HalfHeart Privacy Policy

Effective date: 6 October 2026
Last updated: 7 October 2026

This policy explains what information the HalfHeart app (“HalfHeart”, “the app”) collects, why, who can see it, and how you can delete it. Section 2.6 covers the halfheart.in website. HalfHeart is made by LazyByte (“we”, “us”). This policy is published at https://lazybyte.in/privacy-policy/halfheart.

HalfHeart is a private space for two partners. Most of what you put into it is there to be seen by one other person: your partner. Please keep that in mind when you use it.

1. Summary

• We collect only what the app needs to work: your account, your profile, what you do in your shared heart, roses, flower shelf and timeline, and a token so we can send you notifications.
• Your partner can see your name, your profile and what you share in the app. Nobody else can.
• We do not sell your data.
• We do not access your location, contacts, photos, camera or microphone.
• You can delete your account and data at any time from inside the app.

2. Information we collect

2.1 Account information

You can sign in with Google or with an email address and password. Sign-in is handled by Firebase Authentication, a Google service.

• Email and password accounts: your email address and your password. Firebase stores the password in hashed form; we never see it. We send a verification email when you sign up and a reset email if you ask for one.
• Google accounts: your email address, name and profile picture URL, as provided by Google. HalfHeart does not display or copy your Google profile picture.
• A user ID that Firebase creates for your account, and the times your account was created and last signed in.

2.2 Profile

• Display name (required). This is the name your partner sees and the name used in notifications sent to them.
• Gender and birthday (optional). Your partner can see these. You can change or remove them at any time.

2.3 Content you create in the app

• Your half of the heart: how far apart it is, any lock and its length, your colour (for example “missing you” or “low day”), and when you last changed it.
• Roses: which roses have grown in your garden, which you have picked, sent, received, kept or given back, and when.
• Flower shelf: the bouquets you arrange (name, vessel, ribbon, style and which roses are in them), their position on the shelf, and whether your shelf is shared with your partner.
• Timeline: the moments you and your partner add, such as anniversaries, birthdays, trips and plans, with their titles, notes, dates, whether they repeat each year, and who added them. When a lock ends with your heart whole again, the app adds a “made up” moment to your timeline. The reason for a lock is never recorded.
• Pairing codes: the 6-character code you create to pair, who created it, who used it and when. A code can only be used for 24 hours.

2.4 Device and technical information

• Push notification token: if you allow notifications, we store your device’s notification token and its platform (for example Android or iOS) so we can send notifications to that device. The token is removed when you sign out or when it stops working.
• Settings on your device: whether sounds are muted and whether the garden is shown in 3D or as a list. These are stored only on your device.
• Our hosting providers keep standard service logs (such as request times and errors) to run and protect their services.

2.5 Information we do not collect

We do not collect your location, contacts, photos, files, camera, microphone, payment details, advertising ID or browsing history. The app contains no advertising or analytics software.

2.6 This website

The halfheart.in website uses Google Analytics to count visits and see which pages people use. Google Analytics sets cookies (named _ga) and receives information such as the pages you view, how you arrived, your browser and device type, and your approximate location from your IP address.

If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, we ask first, and Google Analytics is only loaded if you accept. Elsewhere it is on by default. Wherever you are, you can turn it off or on at any time with Cookie settings at the bottom of any page. To decide whether to ask, the website checks which country your connection comes from; that country is not stored. Google processes this data under its privacy policy: https://policies.google.com/privacy. The website does not use Google Analytics for advertising.

3. How we use your information

We use your information only to:

• create your account, sign you in and keep it secure;
• pair you with your partner and keep your shared heart, roses, flower shelf and timeline in sync between your devices and theirs;
• run the app’s rules, such as lock timers and when roses bloom;
• send you notifications about your partner’s activity (see section 5);
• send account emails, such as email verification and password reset;
• prevent abuse, fix problems and keep the service running.

We do not use your information for advertising, profiling or automated decisions about you, and we do not sell or rent it to anyone.

Our legal bases, where the law requires them, are: performing our agreement with you (providing the app), your consent (for notifications and optional profile details, which you can withdraw at any time), and our legitimate interest in keeping the service secure.

4. Who can see your information

Your partner. Once you pair, your partner can see:

• your display name, gender and birthday;
• your half of the heart, including its distance, lock and colour;
• roses you send them, and what they do with them;
• every moment on your shared timeline (either of you can add, edit or delete any moment);
• your flower shelf and bouquets, but only while you choose to share your shelf.

Your partner cannot see your email address, your garden or your private shelf.

Service providers. We use Google Firebase and Google Cloud to run HalfHeart:

Service	What it does
Firebase Authentication	Sign-in, verification and password reset emails
Cloud Firestore	Stores your profile and app content
Cloud Functions	Runs pairing, roses, lock timers and notifications on the server
Firebase Cloud Messaging	Delivers push notifications (through Apple Push Notification service on iPhone)
Google Sign-In	Signs you in with your Google account, if you choose it

Google processes this data on our behalf under its own terms and privacy policy: https://policies.google.com/privacy and https://firebase.google.com/support/privacy.

Legal reasons. We may disclose information if the law requires it, or if it is necessary to protect the safety of any person or the security of the service.

We do not share your information with anyone else.

5. Notifications

If you allow notifications, HalfHeart tells you when your partner moves their half, locks it, comes back, changes their colour, sends or returns a rose, adds a moment to your timeline or deletes their account, and when your own lock ends.

Notifications include your partner’s display name and a short description of what happened, and they send yours to your partner in the same way. They can appear on a locked screen. You can turn notifications off at any time in your device settings.

6. Where your data is stored

Your data is stored on Google Cloud servers in the United States. If you live elsewhere, your information is transferred to and processed in the United States. Google protects these transfers with the safeguards described in its terms, such as standard contractual clauses.

7. How long we keep your data

We keep your data for as long as you have an account.

• Pairing codes stop working 24 hours after they are created. The record of a code is deleted with your account.
• Received roses that you don’t keep or give back within 3 days dry into your keepsakes. They stay part of your account.
• Notification tokens are deleted when you sign out on a device, or when the device no longer accepts notifications.

8. Deleting your account

You can delete your account in the app: profile icon (top right) → Delete account. This deletes immediately and permanently:

• your sign-in account and your profile;
• your garden, your flower shelf and all your bouquets;
• your pairing codes and notification tokens;
• the shared heart with your partner, including all roses exchanged and your shared timeline. A shared heart cannot continue with only one half, so these are deleted for your partner too;
• your partner’s bouquets, because they are made from roses in your shared heart.

Your partner keeps their own account and profile, receives a notification that your account was closed, and can pair again.

Deletion removes your data from our active databases straight away. Copies in Google’s internal backups and logs are deleted on Google’s normal schedule.

If you cannot open the app, email us (section 12) from the address on your account and we will delete it for you.

9. Your rights

Depending on where you live (for example under the GDPR in the EU and UK, the Digital Personal Data Protection Act 2023 in India, or state laws in the United States), you may have the right to:

• see the personal information we hold about you and get a copy of it;
• correct it (you can edit your name, gender and birthday in the app at any time);
• delete it (see section 8);
• object to or restrict how we use it;
• withdraw consent you have given, such as for notifications;
• complain to your local data protection authority.

To use any of these rights, email us (section 12). We will reply within 30 days and may need to confirm that you own the account.

10. Security

Data is encrypted in transit between the app and our servers and encrypted at rest by Google Cloud. Our database rules let each person read only their own data and their partner’s shared data, and anything involving both partners runs on the server rather than on your phone. No system is perfectly secure, so please use a strong password and keep your device locked.

11. Children

HalfHeart is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, email us and we will delete it.

12. Contact us

Questions, requests or complaints about privacy:

LazyByte
Email: support@lazybyte.in
Website: https://lazybyte.in

13. Changes to this policy

We may update this policy when the app or the law changes. We will post the new version at the address above and change the “Last updated” date. If a change materially affects how we use your information, we will also tell you in the app before it takes effect.