Privacy Policy

ShareHearth · Last updated 9 July 2026

ShareHearth ("we", "us") is a community where people thank one another for real acts of help. This policy explains what we collect, why, and your rights. We are privacy-by-design: we collect only what the service needs, and we never sell your data.

Who we are

ShareHearth is operated by Equora. Contact: [email protected].

What we collect

• Account: your first name and last-initial (only your first name and last initial are shown publicly, e.g. "David L."), email address, and a home country. Sign-in is handled by Google, Apple, or email via Firebase Authentication; we receive an identity token, never your password.
• Activity: the thank-you posts you send or receive, categories, and the resulting reputation points.
• Optional: a profile photo you choose to upload (processed on your device before upload; location/EXIF metadata is stripped).
• Technical/anti-fraud: a device identifier and IP address, used only to detect abuse (e.g. fake accounts), and support messages you send us.

How we use it

• To run the service: create your profile, record thanks, compute reputation.
• To keep the community safe: detect fraud/abuse and handle reports. Our internal risk signals are used for human review only and never automatically lock a genuine account.
• To contact you about your account (e.g. email verification).

What we do NOT do

• We do not sell or rent your personal data.
• We do not show your full last name, email, or phone to other users.
• We do not use your data for third-party advertising.

Sharing

We share data only with service providers that operate the product on our behalf (e.g. Google Firebase for authentication, our hosting/CDN provider), and only as needed to run the service. A third party can read your reputation only with an explicit, scoped, revocable grant that you issue.

Your rights

You can access, correct, or delete your account and data at any time from the app, or by emailing [email protected]. Deleting your account erases your personal information; anonymized ledger records may be retained for integrity.

Data retention & security

We keep your data while your account is active and delete it on request. Data is transmitted over HTTPS. No method is 100% secure, but we apply reasonable technical and organizational safeguards.

Children

ShareHearth is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be posted here with a new "last updated" date.

← Back to ShareHearth