Privacy Notice

Who controls your data

Leo Carter & Tarran Carter (Two Hearts), operator of Two Hearts, is the data controller for the personal data described here. Contact us at tarrancarter@outlook.com for any privacy request.

Categories of personal data we collect

• Account data — name, email address, password hash, partner pairing code, and the couple you belong to.
• Relationship content — assessment answers and pillar scores, daily ritual responses, journal entries, conflict-tool notes, and counseling intake information. Some of this is sensitive in nature; you choose what is shared with your partner.
• Purchase data — plan, subscription status, billing period, and payment provider customer and subscription identifiers. We never see or store full card numbers.
• Technical data — IP address, device and browser information, and app usage and error logs used to keep the service secure and working.
• Communications — emails and support messages you send us.

Why we use it

To provide the service you purchased (performance of contract), to process payments and prevent fraud, to secure and improve the app (legitimate interests), to send service and billing emails, and to comply with law. Sensitive relationship content is processed on the basis of your explicit consent, given when you enter it, and is used only to deliver your program, your shared couple view, and your counseling sessions.

Who we share it with

• Stripe, Inc. — our payment processor, which receives your billing details and purchase data to take payment, calculate and collect tax where applicable, and issue refunds.
• Your paired partner — only the content you choose to share (for example assessment scores and shared ritual answers). Private journal entries stay private.
• Your assigned pastoral counselor — intake information and the scores you agree to share, so sessions start informed.
• Infrastructure and email providers — hosting, database, authentication, and transactional email vendors acting as processors under contract.
• Authorities — where legally required, or to protect someone's safety.

We do not sell your personal data or use relationship content for advertising.

Retention

Account and relationship content is kept while your account is active and for up to 30 days after deletion, after which it is erased from live systems and purged from backups within 90 days. Transaction records are kept as long as tax and accounting law requires.

Your rights

You can request access, correction, deletion, a portable copy, restriction of processing, or withdrawal of consent, and you may object to processing based on legitimate interests. Email tarrancarter@outlook.com and we will respond within 30 days. If you are in the EEA or UK you may also complain to your local data protection authority.

Security and transfers

Data is encrypted in transit and at rest, access is restricted by row-level security so each couple can only reach their own records, and counselor access is limited to assigned couples. Our providers may process data in the United States and elsewhere under appropriate safeguards such as Standard Contractual Clauses.

Cookies

We use strictly necessary cookies and local storage for sign-in sessions and checkout. We do not run third-party advertising cookies.