The Heart
Household Finance & Planning
The Heart is a household finance and planning tool for adults (18 and older). It's built for one family's private use at a time — the account owner adds the people in their household, and everyone added shares that one household's data. This page explains what's collected, why, who else sees it, and how to delete it.
Account information. Your username (which doubles as your email address for verification and password recovery), a hashed password, and, if you set one up, a security question and a hashed answer used to help you regain access if you forget your password. You can also add a name (what your family sees) and an optional display name (what the app calls you). We never store your password or security answer in plain text — only a one‑way hash that can verify a match but can't be reversed back into the original.
Household data you enter. Everything you and the people you add to your household type into the app: income and expenses, manually-entered financial account balances and transactions, bills and payday schedules, calendar events, appointments and reminders, birthdays, pets and pet care schedules, cleaning/chore assignments and reward tasks, meal plans and recipes, and grocery/needs list items. This data belongs to your household and is never visible to any other household. Financial accounts in the app are entered by hand — The Heart does not connect to or pull data from your real bank accounts.
Family member details and health information (optional). The Family tab can hold each person's name, relationship, and birthday, plus a photo for their ID card. If you choose to, you can also add health-related information for a family member — allergies, medical conditions and notes, and medications with their dosage, schedule, and prescribing doctor. This information is sensitive. It is entirely optional, nothing is requested or required, and it's shown only to the logins in your household — which includes any child logins the owner has created, so keep that in mind before adding it. We use it only to show it back to your household and to build the care sheets you choose to send (see "Information you choose to send out" below). You can edit or delete it at any time. The Heart is not a medical record and isn't a substitute for one.
Photos you upload. Photos added to a family member's or pet's ID card are stored on our hosting provider and shown only inside your household. Photos you take or choose for the "Scan a Bill", "Scan an Invite" and receipt-scanning features are used to read the details off the page and are not saved by The Heart (see "AI-powered features" below).
Saved logins (optional). If you choose to use the app's "Logins" feature, you can save usernames, passwords, and notes for other websites (for example, a utility or billing account) so your household can find them later. Those saved passwords are encrypted before they're stored, and the feature is locked behind a PIN you set. This is entirely optional — nothing is saved there unless you add it yourself.
Kroger connection (optional). If you choose to connect a Kroger account from the Grocery tab, we use Kroger's own sign-in to link it — you enter your Kroger username and password directly with Kroger, never with us. We only receive a secure access token that lets the app search products and, if you ask, add items to your Kroger cart on your behalf. We never see or store your Kroger password.
Calendar connections (optional). If you subscribe the app to an outside calendar (such as a school or sports calendar), we store the calendar's web address and copy its event details into your household calendar. If you use the calendar export link, that link is a private address tied to your login — anyone you give it to can see the calendar it shows, so treat it like a password and regenerate it from the Account tab if it gets shared by mistake.
Waitlist. When new accounts are full for the day you can leave your email address to be told when there's room. We keep only that address and the date, use it only to tell you, and remove it on request at [email protected].
Messages you send us. If you send feedback from inside the app, or email [email protected], we receive what you write along with your account name or email address, so we can reply. If you forward an appointment email to the app's calendar address, the app keeps the appointment details it pulls out of it, plus the email's subject line and sender, so you can review it before it's added to your calendar.
Notifications and reminders. If you turn on browser notifications, your browser gives us a subscription address so we can deliver alerts to that device. If you turn on the optional Daily Summary, we also keep your choices for it (on or off, what time, morning or evening, push or email). We keep a short log of which reminders have already been sent so the same one isn't sent twice.
Technical information. The app uses a single cookie to keep you signed in after you log in; it's required for the app to work, and we don't use advertising or tracking cookies. We record the date you were last active (used for the inactivity policy below). If something breaks, we log technical details about the error, the page it happened on, and the account name it happened to, so we can fix it; a summary may be emailed to us. Our hosting provider also keeps standard server logs, which can include IP addresses.
The Heart is intended for adults. A "child" login is created by the household owner, not signed up independently by a child. The owner chooses that login's username and password, and controls what it can see and do — including hiding the budget, calendar, or account sections entirely. Any information tied to a child login (a chore assignment, a birthday, a pet's care schedule, a reward task) is entered and managed by the household owner as part of running their own household, the same way it would be on a paper planner. We don't knowingly collect information directly from children outside of that.
We don't use your data for advertising, and we don't build any kind of profile from it beyond what's needed to run your household's own view of the app. The Heart doesn't use any analytics or tracking tools.
A few features use an AI service from Anthropic (the company that makes Claude) to read text out of something you give the app. They run only when you use them:
Whatever is on the photo or in the email goes to Anthropic, so if a bill or an appointment email includes health or other sensitive details, those details are sent too. If you'd rather not share something, don't scan or forward it — you can always type the details in by hand instead. The Heart doesn't save the scanned photos, and the AI's result is only a draft: you review and correct it before anything is saved, and it can be wrong.
Under Anthropic's published API terms, content sent this way is not kept by default and is not used to train its models without permission; Anthropic may keep content that its safety systems flag, or where the law requires, and those terms can change. See Anthropic's data retention page for the current details. We don't send Anthropic anything else from your household.
Some features let you send household information to an address you type in — for example, a pet and family care sheet (which can include allergies, medical notes, and medications) emailed to a sitter, or a recipe or gift list emailed to a relative. These are sent only when an adult on the household chooses to send them, and they go through Resend to whatever address you entered. Once an email has been delivered, it's in the recipient's hands and their email provider's, and we can't take it back.
The Daily Summary works the same way if you choose email delivery: it lists things like appointments, bills due and their amounts, and chores, and it's sent only to an email address you've verified. Email isn't as private as the app itself — anyone with access to that inbox can read it. Push notifications are delivered to the device you enabled them on and may show on its lock screen.
A few outside services help run the app. Each one receives only what it needs to do its one job, and we don't sell data or share it with advertisers or data brokers:
When you paste in a recipe web address or subscribe to an outside calendar, the app fetches that page or calendar from its own website on your behalf. We may also disclose information if the law requires it.
Passwords, security-question answers, and saved logins in the "Logins" vault are stored as encrypted values or one-way hashes, never as plain text. Each household's data lives in its own private database, separate from every other household using the app, and the app is served over an encrypted (HTTPS) connection. No online service can promise perfect security, so please use a strong, unique password.
We keep your account and household data for as long as the account is in use. Deleting your account removes it from the app right away, along with everyone and everything tied to that household. Because of our backups, a copy can remain in our nightly backups for up to 14 days after that, mainly so we can recover from technical problems.
If a household goes unused for 30 days, we email the account owner a heads-up. If there's still no activity after an additional 14 days (44 days of inactivity in total), the household is automatically deleted. Before an automatic deletion, we save a protected safety copy in case it was a mistake, and we permanently erase that copy after 90 days.
If this policy changes, we'll update the date at the top of this page.
The Heart is operated by theheart.house L.L.C., an Arizona limited liability company. Questions about this policy or your data can be sent to [email protected].