Privacy Policy

Last updated: 2026-09-10

Heartbeat (“the app”) shares your real-time location with a small group you choose — your family and friends — using circles. This policy explains in plain language what the app collects, why, and how it is shared.

The short version

• Heartbeat only collects location data to show it to your own circles.
• Your location is shared only with the other members of circles you create or join — no one else.
• The app is backed by a server that you (or the person setting up Heartbeat) run and control. Location data goes to that backend, not to any third party or advertising network.
• There are no ads, no analytics, and no data brokers involved.

What the app collects

Device identity

On first launch, Heartbeat creates an anonymous identifier (a UUID) and a secret bearer token for your device. These are stored in your device’s secure storage and are used only to authenticate your device to the backend. They are not your name or email — no personal sign-up is used.

This identity is not linked to any hardware or OS identifier (such as an Android’s ANDROID_ID or iOS’s Identifier for Vendor): it is a random value created when the app is installed and erased with it. If you uninstall and reinstall, Heartbeat treats the new install as a fresh device — unless you restore it, which is your choice: you can export an encrypted backup of your device identity from Device Settings (protected by a passphrase you choose) and import it after reinstalling to bring back the same device, its circles and history.

Circles

When you create or join a circle, the app stores the circle’s name, your membership, and the 6-character invite code (and its QR code) used to join.

Location

While tracking is on, Heartbeat records:

• your precise location (latitude and longitude),
• the accuracy of that reading (in metres),
• and a timestamp.

Foreground: location is collected while the app is open. This is the core “share with circles” feature, so it works whether you’re using the app or it’s in the background.

Background: if you explicitly choose “Allow all the time” for location permission, Heartbeat continues to share your location even when the app is closed, so your circle can still see you live. This is always a choice: you are first asked for foreground access, and only after you grant that are you offered background access behind an explanation dialog. If you refuse background access, the app simply keeps working in the foreground and never collects location in the background.

How location is used and shared

• Location is sent to the Heartbeat backend (the server the operator controls) over an encrypted connection.
• From there it is pushed only to the other devices in the same circle as you — in real time — and stored so circle members can see your recent position and, in future, replay your path.
• Heartbeat does not share your location with any other user, organization, or third party.

How long data is kept

• Your current position is kept so each member of a circle sees the latest status.
• Location history is retained to support viewing a device’s recent path, and can be removed along with the device.

Deleting your data

You can ask Heartbeat to delete the data tied to your device at any time. Requests are handled by the Heartbeat operator (Metaware, contact@metaware.cc).

How to request deletion

1. In the app: open Device Settings and choose to remove your device. This immediately deletes your device identity, circle memberships, and location history from the backend.
2. By email: write to contact@metaware.cc from the email linked to your device, and include your device name or ID you want deleted. The operator will confirm and delete it within 30 days.

What is deleted, what is kept, and for how long

• Deleted on request: the device’s identity (UUID, bearer token), its circle memberships, and its entire location history.
• Kept after a single-device deletion: the circles that other users still belong to (excluding your membership) and other members’ locations. A deleted member’s location is removed everywhere.
• Retention: location history is kept only to support location replay and is deleted when you delete your device. Backups are purged no later than the next scheduled backup cycle (typically within 30 days) after a deletion request.

Do it yourself, no account needed

Because Heartbeat has no accounts, your data is tied to your device. The fastest way to delete everything is to remove your device in the app as described above; the email option is provided for those who have uninstalled.

Backend control and data access

The Heartbeat backend is self-hosted software. The person who runs that server has administrative access to the data it stores. That operator is ultimately responsible for securing the server, the database, and backups, and for honoring the data practices described here.

Contact

For questions about this policy or your data: contact@metaware.cc

Terms of Service · Privacy Policy · Safety Standards