Last updated: August 2026
Herzpunkte works without an account. Your content (promises, notes, photos) is end-to-end encrypted and readable only on your two devices. We collect no content, run no ads, no tracking and no analytics.
On the device: promises, notes, photos, the shared profile picture, your display name and the keys stay locally on the device (keys additionally protected in the Android Keystore). They are not transmitted to us.
Relay server (Cloudflare Workers): the server only forwards encrypted messages between your devices and cannot read their content. Delivered messages are deleted immediately, undelivered ones after a short period. For technical reasons only the following is visible: the time and size of messages and a push token to wake the partner device, never any content.
Push notifications (Firebase Cloud Messaging, Google): to wake the app, a content-free wake-up is delivered via Google's FCM; a device push token is processed in doing so. No content is transmitted. Details: Firebase privacy.
We do not sell data, show no ads and include no analytics or tracking services. Processors used: Cloudflare (relay hosting) and Google/Firebase (push).
The processing of the few technically necessary data is carried out to provide the app function you requested (Art. 6(1)(b) GDPR).
"Disconnect & erase everything" in Settings removes your local data and the channel on the relay. Uninstalling removes all local data. Delivered messages are deleted on the relay immediately.
The app is not directed at children.
You have the rights to access, rectification, erasure, restriction and objection under the GDPR. As we hold practically no personal data, please contact the controller named above with any questions.