Heartbits Privacy Policy

Last Updated: August 12, 2026

Effective Date: August 12, 2026

Welcome to Heartbits.

This Privacy Policy explains how Heartbits collects, uses, stores, shares, and protects personal information when you access or use the Heartbits website, applications, features, content, and related services (collectively, the "Services").

If you do not agree with this Privacy Policy, please do not use the Services.

In this Privacy Policy, "Heartbits," "we," "us," and "our" refer to the provider of the Services. "You" means the individual or entity using the Services.

Heartbits is intended for adults only. You must be at least 18 years old to create an account or use the Services.

1. Scope of This Policy

This Privacy Policy applies to personal information we collect when you access or use the Services, communicate with us, create an account, submit content, make a purchase, or otherwise interact with Heartbits.

This Privacy Policy does not apply to third-party websites, products, platforms, or services that may be linked to or integrated with the Services and that are subject to their own privacy policies.

2. Information We Collect

We may collect the following categories of information, depending on how you use the Services.

2.1 Information You Provide Directly

This may include:

  • account information, such as your email address, username, password, or login credentials;

  • age confirmation information, including your confirmation that you are at least 18 years old and the date and time that confirmation was given;

  • profile information, such as display name, avatar, preferences, pronouns, or other profile details you choose to provide;

  • communications you send to us, including support requests, feedback, survey responses, or emails;

  • prompts, messages, text, images, audio, files, characters, or other content you input, upload, submit, generate, or share through the Services;

  • payment-related information associated with purchases, plans, Diamond transactions, refunds, or billing events, although full payment card details are typically processed by third-party payment providers rather than stored by us directly; and

  • any other information you choose to provide when using the Services.

If you provide personal information relating to another person, you represent that you have the right and any required permission to do so.

2.2 Information We Collect Automatically

When you use the Services, we may automatically collect certain technical and usage information, including:

  • device information, such as device type, operating system, browser type, app version, device identifiers, and language settings;

  • network and connection information, such as IP address, approximate location inferred from IP, mobile carrier, and connection status;

  • usage information, such as feature interactions, clicks, session activity, pages viewed, referring URLs, timestamps, crash logs, diagnostics, and performance data;

  • transaction and balance records, such as your plan status, Diamond balance, and records of Diamonds granted, used, or adjusted; and

  • cookies, pixels, local storage, SDK signals, and similar technologies used to remember preferences, keep you signed in, understand usage, secure the Services, and improve performance.

2.3 Information from Third Parties

We may receive information from third parties, such as:

  • login providers, if you sign in through a third-party account;

  • payment providers, app stores, or subscription platforms in connection with billing and purchase events;

  • analytics, security, anti-fraud, or infrastructure providers; and

  • other users, if they refer you, share content with you, or otherwise interact with you through the Services.

3. How We Use Information

We may use personal information for the following purposes:

  • to provide, operate, maintain, and improve the Services;

  • to create and manage user accounts and profiles;

  • to deliver core product functionality, including AI character chat, character creation, image and video requests, microdramas, saved history, and user settings;

  • to verify that users meet our minimum age requirement and to record age confirmations;

  • to process payments, plans, Diamond grants and deductions, refunds, and transaction records;

  • to communicate with you about your account, support issues, service changes, updates, security alerts, and administrative matters;

  • to monitor usage, analyze performance, debug errors, and improve safety, quality, and reliability;

  • to detect, investigate, prevent, and respond to fraud, abuse, policy violations, illegal activity, and security incidents;

  • to enforce our Terms of Service and other legal rights;

  • to comply with legal obligations, lawful requests, and regulatory requirements; and

  • where permitted by law, to send product updates, promotions, or other marketing communications, subject to your choices.

4. AI Interactions and Content Processing

Heartbits is an AI character and interactive storytelling platform. Characters on Heartbits are AI characters, not real people, and responses and media may be AI-generated.

Because the Services include AI-powered features, we may process prompts, messages, uploads, conversation content, preferences, and related interaction data in order to:

  • generate responses and provide requested features, including images, videos, and microdramas;

  • personalize your experience;

  • maintain conversation history and continuity where such functionality is offered;

  • detect misuse, harmful activity, or policy violations;

  • improve service quality, performance, and safety; and

  • troubleshoot bugs, service issues, and abuse reports.

We do not use the content of your private conversations for third-party targeted advertising.

If you choose to share content publicly or with other users through the Services, that content may be visible to others based on the relevant feature settings.

5. Legal Bases for Processing

Where required by applicable law, we process personal information on one or more of the following legal bases:

  • performance of a contract, including to provide the Services you request;

  • our legitimate interests, such as maintaining, securing, improving, and administering the Services, and confirming that users meet our minimum age requirement;

  • your consent, where consent is required;

  • compliance with legal obligations; and

  • protection of vital interests, prevention of fraud, or establishment, exercise, or defense of legal claims, where applicable.

6. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to:

  • keep you signed in;

  • remember your preferences and settings;

  • understand how the Services are used;

  • measure performance and diagnose issues;

  • protect against fraud and abuse; and

  • support analytics and, where permitted, marketing activities.

You can usually control cookies through your browser or device settings. Please note that disabling certain cookies or storage technologies may affect the availability or functionality of parts of the Services.

7. How We Share Information

We may share personal information in the following circumstances:

7.1 Service Providers

We may share information with vendors, contractors, and service providers that help us operate the Services, such as hosting providers, cloud infrastructure providers, AI model and generation providers, analytics providers, customer support tools, authentication providers, content moderation providers, email delivery services, payment processors, and security providers.

7.2 Legal and Safety Reasons

We may disclose information where we reasonably believe it is necessary to:

  • comply with applicable law, regulation, legal process, or lawful government request;

  • enforce our Terms of Service or other agreements;

  • protect the rights, privacy, safety, property, or security of Heartbits, our users, or others; or

  • investigate fraud, abuse, security issues, or illegal activity.

7.3 Business Transfers

If Heartbits is involved in a merger, acquisition, financing, asset sale, reorganization, insolvency proceeding, or transfer of all or part of the Services to another operator, personal information may be transferred as part of that transaction, subject to applicable law.

7.4 With Your Direction

We may share information when you instruct us to do so or when you choose to use features that intentionally disclose information to third parties or other users.

8. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business and financial records, resolve disputes, enforce agreements, prevent abuse, and comply with legal obligations.

Retention periods may vary depending on the type of information, the sensitivity of the data, the nature of the Services involved, and applicable legal requirements. We may retain age confirmation records and transaction records for as long as needed to demonstrate compliance with our age requirements and financial obligations.

When personal information is no longer needed, we will delete it, de-identify it, or retain it only as permitted or required by law.

9. International Data Transfers

Heartbits is intended for users in multiple countries and may use service providers located in different jurisdictions. As a result, your personal information may be transferred to, stored in, or processed in countries other than the country where you live.

Where required by applicable law, we take reasonable steps to use appropriate safeguards for international data transfers.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet and no method of electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

You are also responsible for safeguarding your account credentials and using the Services in a reasonably secure manner.

11. Your Rights and Choices

Depending on your location and the laws that apply to you, you may have certain rights regarding your personal information, including the right to:

  • access personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of personal information;

  • object to or restrict certain processing;

  • withdraw consent where processing is based on consent;

  • request portability of certain information; and

  • opt out of marketing communications.

You may exercise applicable rights by contacting us at contact@heartbits.ai. We may need to verify your identity before processing your request. We may also decline or limit a request where permitted by law.

You can opt out of non-essential marketing emails by using the unsubscribe link in those emails or by contacting us directly. Even if you opt out of marketing communications, we may still send you service-related or transactional messages.

12. Age Requirements and Minors

Heartbits is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18.

You must be at least 18 years old to create an account or use the Services. We ask you to confirm your age before you register, and we may suspend or terminate any account that does not meet this requirement.

If we learn that we have collected personal information from someone under 18, we will take reasonable steps to delete it.

If you believe that a person under 18 has provided personal information to us, please contact us at contact@heartbits.ai.

13. Third-Party Services

The Services may contain links to or integrations with third-party websites, tools, payment services, social login providers, app stores, or other services. We are not responsible for the privacy practices of those third parties, and their handling of data is governed by their own policies.

We encourage you to review the privacy policies of any third-party services you use in connection with Heartbits.

14. Sensitive and Restricted Content

You should not use the Services to submit unlawful, abusive, or restricted content unless clearly permitted by the applicable feature and by law.

Heartbits does not provide, promote, or permit pornographic or obscene content. We may use automated tools and manual review processes, where appropriate and permitted by law, to detect, investigate, remove, or restrict content that violates our policies, legal obligations, or safety requirements.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, legal requirements, technology, or our data practices.

The updated version will become effective when posted or on the date stated at the top of this Privacy Policy. If changes materially affect your rights or our data practices, we will make reasonable efforts to provide notice where required by law.

Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated Policy.

16. Contact Us

If you have questions, complaints, requests, or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: contact@heartbits.ai