Privacy policy

Effective November 5, 2026

    In short: your prompts stay on your phone unless you create an account to sync them. There are no ads, no analytics and no tracking, and your data is never sold. You can delete your account and everything in it at any time.
  

This policy covers the Prompt Heart app for Android (package com.inigocode.promptheart) and its cloud sync. Prompt Heart is made by Inigo ("I", "me"). If you have questions, email inigo@tosstheworld.org.

Using the app without an account

Everything you create stays on your device: prompts, categories, tags, attached images, version history, settings, your name, bio and profile photo, and a record of which prompts you copied and when. None of it is sent to me.

That copy record (kept for about 13 months) is what your profile uses for your most-used prompts, your year of activity, streaks and achievements. It never leaves the phone.

If you create an account (optional)

An account lets you sync across devices. When you sign up and use sync, the following is stored on my servers:

Data	Why
Email address and password	To sign you in, and to email you codes to confirm your account or reset your password. The password is stored only as a secure hash.
Name, short bio and profile photo (all optional)	To show on your profile and greet you, on each of your devices.
Prompts, categories, tags and their timestamps	To sync them between your devices.
Images attached to prompts (up to 20 per account)	To sync them between your devices. Images beyond 20 stay only on the phone.

This data is used only to provide the app's features. Each account can access only its own data. All traffic is encrypted in transit (HTTPS).

These stay on your device even when you're signed in: version history, settings, the record of what you copied, your profile statistics and achievements, images over the 20-image limit, and anything you copy to the clipboard.

Services that process data for me

Supabase hosts the account and sync database and image storage. It processes data only on my behalf. Supabase privacy policy.
Resend sends the app's account emails: the codes to confirm your account and to reset your password. It receives your email address and the message, and uses them only to deliver it. Resend privacy policy.
Expo (EAS Update) delivers app updates. When the app checks for an update, Expo's servers receive the app version, your device platform, a random installation ID and your IP address. This is used only to send you the right update. Expo privacy policy.

I don't share your data with anyone else, except where required by law.

Opening AI apps

When you tap "Copy & open", the prompt is copied to your clipboard and the AI app you chose opens. If that app isn't installed, its website opens instead, and for some services (ChatGPT, Claude, Grok and Perplexity) the prompt is included in the web address so it's typed in for you. Once you're in another app or website, that service's own privacy policy applies.

Importing and exporting

When you import prompts, the app reads only the files you pick, on your phone. Backups and spreadsheet (CSV) exports are made on your phone and go only where you save or send them.

Home-screen widget

If you add the Prompt Heart widget, it shows your prompts' titles on your home screen, so anyone who can see your phone can see them too. A tap copies a prompt or opens the app. The widget reads your prompts from your phone and sends nothing anywhere. With App lock on, the widget hides your prompts unless you turn on Show prompts in the widget in Settings.

Permissions

Internet: for sync, updates and opening websites.
Photos: only the photos you pick in the system photo picker, to attach them to a prompt or set a profile photo. The app can't browse your gallery.
Files: only the files you pick in the system file picker, to import prompts or restore a backup. The app can't browse your storage.
Vibration: for a short buzz when you copy.
Biometrics: only if you turn on App lock, to unlock the app with your fingerprint, face or phone screen lock. Android checks it and only tells the app whether it passed; the app never receives your fingerprint, face data or PIN.
Running in the background: only for the widget. Android may start Prompt Heart briefly to draw or update it, including after your phone restarts. This uses the foreground service, wake lock and start-at-boot permissions, and sends nothing anywhere.
Sharing into the app: text or images you share into Prompt Heart from another app are saved as a prompt.

The app doesn't use your camera, microphone, location or contacts.

Keeping and deleting your data

Deleted prompts go to the Trash for 30 days, then they're erased on your devices and in the cloud. Emptying the Trash erases them immediately.
Account data is kept for as long as you have an account.
Deleting your account permanently removes it, with all its prompts, categories, images and profile photo, from my servers. It may stay in my hosting provider's routine backups for a short time before they're overwritten. See how to delete your account.
Signing out lets you remove your prompts from the phone too, or keep them there.

Your choices

See and export everything with Settings → Export backup (or Export as Markdown).
Correct anything by editing it in the app.
Delete your account from Settings → Profile → Delete account, or by email.

Children

Prompt Heart is not directed at children under 13, and I don't knowingly collect data from them. If you believe a child has created an account, email me and I'll delete it.

Changes

If this policy changes, the new version will be posted here with a new effective date.