11 commitments we make
to every user

Your conversations are encrypted in transit and at rest and are not routinely read; they are reviewed only when flagged for safety or when you ask support for help. AI providers process messages to generate replies. HeartScene does not use conversation content to train AI models; provider processing is described in Privacy Policy §7–§9.

See: Privacy Policy §10, §7.1

Account photos use access-controlled storage. AI and image service providers may process them to operate the feature, including outside Canada. We do not sell photos to advertisers or data brokers. You can request deletion; provider copies and backups are covered by the retention notice.

See: Terms §9.4, Privacy Policy §4.1 and §11

Spoken input goes to a transcription provider. These transcription features do not save raw user recordings to account storage or build a biometric voiceprint. Transcripts, reports and generated AI voice replies or voice notes may be saved. Provider terms and account settings govern provider retention.

See: Terms §9.5, Privacy Policy §7.4

Purchased coins don't expire while your account is active. Before any inactivity deletion we email you 30 days ahead.

See: Terms §12.1

Start deletion from Settings → Your Data. The workflow deletes the account and associated active records. Limited audit events, security records, provider records and backups may remain; this is not a promise of immediate erasure from every system.

See: Terms §18.1, Privacy Policy §12

We do not hide content to pressure you into a purchase. Our notification rules prohibit fictional companions from claiming to miss you to drive engagement. We do not manufacture emotional urgency to drive spending. Coins are optional. Payment changes usage allowances, not the character’s feelings: AI characters do not have feelings.

See: Terms §6.6 (Duty of Loyalty)

Google Analytics and advertising tracking are disabled. We do not sell personal data to advertisers or data brokers. Service providers still receive data needed to operate the app, as listed in the Privacy Policy. Paid plans and coin packs are closed during beta.

See: Privacy Policy §8 — "We do not sell your Personal Data"

HeartScene is operated from Canada and uses Supabase for account storage. AI, voice, image and other service providers may process data in other countries. Contact support for the current hosting region and provider processing information; we do not promise Canada-only processing.

See: Privacy Policy §9

The AI may display a safety notice and direct you to qualified human resources. Fictional AI cannot provide care or crisis intervention. Safeguards may fail.

See: Privacy Policy §6.5

Download everything your AI companion remembers about you — saved context, preferences and activity history — in a single JSON file. This is your data under GDPR Art. 20 Right to Data Portability. Request it any time from Settings → Your Data.

See: Privacy Policy §12 (GDPR Art. 20), §14.2 (Quebec Law 25)

Every payment method HeartScene accepts must support our ability to check that you are an adult. Paid plans are closed during our beta. When they open, card payments go through Stripe with cardholder-name matching, and a name mismatch means a Stripe Identity check. PayPal is not accepted today and would require third-party age verification first. We do not accept cryptocurrency — because we cannot verify who is sending it. Those standards are not negotiable.

See: Terms §11.3, §11.4, Privacy Policy §16