Privacy Notice

HearthLove is owned and operated by Liza Nell Yellott, trading as HearthLove. We are the data controller for the personal data described here, which means we decide what data is collected and why. For any privacy question or request, email privacy@hearthlove.com.

Paddle.com is our Merchant of Record and acts as a separate controller for payment and order data it collects at checkout (see “Payments” below).

• Account data — email address, sign-in credentials (hashed by our authentication provider), display name, avatar colour. Used to create and secure your account. Legal basis: performance of our contract with you.
• Household and member profiles — names, life stage, roles, caregiver relationships, timezone, units. Used to run the shared household workspace. Legal basis: contract.
• Dietary and wellness data — eating programs, allergies, intolerances, dislikes, meal logs, check-ins and notes. Some of this may be health-related. Used to plan meals and show your own trends. Legal basis: contract, and your explicit consent for health-related details, which you can withdraw by deleting the entries.
• Content you create or upload — recipes, pantry and grocery items, and photos you submit for pantry/receipt scanning. Used to provide the features you asked for. Legal basis: contract.
• Support messages — what you send us. Used to answer you. Legal basis: contract and legitimate interests.
• Usage, device and log data — IP address, device/browser type, pages used, error and performance logs. Used for security, fraud and abuse prevention, debugging, and improving the product. Legal basis: legitimate interests in running a secure, working service.
• Marketing emails — only if you opt in; you can unsubscribe at any time. Legal basis: consent.

We also keep records where the law requires it (for example tax and accounting). Legal basis: legal obligation.

Household data is visible to members of your household, and caregivers can see the dependents assigned to them. Entries you mark as personal stay private to you. Access is enforced at the database level, so other households cannot read your records.

• Service providers / subprocessors — hosting and database, authentication, email delivery, error monitoring, and the AI and recipe-search providers used for meal discovery, recipe photos and coaching. Only the data needed for the request is sent (for example dietary constraints and slot requirements).
• Paddle.com (Merchant of Record) — for sale of subscriptions, subscription management, payments, tax compliance, invoicing, and refunds. Paddle collects your billing details directly at checkout; we receive only the order, plan and status information needed to activate your subscription.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law, or to protect our rights or someone's safety.

We do not sell your personal data or share it for cross-context behavioural advertising.

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and handles billing, tax, customer service inquiries and returns. Card and billing data is processed by Paddle under Paddle's privacy notice; we never see or store full payment card details.

We and our providers are based in or use infrastructure in the United States and other countries, so your data may be transferred outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision, together with contractual and technical protections.

Household, plan, recipe, pantry and wellness data is kept while your account is active. If you delete an item it is removed from the app immediately and purged from backups within 30 days. If you close your account, we delete or anonymise your personal data within 90 days, except where we must keep records longer — for example order and tax records, which are retained for up to 7 years. Security and error logs are kept for up to 12 months. Uploaded scan photos are deleted once processed, and at the latest within 30 days.

Depending on where you live, you have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Most of this you can do yourself in the app: edit or delete meals, pantry items and check-ins, or ask us to remove your account.

To exercise a right, email privacy@hearthlove.com. We respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority; US residents may have equivalent rights under state privacy laws, and we will not discriminate against you for using them.

We use appropriate technical and organisational measures to protect your data: encryption in transit and at rest, row-level access control in the database so data is scoped to your household, hashed credentials, least-privilege access for administrative accounts, secret management for provider keys, and monitoring for suspicious activity. No system is perfectly secure, but we work to keep risks low and will notify you and the relevant authority of a qualifying breach as required by law.

We use essential cookies and local storage to keep you signed in, remember your household and preferences, and protect against abuse — these are required for the app to work. Paddle sets cookies necessary for checkout and fraud prevention. We use limited analytics to understand aggregate product usage, and we do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings, though signing in will not work without the essential ones.

Accounts are for adults. Household members can include children as dependents, managed by an adult who is responsible for the information they add about them. Children cannot create their own accounts.

HearthLove is a planning and journaling tool. It is not a medical device and does not provide diagnosis or treatment.