Your privacy

Your account. You sign in with Google. Google tells HeartMirror your email address, your name, and your profile picture. HeartMirror keeps these, plus the sign-in details Google provides, so you can stay signed in.

Your conversations. What you write and what HeartMirror replies are saved, so you can come back to them.

Saved notes, only if memory is on. Memory is off unless you turn it on in Settings. When it is on, HeartMirror saves short notes from your talks and may use them later. It won't bring up painful things unless you mention them first.

Screenshots. Sharing screenshots is turned off for now, so pictures are not sent anywhere.

On this device. Your browser keeps a few small things, like your color theme and a copy of the conversation on the screen, so the page works smoothly.

There are no ads, no payments, and no tracking or analytics tools.

To write a reply, HeartMirror sends your message and the recent conversation to OpenAI, the company that makes the AI. If memory is on, some saved notes may be sent too. Your messages are also sent to OpenAI's safety-check service.

HeartMirror can also be given a short background note about you by the person who set it up for you. It is off unless they turn it on. When it is on, it is sent only with messages it relates to, and never when you might be in danger.

HeartMirror does not send your name or your account email to OpenAI. If you type an email address or phone number into a message, it is removed before sending.

HeartMirror asks OpenAI not to store these requests for later use. Under OpenAI's rules for this kind of service, OpenAI says it does not use them to train its AI. OpenAI does keep them for up to 30 days to watch for misuse, and sometimes longer if the law requires it. You can read OpenAI's own explanation.

Your account, conversations, and saved notes are stored in a database run by Supabase. The website runs on Vercel. Sign-in goes through Google.

HeartMirror's server logs record that something happened or went wrong. They are set up not to include what you write.

Only your signed-in account can open your conversations and notes in HeartMirror.

The person who set up HeartMirror for you manages the service, and can technically reach the database. The companies named above (OpenAI, Supabase, Vercel, Google) handle the parts they run, under their own rules.

No online service can promise that nothing will ever go wrong. HeartMirror tries to keep what it collects small and to let you delete it.

Go to Settings. There you can turn memory on or off, read your saved notes, delete one note or all of them, delete all your conversations, or delete your whole account. Each one asks you to confirm first.

Deleting removes it from HeartMirror's database right away.

Backups. The database company keeps backup copies for a limited time. Something you delete can stay in an older backup until that backup is replaced.

OpenAI. Messages already sent to OpenAI may be kept by OpenAI for up to 30 days to watch for misuse, as described above. Deleting in HeartMirror can't remove those.

Google. Deleting your HeartMirror account doesn't change your Google account.

HeartMirror is not therapy, not medical advice, and not an emergency service. It can't call anyone for you. If you are in danger, call 911. You can call or text 988 at any time.

If you have questions about your privacy, ask the person who set HeartMirror up for you.