Heart Valley Privacy Policy

Effective date: 2026-10-30. Operator: Beijing Dadao Zhichang Technology Co., Ltd.. Contact: mitsui589@gmail.com.

Reading without an account

You can read sentences, choose topics and backgrounds, and save favorites without signing in. Language, themes and favorites are stored on your device. This version has no advertising or membership purchase.

Optional Apple sign-in

If you sign in, we verify Apple's identity token and store your Apple user identifier, an account identifier, the name you choose to share, timezone, language and session records. These support account access and keeping you signed in. We do not receive your Apple password. Identity tokens are verified rather than saved as your account identifier.

Reading analytics

When reading analytics is enabled, we send a random installation identifier, session and event identifiers, sentence/topic/theme identifiers, reading duration, swipe depth, language, timestamps and app version to our Convex backend. This helps us understand which sentences people read and how they use the app. These events do not contain your Apple account identifier or name. Raw events are automatically removed after 30 days. You can turn future collection off inside My → Privacy Policy; queued events are then removed from your device.

Permissions and local features

Notifications are optional and scheduled locally. Home Screen widgets use local sentence and background data shared with the widget extension. Saving an image asks for add-only Photos permission when you save; we do not read your photo library. Sharing uses the iOS share sheet, and the destination you choose handles the shared content under its own policies.

Service providers and security

Apple provides sign-in and system features. Convex hosts our backend and database; use can involve processing outside your country. Network services may process IP addresses and technical logs to deliver and protect the service. We use HTTPS and session-based access controls. We do not sell personal information or use it for advertising tracking.

Deletion and your choices

In My, a signed-in user can choose Delete account and confirm. We delete the account, sessions and associated records from our running database; the app confirms only after this completes. The app also clears its local reading preferences and pending analytics. Deleted records may remain in isolated service backups according to the provider's backup lifecycle. With the legacy Apple integration, no refresh token is stored: after deletion we explain how to revoke access in iPhone Settings → Apple Account → Sign in with Apple. If you had an older subscription, account deletion does not cancel Apple billing; manage it in Apple's subscription settings.

For access, correction, deletion or privacy questions, contact mitsui589@gmail.com. If you are below the age of consent where you live, use the app with a parent or guardian. We will update this page when our practices change.