Plain-English first. Legal second.

The short version

Wiseheart is a paying-subscriber business. We make money from your subscription, not from your data. We don't sell, rent, or trade it.

• What we collect: bracelet readings (the calm signals from the wrist sensor), your labels and notes, your Coach conversations, and basic account information. Optional: sleep and activity context from Apple Health or Google Fit if you connect them.
• How it's stored: under a pseudonymous user ID. Your identity isn't tied to your physiological data at rest.
• Where it goes: encrypted in transit and at rest. Processed on-device where possible.

What we never do

• Sell, rent, or trade your data.
• Use it for advertising.
• Share individual readings with your employer.
• Share your Coach conversations with a coach you've granted access to — they see calm trends only.

Aggregate stats

We may compute anonymized aggregates across the user base for product improvement — for example, how often a particular kind of nudge tends to help. No aggregate ties back to you.

Your controls

• Export. Settings → Data → Export. JSON or CSV by email.
• Delete. One button in the app. Your account closes immediately. Data is erased within 30 days. Some anonymized aggregate stats may remain — never tied to you.
• Pause. Stop sharing without losing your history.
• Sharing with coaches or therapists. Opt-in only. Granular permissions. Revocable at any time.

Crisis-signal disclosure

Your Coach conversations are private — with one exception. Automated guardrails watch for crisis-level content (talk of self-harm or serious safety risk) and surface professional support resources when triggered. No human reads your conversations.

Children's privacy

Wiseheart is not for users under 18. We don't knowingly collect data from anyone under that age.

Compliance posture

We work toward GDPR and CCPA compliance. Where the two regimes differ, we apply whichever protection is stronger as a default. If you're in the EU, U.K., or California and want to exercise a specific right, email privacy@wiseheart.me and we'll respond within the legally required window.

Third-party processors

We disclose every third party that touches your data:

• Firebase — authentication, real-time database, and storage.
• Polar — hardware partner and on-device SDK for the bracelet.
• Language-model providers — Coach conversations are processed by language-model providers under strict data-use terms. They are contractually prohibited from training models on your data.

Privacy contact

Email privacy@wiseheart.me. We respond within five business days, and usually faster.