Privacy Policy
Last updated: December 20, 2025
1. Introduction
Welcome to Hearth ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our writing application and services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you register directly
- OAuth Information: When you sign in with Google, GitHub, Discord, Microsoft, or Apple, we receive your name, email, and profile information from these providers
- Content: Your writing projects, documents, notes, entities, and any other content you create or store in Hearth
- Preferences and Settings: Your timezone, daily writing goals, reminder preferences, theme choices, and editor settings
2.2 Automatically Collected Information
- Usage Data: Writing sessions, active typing time, streak information, and document access patterns
- Device Information: Browser type, operating system, IP address, and device identifiers
- Cookies and Tracking: We use session cookies for authentication and essential functionality
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our writing services
- Enable document creation, storage, and synchronization
- Track your writing progress, streaks, and goals
- Send reminders via email or Discord based on your preferences
- Provide AI-powered writing assistance (tab-complete suggestions)
- Authenticate your account and maintain security
- Process payments and manage subscriptions
- Respond to your requests and provide customer support
- Analyze usage patterns to improve performance and user experience
- Comply with legal obligations and prevent fraud
4. AI Features and Data Processing
When you use our AI tab-complete feature powered by OpenAI:
- We only send limited context (approximately the last 800-1,200 words, document title, and nearby entity summaries) to OpenAI's API
- We never send your entire document library or unrelated content
- OpenAI processes this data according to their Privacy Policy
- You can disable AI features at any time in your preferences
- We implement rate limits and quotas to prevent abuse
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party services that help us operate our platform (e.g., hosting, email delivery, payment processing, OpenAI for AI features)
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share your information
6. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (HTTPS)
- Secure password hashing
- Optional two-factor authentication (2FA)
- Regular security audits and monitoring
- Secure access controls and authentication
- Automatic session management and timeout
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. When you delete content or close your account:
- Deleted documents are soft-deleted and can be recovered for 30 days
- After 30 days, deleted content is permanently removed from our active systems
- We may retain certain information for legal, accounting, or security purposes
- Backup copies may persist for up to 90 days
8. Your Rights and Choices
You have the following rights regarding your information:
- Access: Request a copy of your personal data
- Correction: Update or correct your information through your account settings
- Deletion: Request deletion of your account and associated data
- Export: Download your content and data
- Opt-Out: Disable AI features or unsubscribe from reminders at any time
- Portability: Request your data in a structured, machine-readable format
To exercise these rights, please contact us at [email protected].
9. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential Cookies: Required for authentication and basic functionality
- Preference Cookies: Remember your settings and preferences
- Analytics: Understand how users interact with our service to improve it
You can control cookies through your browser settings, but disabling essential cookies may affect functionality.
10. Third-Party Services
We integrate with third-party services:
- OAuth Providers: Google, GitHub, Discord, Microsoft, Apple
- OpenAI: For AI-powered writing assistance
- Payment Processors: For secure subscription management
- Email Services: For reminder delivery
These services have their own privacy policies and we are not responsible for their practices.
11. Children's Privacy
Hearth is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our service. Your continued use of Hearth after changes become effective constitutes acceptance of the updated policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Support: [email protected]