Draft for counsel review.
Privacy Policy
Version of September 3, 2026.
Big Sky Little Acorn, LLC operates Heartship at heartship.app. The postal address is 780 W FM 1626, #1057, Manchaca, TX 78652. Questions go to help@heartship.app.
What Heartship collects
| Group | Fields |
|---|---|
| Account | First name, last name, email address, mobile number, birthday, time zone, display color. |
| Writing | The daily score from 1 to 10, the entry text, answers to the shared question, gratitude notes, acts of love, and the answers to the ten-step questionnaire and the 58-item interview. |
| Derived | The scored psychological profile, the attachment style, the attentiveness score, streaks, points, weekly results, and the period analyses. |
| Billing | The Stripe customer id, the subscription id, the status, the price id, and the trial end date. Stripe holds the card. Heartship never stores a card number. |
| Device | Push token, platform, app build number, and the last time that device opened the app. |
| Security | Hashed contact values in the one-time code ledger, a hashed IP address on each recorded consent, and an append-only log of account actions. |
Why Heartship holds it
- Sign-in by 6-digit code, by text and by email.
- The daily check-in, the shared question, the points, and the standing among couples.
- One nightly line for each person, written from that person's own profile.
- Reminders by push, text, and email on the schedule each person picks.
- Billing, the trial, and the record of a subscription.
- Fraud checks on the forms that request a sign-in code.
- Error reports and the audit trail for account actions.
Heartship runs no advertising. Big Sky Little Acorn, LLC does not sell personal data and does not hand personal data to a third party for that party's own marketing.
Processors
| Processor | What it handles |
|---|---|
| Supabase | The database, the account records, and authentication. |
| Railway | The application servers and the background worker. |
| Cloudflare | DNS, the network in front of the site, and the bot check on the code-request forms. |
| Stripe | Checkout, the card, and the subscription. |
| Resend | Email delivery. |
| Twilio | Text delivery, phone number lookup, and the one-time code service. |
| Anthropic | The nightly batch that scores attentiveness, writes the reminder lines, builds the psychological profile, and writes the period analyses. |
| Apple | Push delivery to an iPhone. |
| Sentry | Error reports from the application. |
What a partner reads
A partner reads the day score once both people have logged, the check-in time, gratitude notes written to them, answers to the shared question once both people have answered, and the couple's points and standing.
A partner never reads the other person's entry text, questionnaire answers, interview answers, psychological profile, attentiveness score, or factor breakdown. An ended bond leaves no partner data visible to either side.
Retention
- Raw text of the questionnaire answers and the interview answers is deleted 4 weeks after the profile is scored. Before that deletion runs, the app shows a notice with a mandatory OK, and an email follows the deletion. The scored fields stay, and the app runs the same afterward.
- One-time code records are purged on the nightly housekeeping run at 3:30 AM.
- Account records, entries, and derived rows stay while the account stays open.
- A deletion request runs on the date recorded with the request.
- Billing records stay with Stripe for the period United States tax law requires.
Your rights
| Right | What happens |
|---|---|
| Export | One JSON file of that person's own rows, from the account page. |
| Delete answers | Questionnaire answers, interview answers, the inferred profile, and that person's own acts and gratitude notes go away. Daily entries stay. |
| Delete account | Everything belonging to that person goes away in one transaction. The bond ends and the partner is told. |
| End bond | Shared rows close. Each person's own rows stay. |
| Correct | Write to help@heartship.app with the field and the correct value. |
A resident of California, Colorado, Connecticut, Texas, Utah, or Virginia carries the state rights to know, delete, correct, and opt out of a sale. Big Sky Little Acorn, LLC runs no sale. Send any request to help@heartship.app and expect a reply within 45 days.
Text messages
A mobile number reaches Twilio for delivery and for a line-type lookup, and reaches no one else. Mobile numbers and text consent are never sold and never handed to a third party for marketing. The SMS program page carries the full disclosure.
Security
Traffic runs over TLS. Row-level security in the database limits every read to the account that owns the row. Sign-in uses a 6-digit code with a 10-minute life, 5 attempts, and a 60-second gate on a resend. No password exists on the account.
Children
An account holder must be at least 18 years old. Big Sky Little Acorn, LLC does not knowingly collect data from a child under 13. Write to help@heartship.app to report such an account and the data goes away.
Changes
Big Sky Little Acorn, LLC dates every version of the privacy policy. Material changes go to account holders by email.
Contact
help@heartship.app
Big Sky Little Acorn, LLC
780 W FM 1626, #1057
Manchaca, TX 78652