Hearthseed, LLC (Iowa). [email protected].

Hearthseed is a family OS. Accounts use email, a hashed password, and names. We also store the household content you put in the product. Some household people are names only (no login). Teen accounts are for people 13 or older. No ads. We do not sell personal information. Household payments run through Stripe on the web, Google Play on Android, and the App Store on iOS.

Google Calendar. If you Connect Google, we use scope calendar.events only. We write selected Hearthseed events to the primary calendar (title, notes, location, start/end). We do not list or import your Google calendar. We do not touch events we did not create. We store an encrypted refresh token. Disconnect stops new writes. Events already on Google stay until you delete them there.

Hearthseed’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Hearthseed uses only the calendar.events scope to create, update, and delete events Hearthseed created; it never reads or imports your Google Calendar data, and Google user data is never transferred to or used to train any AI/ML model.

iCloud Calendar. If you Connect iCloud, we write selected Hearthseed events to the calendar you pick (title, notes, location, start/end). We do not import iCloud. We do not touch events we did not create. We store the app-specific password encrypted. Disconnect clears it and stops new writes. Events already on iCloud stay until you delete them or delete your account.

Outlook Calendar. If you Connect Outlook, we write selected Hearthseed events to your Outlook calendar (title, notes, location, start/end). We do not import Outlook. We do not touch events we did not create. We store an encrypted refresh token. Disconnect stops new writes.

Sharing. Hosts that run the site. Google, Apple, or Microsoft when you Connect Calendar, as above. Stripe, Google Play, or the App Store for payments. The law, if it requires it.

The app and site talk to Hearthseed only over HTTPS.

Google refresh tokens, iCloud app-specific passwords, and Outlook refresh tokens are encrypted at rest.

Account passwords are stored hashed. Session tokens are stored hashed. A household request is allowed only when you have a seat in that house. Connecting a calendar is limited to a family Adult or Teen.

Google connect does not ask Google to add scopes you already granted. We write to the primary calendar. We store the id Google returns for each Hearthseed event we create.

Disconnect revokes the Google refresh token and deletes the stored connection. The event ids we stored stay. If the revoke does not succeed, we keep the connection.

Deleting your account revokes the Google refresh token, deletes the stored connection, and deletes the event ids we stored for you. If the revoke does not succeed, we retry for up to 30 days and then delete the stored token. You can also remove Hearthseed's access in your Google Account.

Deleting your account deletes the events Hearthseed wrote to your iCloud and Outlook calendars, then deletes the stored password or token and the event ids. If a calendar does not respond, we retry for up to 30 days.

If we learn of a breach of your personal information that the law requires us to report, we will tell you without undue delay. Email [email protected].

This section covers deleting a Hearthseed account or house. Hearthseed is from Hearthseed, LLC.

You can delete your account in the app. Open Manage my account, then Delete account. Or email [email protected] from the address on the account. We finish within 30 days of a complete request.

We delete the login (email, hashed password) and that person's name seats, plus the calendar connections and AI binds we stored for them. The house and its other members stay. Deleting an account does not delete a house or stop a paid subscription.

Anyone signed in can delete their own account in the app. The last Adult in a house that still has children or a paid subscription must invite another Adult first, or delete the household.

Feedback you send is kept up to 365 days. A closed house is purged after 90 days. Payment-store notices are kept 90 days. Billing records are kept up to 2 years, or longer if law requires.

We keep billing and tax records as required by law. Backups may hold a copy for up to 30 days, then rotate out.

The Owner opens Danger Zone, then Delete Household, to close a house. That removes the house and every member seat in it. Member accounts stay. A Helper cannot delete the house.

Closing a paid house does not need a cancel first. Deleting the house stops renewal. A Stripe subscription is set to cancel at the end of the paid period, and a Google Play subscription is canceled. We cannot cancel an Apple subscription for you. The app warns you, and on iOS Manage Subscriptions opens Apple's subscription page, where you cancel. There is no refund for the remaining period.

We do not claim SOC 2 or HIPAA. Iowa law. Updates: the date at the top.