Heap

Privacy policy

Last updated on January 9, 2025

1. Contact information

If you have any questions about this privacy policy or wish to exercise your data rights, please contact us at:

• Email: [email protected]

2. Data collection

2.1. Data collected on the Heap Marketing Website

• User data: Email address.
• Purpose of collection: To send updates related to Heap App and notify users of updates to the privacy policy and terms of service.

2.2. Data Collected in the Heap Mobile App

• User data: Name and email address.
• Purpose of collection: For account creation, access to Heap Mobile App, and personalisation of the user interface.
• Third-party data: If feedback or bug reports are submitted, we may collect device information such as phone model, OS version, and app version.
• Storage: User data is stored locally on the device and on AWS servers. Users can export their data using the mobile app's export functionality.

2.3. Cookies and tracking

• Marketing website: No cookies or tracking technologies are used.
• Mobile app: No cookies are used.

3. Data use and sharing

3.1. How we use data

• To provide and improve the Heap Mobile App via bug fixes and feature updates.
• To communicate updates and respond to user inquiries.

3.2. Data sharing

We do not share user data with third parties except as required by law.

3.3 Third-party tools

• Simple Analytics: For cookieless analytics.
• Buttondown: To send updates related to Heap Mobile App.

4. Data storage and security

• Storage locations: Data is stored locally on the user’s device and on AWS servers.
• Retention period: User data is retained as long as the account is active. Data will be deleted after one year of inactivity.
• Security measures: Standard AWS security tools, including encryption and access control, are used to protect user data.

5. User rights

5.1. Your rights

• Opt-out: You can unsubscribe from mailing lists at any time.
• Access and modify data: You can update your details from within the mobile app. You can also contact us to access, update, or delete your data.
• Data Export: You can export your data from the app at any time.

5.2. How to exercise your rights

To exercise your rights, contact us at [email protected].

6. Export and responsibility for third-party data

• Export functionality: Users can export third-party contact data as a CSV file from the app at any time.
• User responsibility: Once exported, users are solely responsible for safeguarding and managing the contact data.

7. Legal compliance

• Global operations: Heap App operates globally and complies with applicable privacy laws, including GDPR and CCPA.
• Age restriction: The mobile app is intended for users aged 18 and older. By using our services, you confirm that you meet this age requirement.

8. Policy updates

We may update this privacy policy from time to time. Significant changes will be communicated via email. The effective date of the policy will always be updated at the top.

9. Governing law

This Privacy Policy is governed by the laws of the United Kingdom.