Privacy Policy

• We do not store health details. No diagnoses, medicines, symptoms, test results, hospital visits, mood answers or screening answers.
• Your safety plan, your list of questions for your care team and your daily check-in answer stay on your own phone or computer. We cannot see them.
• We do not sell your information. We do not run advertising or analytics trackers.
• Deleting your account in Settings deletes everything we hold about you.

HeartRestarted is made by Impact Consulting AI ("we", "us"). You can reach a person at info@impactconsulting.ai.

We keep only what the community needs to work:

• Your account: your name, your email address and your password. Your password is stored in scrambled form, so even we cannot read it. If you sign in with Apple or Google, we receive the name and email address you let them share.
• Your profile: a display name, a picture or emoji, whether you are a survivor, a family member or a supporter, your timezone and your privacy choices. You can also add a short bio and interests. If you choose to, you can say roughly how long ago it happened, as one of three ranges (under 3 months, 3 to 12 months, over a year), and how you like to communicate.
• What you share: your posts, stories, comments, reactions, circle posts, recipes, creative posts and messages to other members, and the reports you send us about content.
• Connections: your buddy requests and, if you use it, the link between you and a family member.
• A check-in count: the date and time you checked in, never your answer.
• Notifications and settings: your email and notification choices, and a device token if you turn on push notifications.
• If you switch on "Welcome new members": that it is on, and which newcomers you were asked to greet, when, and whether you replied. Only ids, statuses and times.
• When you agreed to our disclaimer: the time, the version, and the internet address and device type you used.
• Messages you send us through the contact form or support page.
• Technical records: the kind of device you use (web or iPhone), when you were last active, and crash reports. Our hosting companies also keep ordinary server logs, which include internet addresses.

HeartRestarted does not store diagnoses or the kind of event you had, dates of events or procedures, medicines or side effects, symptoms, test results, hospital, emergency room or doctor visits, mood or mental health answers, screening questionnaires, insurance, or research consent. We do not ask for them.

Three tools keep their contents in the storage of the phone or computer you use, and nowhere else:

• Your safety plan, including your emergency contacts and any medical details you choose to type into it.
• Your list of questions for your care team.
• Your daily check-in answers.

We cannot see these and cannot recover them. They do not move to a new phone, so print or save a copy of your safety plan. They are cleared when you delete your account, and you can include them in a download of your data from Settings.

Some state laws, such as the Washington My Health My Data Act and the Nevada and Connecticut health data laws, protect "consumer health data". Because HeartRestarted is a community for survivors and families, the fact that you have an account may say something about your health. This section explains how we treat that.

• What we collect that could count: that you have an account, the role you choose (survivor, family member or supporter), the optional range of time since it happened, and anything you choose to write in your bio, posts or messages.
• Why: only to run the community: to show your name and role to other members as you allow, to suggest people in a similar place if you turn on "People like you", to ask members who switched on "Welcome new members" to say hello when someone posts for the first time (they are told only the newcomer's role and rough time since it happened, never their name), and to keep the service safe.
• Who sees it: other members see your name, picture, role and posts according to your privacy settings. "People like you" is off until you turn it on. Anonymous mode hides your real name.
• Who we share it with: only the companies that run the service for us, listed below. We do not sell it, rent it or share it for advertising.
• Your choices: you can see it, download it, change it, or delete it at any time from Settings. You can withdraw your choices, for example by turning off "People like you" or "Welcome new members", or switching on anonymous mode.
• If you live in a state with a consumer health data law, you can also email us to ask what we hold, to ask us to delete it, or to withdraw consent. If we turn a request down, you can appeal by replying with the word Appeal and we will answer in writing.

We use a small number of companies, and only for the job listed:

• Supabase: our database, sign-in and file storage, in the United States.
• Vercel: hosting for the website and app pages.
• Resend: delivery of the emails we send you.
• Sentry: crash reports, set up so that names, email addresses and the text of what you write are removed before they leave your device.
• Apple and Google: delivery of the iPhone app, and sign-in if you choose "Sign in with Apple" or "Sign in with Google".

We may also share information if the law requires it, if it is needed to prevent serious harm to someone, or as part of selling or merging the company, in which case this policy would carry over and we would tell you first.

We do not sell your information, and we do not use advertising, tracking pixels or analytics services from other companies on our website or in the app.

We use your browser or phone storage only to keep you signed in, to remember settings such as text size, and to hold the three device-only items above. We do not use advertising or tracking cookies.

We keep your information while you have an account. To delete it, go to Settings, choose Delete Account and type DELETE. That removes your profile, your posts and stories, your messages, your connections, your check-in count, your notification settings, your picture and the email and device records tied to you. Messages you sent are removed from the other person's inbox too. It also clears the safety plan, questions and check-ins saved on the device you are using. Deleting cannot be undone.

Our database provider keeps routine backups for a short time for disaster recovery. Deleted information leaves those backups as they expire. If you cannot use Settings, email us and we will delete your account for you.

• Download a copy of your information: Settings, Export Your Data.
• Correct it: change your profile any time.
• Delete it: Settings, Delete Account.
• Choose who sees you: anonymous mode, "People like you" and profile visibility are in Settings.
• Stop emails: use the switches in Settings, or the link in an email.
• Ask us anything about your information: email us.

If you live in California or another state with a privacy law, you also have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing for advertising. We do neither.

Information travels between your device and our servers over encrypted connections. Access to our database is limited to the people who run the service. No system is perfectly secure, so we cannot promise that nothing will ever go wrong. If something we hold is exposed, we will tell the people affected as the law requires.

HeartRestarted is peer support. It is not a doctor, a hospital, a health plan or a medical device, and it does not give medical advice, diagnosis or treatment. The federal health privacy law known as HIPAA applies to health care providers and health plans, so it does not cover what you share here. In an emergency, call 911. If you are in crisis, call or text 988.

HeartRestarted is for people 18 and older. We do not knowingly collect information from children. If we learn that we have, we will delete it.

HeartRestarted is for people in the United States, and your information is stored in the United States.

If we change this policy, we will update the date at the top and tell you in the app or by email. We will ask you first before we collect any new kind of health-related information.

Questions, requests or appeals: info@impactconsulting.ai.