints

Hearth does not create, store, or use voiceprints, voice templates, or any biometric identifiers derived from your voice for identification or authentication purposes.

8.4 Consent

Before your first voice session, you must accept the AI consent screen, which discloses that voice audio is streamed to Google for AI processing. You may choose text-only mode at any time.

8.5 Retention and Destruction

Voice transcripts are deleted when you delete your account. You may also request deletion of voice transcripts at any time by contacting gwen@hearthdating.com.

9. ID Scan

Hearth uses an on-device ID scan to confirm user age.

• Document capture: The ID scan happens entirely on your device using your phone's camera. You scan the barcode on the back of your US driver's license. No image of your ID is captured, transmitted, or stored. Only the decoded barcode payload is sent to Hearth's servers.
• What Hearth receives and stores: After a successful scan, Hearth stores your date of birth, the document expiry date, the document type (US driver's license), and a one-way hash of the document number used to detect ID reuse across accounts. Hearth does NOT receive or store your name, address, photograph, or any other field from the barcode.
• Purpose: The ID scan is used to confirm that users are at least 18 years old. The ID scan is not an identity check, is not a background check (see Terms of Service), and does not authoritatively verify who the user is.
• Retention: Hearth retains the extracted fields for as long as your account is active and for the period stated in the retention table below.

10. Data Retention

When you delete your account, we initiate deletion of your data from our active systems. Some data may persist in backups for a limited period consistent with our backup retention schedule. Safety records (reports and blocks) are intentionally retained after account deletion to protect other users.

Account deletion covers all user data collections including: profile data, chat messages (Ember, P2P, connection coaching), voice transcripts, AI preference documents, semantic memories, date planning data, analytics events, consent records, feedback, and photos.

11. Your Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

How to Exercise Your Rights

Contact us at gwen@hearthdating.com to exercise any of these rights. We will verify your identity before processing your request. We will respond within the timeframe required by applicable law (generally 45 days, extendable by an additional 45 days with notice).

You may also designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of authorization.

12. Data Security

We implement technical and organizational measures to protect your personal information:

• Encryption in transit: All data transmitted between the app and our servers is encrypted using TLS.
• Encryption at rest: Data stored in Google Cloud (Firestore, Firebase Storage, Cloud Run) is encrypted at rest using Google's default encryption.
• Infrastructure: Our backend runs on Google Cloud infrastructure, which maintains SOC 2, ISO 27001, and other security certifications.
• Authentication: We use Firebase Authentication with passkeys, Google Sign-In, and Apple Sign-In.
• Access controls: Backend API keys and credentials are stored in Google Secret Manager.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

13. Children

Hearth is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. Age is captured during onboarding and confirmed via an on-device ID scan.

If we learn that we have collected personal information from a person under 18, we will delete that information and terminate the associated account.

14. Do Not Sell or Share My Personal Information

Hearth does not sell your personal information for money. Hearth has not sold personal information in the preceding 12 months.

Hearth uses the TikTok Pixel on hearthdating.com solely for ad-attribution measurement (see Section 5.4), which may qualify as "sharing" under the CCPA. The pixel loads by default on an opt-out basis.

You can opt out at any time by:

• Clicking the "Do Not Sell or Share My Personal Information" link in the footer — a one-click opt-out method per 11 CCR § 7026(b) that immediately persists your choice, asks any already-loaded pixel to stop tracking, clears first-party TikTok cookies on hearthdating.com, and prevents the pixel from loading on future visits, or
• Clicking the "Manage Cookies" link in the footer and selecting "opt out," or
• Enabling Global Privacy Control in your browser — we honor navigator.globalPrivacyControl automatically and clear any TikTok cookies that were previously set, or
• Emailing gwen@hearthdating.com with subject "Do Not Sell or Share."

We share data with the third-party service providers listed in Section 5 solely for the purpose of operating the Hearth service. Those providers are contractually restricted from using your data for any purpose other than providing their services to Hearth.

15. Limit the Use of My Sensitive Personal Information

Hearth uses sensitive personal information (gender identity, sexual orientation, religion, precise geolocation, and government ID data) only for the purposes of providing the Hearth service as described in this policy. We do not use sensitive personal information for purposes beyond what is necessary to provide the service.

If you wish to limit our use of your sensitive personal information, contact gwen@hearthdating.com. Note that limiting the use of certain sensitive data (such as gender identity or location) may prevent us from providing matching services.

16. Changes to This Policy

We may update this privacy policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy.
• For material changes, we will notify you via email (at the address associated with your account) or via an in-app notification before the changes take effect.
• We review this policy at minimum annually.

Your continued use of Hearth after the effective date of a revised policy constitutes acceptance of the revised terms.

17. Contact Us

If you have questions about this privacy policy or wish to exercise your privacy rights:

• Email: gwen@hearthdating.com