Hearthworks

Privacy Policy

Effective October 6, 2026

This policy explains what information Hearthworks ("we", "us") collects when you use Hearth, our household assistant service (the "Service"), how we use it, and the choices you have. Hearth is currently an invite-only beta.

What we collect

• Account information. When you sign in with Apple we receive a unique account identifier from Apple and, if you choose to share it, your name and email address.
• What you give your assistant. Messages you send, files and photos you attach, notes and lists it keeps for you, and your approvals or denials of its proposed actions.
• Data from services you connect. Only if you choose to connect them, for example:
  • Google: Gmail (reading, organizing, drafting and sending messages), Google Calendar (reading and managing events) and Google Drive (reading and editing files you work on with your assistant).
  • Apple Health: only the categories you turn on (such as weight, workouts, steps or sleep), sent from your device to your assistant.
• Device and technical information. Push-notification tokens so your assistant can notify you, basic logs needed to run and secure the Service (such as timestamps, errors and IP addresses), and usage and cost records.

How we use it

We use your information only to provide and improve the Service: to let your assistant understand your requests, keep context about your household, draft and (with your approval) carry out actions, and send you notifications. We also use it to keep the Service secure, to fix problems, and to comply with the law.

We do not sell your information, use it for advertising, or use it to train AI models.

During the beta

No person at Hearth reads your messages, email, calendar or files — unless you ask us to look at something specific to help you (and then only that), or the law requires it.

• Software checks for problems, not people. While Hearth is an invite-only beta, an automated checker reviews conversations and what your assistant does, to find and fix problems and to improve Hearth. This is part of taking part in the beta and can't be turned off yet. We'll add a choice as Hearth grows.
• Our team sees a description of the problem, with your personal details removed. For example: "A calendar event couldn't be saved: the calendar service rejected the date format." Not your name, not who the event was with, not the time, and not your conversation.
• The only exceptions: (1) things you choose to send us, such as feedback you write or a screenshot you attach; and (2) something specific you ask us to look at to help you — we look at only that item, and every such access is logged; and (3) when the law requires it.
• Your data stays yours. You can download or delete it at any time (see "Your choices" below).

Google user data

Hearthworks' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide the features you ask your assistant for, such as summarizing and replying to email, scheduling, and working with your documents.
• We do not use Google user data for advertising, do not sell it, and do not use it to develop, improve or train generalized AI or machine-learning models.
• People do not read your Google data, except with your explicit permission (for example, when you ask us to investigate a problem), when needed for security purposes such as investigating abuse, or to comply with applicable law.
• You can revoke Hearth's access at any time at myaccount.google.com/permissions or from the app.

AI processing

To generate responses, your assistant sends the relevant parts of your requests and context to Anthropic's Claude API. Under Anthropic's commercial terms, data sent through the API is not used to train their models. Anthropic processes it only to provide the service to us.

Who else handles data

We rely on a small number of service providers, each only for its role:

• Anthropic: AI model processing, as described above.
• Apple: Sign in with Apple, push notifications, and Apple Health on your device.
• Google: only the Google account you choose to connect.
• Infrastructure providers: our domain's DNS (Cloudflare) and a network relay (DigitalOcean) that forwards encrypted traffic to our servers. Traffic is encrypted end to end, and these providers cannot read its contents.

We may disclose information if required by law, or to protect the rights, safety or security of our users or the Service. If Hearthworks is ever reorganized or acquired, this policy continues to apply to your information.

Storage and security

• Your data is stored on servers operated by Hearthworks in the United States.
• Connections to the Service are encrypted (TLS) all the way to our servers.
• Each person's assistant runs in its own isolated environment.
• Credentials for connected services are stored encrypted, and are not included in backups.

Keys and connected services. If you save an API key or connect a service such as Pipedrive, Hearthworks stores the key or access token encrypted, in a store kept apart from your assistant's notebook, conversations and backups. Your assistant can use it only to make requests to the service you connected, and never sees the key itself. It is not included in backups, it is never shown to our staff in normal operation, and you can remove it at any time in Settings › Connections.

• We keep encrypted-in-transit, access-restricted backups to protect against data loss. Daily backups are kept for 14 days and weekly backups for 8 weeks.

No system is perfectly secure, but we work to protect your information and will notify you of a breach affecting it as required by law.

Your choices

• Disconnect a service at any time, in the app or in that service's own settings.
• Download your data at any time in the app or on the web: Settings › Your data › Download my data. See below.
• Delete your account and data in the app or on the web: Settings › Your data › Delete my account and data. See below.
• Correct your data by asking your assistant, or by emailing us.

Downloading your data

• Your export is a zip file of everything your assistant keeps for you: its notebook, identity, routines and sharing rules, your apps and their records, the files in its workspace, your conversation (including notifications it sent), the approvals you gave or refused and its record of what it did, your settings, your account and signed-in devices, and a list of the services it was connected to.
• It never contains passwords, API keys or sign-in tokens, and it does not contain other household members' information that reached your assistant under their sharing choices.
• It is prepared in the background; your assistant tells you when it is ready. While it waits it is stored encrypted. The download link works once, only from the device or browser where you asked for it, and expires after 24 hours; the copy is deleted as soon as you have downloaded it, or when it expires. You can ask for one export per day.

Deleting your account

• When you ask to delete your account (and confirm by typing DELETE), your account is disabled and your assistant is paused straight away. You can sign in during the next 7 days only to cancel; cancelling brings everything back as it was.
• We keep one encrypted copy of your data for those 7 days only, so nothing is lost if you change your mind.
• After the 7 days we permanently delete your assistant, its home (notebook, files, apps and records), your conversation and history, your saved keys and connections, our backups of your assistant, and your account. Where the service allows it, we revoke the access you gave your assistant at Google and other connected services, and the Sign in with Apple link to Hearth. If your assistant had its own Hearthworks Google account, that account is closed.
• We keep only a minimal record that an account with an internal identifier existed, when it was created, and when it was deleted, with no personal information, so we can show that the deletion happened. We may also keep information we are required to keep by law.
• If your assistant was set up for you by us outside the app (not through an invite and Sign in with Apple), email us and we will delete it the same way.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Accounts are for adults.

Changes

We will update this page when our practices change. If a change is significant, we will tell you in the app before it takes effect.

Contact

mark@hearthworks.io