Last updated: November 2026
Heia is built to be data-minimal: your entries belong to you. This policy honestly describes what the app stores and transmits — and what it does not. It matches the privacy policy inside the app.
Frederik Rock (Neura Labs) Schwanthalerstr. 99 80336 Munich, Germany Email: kontakt@getheia.app
Entries (feeds, sleep, diapers, …), child profiles, settings, tips history and reminders are stored locally on your device first. Without an account your entries stay on your phone. Independently of that, ads, error reports, the optional statistics, purchases, an AI report you request or a wish you send can transmit data – this is described below. The in-app inbox (bell) is stored only on your device.
Wishes: If you send a wish via “Make a wish”, we store your text together with the language, app version, platform and your child's age in months in our Supabase database (Ireland, EU) to improve Heia – without a user identifier. Please do not include names or health details.
Photos and videos in Memories: You choose individual files yourself. Heia copies them into local app storage; there is no automatic gallery scan or face recognition. Media files are not currently synced or backed up to the cloud by Heia. When entry sync is enabled, filenames and video metadata (duration, size and resolution), but not the photos or videos themselves, are synced with your household. Using Share sends the selected file only through the service you choose. Uninstalling removes the local app copies; the original files in your photo library remain unchanged.
Take your memories with you: At your request, Heia locally creates an unencrypted ZIP file containing the child's name, selected memories and available media. You choose a recipient or storage location in the system share dialog. Unshared export copies are discarded when you close the dialog; copies used for sharing are temporarily kept in the app cache and cleaned up after 24 hours while the app is running or when it is reopened. You manage copies saved outside the app. There is no automatic cloud upload and no import back into Heia yet.
If you create an account (email code sign-in), your email address plus household, child-profile and entry data are stored on Supabase servers in Ireland (EU) so all caregivers see the same state. The sign-in code email is sent on our behalf by the service Resend, based in the USA; for this, your email address and the language of the message are transmitted and processed in the USA (see section 10). Legal basis: contract performance (Art. 6(1)(b) GDPR). Server-side, entries are only accessible to your own household (row level security).
In the household: The other members of your household see the shared entries and children, display names and who logged what. If a member owns Heia Plus, the others only see that Plus is active through the household – no purchase details.
Only with your explicit consent do we send usage events, such as sections opened and entry types created, to our own Supabase database (Ireland, EU). They carry a random install identifier, a session identifier, app version, platform, region (from the device settings) and language, which allow events from the same install to be linked. At app start, this also includes the device model and system version (for example “iPhone 15 Pro, iOS 26.0”), never the name you have given your device. This is therefore not a promise of complete anonymity. Entry texts, names and health values are not part of these events. Apart from Google Analytics for Firebase on Android (see below), no third-party analytics are used. You can switch the statistics off in settings; the local identifier and statistics not yet sent are then discarded. Events already transmitted are deleted automatically after 14 months. Legal basis: consent (Art. 6(1)(a) GDPR).
In addition, on Android – Google Analytics for Firebase: On Android devices we also use Google Analytics for Firebase, with your consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may also be transferred to Google LLC in the USA (see section 10). We use it to measure how many people actually use Heia after installing it. We send selected events (for example “first entry”, “use on the following day” and purchases) to Google Ads to measure the success of our advertising campaigns for Heia and to manage them. Firebase only receives data if you have agreed both to usage statistics in Heia and to measurement in Google’s consent form. We process a random app instance identifier and your device’s advertising ID, device information (for example model, system version, language and an approximate region derived from the IP address; the IP address itself is not stored), usage events such as “first entry” or “entry created” with the entry type (for example sleep), sections you open, whether Heia Plus is in use, and purchases via Google Play (product and price). We never send the contents of your entries, times, amounts, names or health values. Where Google also processes this data under its own responsibility in connection with Google Ads, Google’s privacy policy applies: https://policies.google.com/privacy. Event data is kept for up to 14 months. We do not use Firebase on iPhone. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time under Settings → Privacy & legal, by turning off “Usage statistics” or via “Change ad consent”. After that, Heia sends nothing more to Firebase.
Reminders (e.g. medication) are scheduled locally on your device only. No third-party push services are used and no data is transmitted for them.
Heia shows muted ads: banners within selected overview, review, search and knowledge pages, a small banner at the top of the entry forms, and occasionally a full-screen ad at a natural break, for example when leaving the statistics. Never a full-screen ad while you log an entry, never on the running sleep timer, never in sensitive areas such as “Soothe” or the doctor export, and never with sound. At night Heia shows banners only in a small format and not right after an entry. Ads are served by Google AdMob (Google Ireland Ltd.); through AdMob, other advertising partners may also bid on the ad slots and serve ads (mediation). The consent dialog shows which partners these are. With your consent, ads may be personalized; this processes device information, advertising identifiers (on iOS the advertising ID “IDFA”, if you allow it in Apple's “App Tracking” prompt) and your IP address (coarse location). We also use the Meta (Facebook) SDK to measure which ad led to an install of Heia; device and usage information may be transmitted to Meta (Meta Platforms Ireland Ltd.). This processing only takes place with your consent (Google UMP consent and the iOS “App Tracking” prompt; Art. 6(1)(a) GDPR). If you decline, the app stays fully usable and you only see non-personalized ads. You can change or withdraw your ad consent at any time in the app under Settings → Legal → “Change ad consent”, and the iOS “App Tracking” permission under Settings → Privacy → Tracking. With Heia Plus (monthly or annual subscription; a previously purchased one-time “Family Lifetime” unlock stays valid) no ads appear; one household member's Plus applies to the whole household. After a voluntary ad video, Heia is ad-free for 7 days. We do not sell data.
In the production version Heia uses Sentry (servers in the EU) to investigate technical errors and crashes. Error details, stack traces and technical information about the app and device may be transmitted. Screenshots, session recordings and network breadcrumbs are disabled in the app configuration. This is separate from the optional usage statistics.
If you enable the AI weekly report, Heia sends summarised weekly values, the age in weeks, the requested language and selected tip titles to a Supabase server function to create it. These include, for example, sleep and feeding values and the number of documented days. The function uses Anthropic (USA) to write the text. The app does not send child names, photos, videos or free-text notes with this request; it adds the name only on your device in the report. To limit requests, the server function also receives an install identifier and the week start. For the quota the identifier is stored hashed; it is not included in the text request to Anthropic. The finished report is cached on your device.
“Ask Heia” (Heia Plus and a Heia account only): when you ask a question in the companion, the app sends your question, up to two previous questions and answers from the same session, your child’s age in weeks and up to three matching Heia articles to a Supabase server function. It checks your account and Heia Plus and has OpenAI (USA) write the answer. OpenAI receives neither your account identifier nor names or entries; we instruct OpenAI not to store the request, but under its own rules OpenAI may keep requests for up to 30 days for abuse monitoring. Heia stores neither question nor answer; to limit use we only count the number of questions per account and month. If your question contains information about your child’s health, we only send it with your consent, which you give before your first question and can withdraw at any time by no longer using the feature. Please do not write names into your questions. If the app recognises emergency signs, it shows the emergency number directly and sends nothing.
Heia's tracking core stays free. Heia Plus is available as a monthly or annual subscription, which renews until cancelled in the app store. A previously purchased one-time “Family Lifetime” unlock stays valid and can be restored. Heia uses RevenueCat (USA) to reconcile the purchase status with the respective app store and to restore purchased unlocks. Without a Heia sign-in, the SDK uses an identifier assigned by RevenueCat. When you sign in, this assignment may be linked to your Supabase user ID. If a member of your household owns Plus, our server checks whether it applies to your household; the other members only see that Plus is active through the household, no purchase details. For the voluntary 7-day Plus via an ad video, our server function verifies Google's confirmation and stores the start and end of the unlock for your account or a random device identifier. This purchase mapping is separate from the optional usage statistics.
Many entries – such as sleep, feeds, medication, temperature, growth or doctor's appointments – say something about your child's health. You decide which of these details you enter; none of them is required. We only process them for the features you use yourself: storing and analysing them on your device, syncing them within your household if you have an account, and the AI weekly report if you request it (summarised values only). The optional usage statistics only record which type of entry was created, never values or text. We do not use these details for advertising and do not pass them to advertising partners. You can delete your account at any time.
Our database (Supabase) and the error reports (Sentry) are on servers in the EU. Some services, however, also process data in the USA: Resend (USA) sends the sign-in codes by email and receives your email address and the language of the message for this. RevenueCat (USA) reconciles purchases and subscriptions. Anthropic (USA) writes the optional AI weekly report from summarised values. OpenAI (USA) writes the answers for “Ask Heia”. Google (AdMob) and Meta may also process data in the USA in connection with ads and install measurement. On Android, this also applies to Google Analytics for Firebase and Google Ads (Google Ireland Limited or Google LLC). For these transfers we rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
On your device: Your entries, child profiles and settings stay on your device until you delete them, reset the app with “Reset everything” or uninstall it.
Event data in Google Analytics for Firebase (Android only) is kept for up to 14 months.
On the server (only with an account): While your account or household exists, household, child-profile and entry data remain stored so every caregiver sees the same picture.
Deleting your account: If you delete your account in the app (Account → “Delete account”), we immediately delete every household in which you are the only member, including its children and entries, as well as your account and email address. In a shared household only your membership ends: shared entries stay with the others, without your name. Data on your device stays until you reset or delete the app.
Deleted entries: When you delete a single entry it is marked as deleted. On our servers we permanently remove marked entries after 30 days. On your device they stay under “Recently deleted” until you restore them or reset the app. The marker is also technically necessary so the deletion reaches every device in your household.
Usage statistics: Only with your consent, not linked to your account; with a random install identifier. These events are deleted automatically after 14 months. If you withdraw consent, we stop sending immediately.
Ads: We store no advertising data ourselves. Retention at Google AdMob and Meta is governed by their own privacy policies.
We count how often the pages of this website are opened and how often the store buttons are clicked. This runs without Google Analytics, without third parties and without cookies: nothing is stored on your device and no identifier is issued that could recognise you on a later visit. We therefore see page views, not visitors.
Stored per view: the page path (without query parameters), the referring domain (e.g. "google.com" – not the specific address), any campaign parameters (utm_*), the browser language and a coarse screen class (phone/tablet/desktop). No IP addresses, no identifiers, no personal data. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in knowing whether the site does its job); with no personal reference the interference stays minimal. If your browser sends "Do Not Track" or a Global Privacy Control, we measure nothing at all. Storage is in the EU (Supabase, Ireland), same as the app.
You may request access, rectification, erasure, restriction of processing and data portability, and withdraw consent for the future (Art. 15–21 GDPR). You can edit and delete entries in the app. Under Account → “Delete account” you delete your account yourself in the app; section 11 describes what happens. For questions or further deletion requests, contact kontakt@getheia.app. You may complain to a competent data-protection supervisory authority.
If data processing changes, we will update this policy and point it out in the app.
This is the English version. The German version is the legally binding one. The imprint is required by German law and is only available in German.