Privacy Policy

The short version

HeartLane is a wellness companion, not a medical provider. We collect only what we need to help you track your heart-health habits: your account email, the blood pressure and food entries you log, and the subscription status that keeps the app running. We don't sell your data, and we don't share it for advertising.

Health data we collect

When you use HeartLane, you may enter blood pressure readings (systolic, diastolic, pulse, which arm, and an optional note), food logs and their AI-estimated nutrition values, and profile details like height, weight, and age. This information is stored securely in our database and is tied to your account. You can edit or delete your entries at any time, and you can request that we erase your data by contacting us.

AI analyses of your readings and food checks are cached so we can show you past answers without re-charging your monthly credits; the cached prompts and responses are visible to HeartLane Plus members in their Memory Lane tab and are not shared with anyone else.

Email collection

We use your email address to create and secure your account, to confirm your sign-up, and to send you essential account and billing messages (such as receipts for every paid purchase and renewal). We don't send marketing email unless you ask for it, and we never sell your email address.

Billing data

HeartLane Plus subscriptions are processed by our payment provider, Stripe. Stripe handles your card details directly — we never see or store your full card number. We retain a record of your subscription status and an itemized billing history (purchases, renewals, refunds, and cancellations) so we can show it to you in the app and email you receipts. If you cancel or downgrade, any refund is calculated based on your unused time and the AI analyses you used while subscribed.

How long we keep data

You can download everything we hold about you, or permanently delete your account and all of its health records, from the Security & privacy screen in the app.

We keep your health entries and billing history for as long as your account is active so you can look back at your trends. If you close your account, we will delete your personal data within a reasonable period, except where we are required to retain records for accounting or legal purposes.

Health information safeguards

We treat the blood pressure, food, and profile details you log as protected health information and apply safeguards modeled on the HIPAA Security Rule:

• Encrypted in transit (TLS) and encrypted at rest, including database backups.
• Row-level access rules so your records can only ever be read by your own signed-in account — never by another member.
• Two-step verification with an authenticator app, strong password rules, and checks against known-breached passwords.
• Automatic sign-out after inactivity and a hard limit on how long one sign-in lasts.
• A security activity log of sign-ins, verification events, data downloads, and account changes, visible to you in the app.

HIPAA also requires a Business Associate Agreement with the providers that host health data, plus administrative policies such as workforce training and breach notification. If you are using HeartLane in a regulated setting, contact us before storing patient information so we can confirm the agreements in place for your account.

Organizations using HeartLane on behalf of patients can read and electronically sign our Business Associate Agreement.

Your choices

• Edit or delete any reading or food entry directly in the app.
• Manage or cancel your subscription anytime from the credits page or the billing portal.
• Request a copy or deletion of your data by contacting us.

Contact

Questions about your data? Email us at privacy@heartlane.app and we'll help.