,d8b.d8b,
   `Y88888Y'
     `Y8Y'

p r i v a c y

privacy policy

Last updated: 22 July 2026

This policy explains how 362 LLC ("we", "us"), trading as we heart apps, handles your information in our apps and on this website.

Short version: some of our apps need an account, so we hold your email address and whatever you create in the app. We use it to run the service and nothing else. We don't sell it, we don't advertise against it, and we don't track you across other companies' apps or websites. You can delete your account and everything in it at any time, from inside the app.

+------------------------------------------------------------------+

1. information we collect

We collect three things, and only these three:

Account information
An email address, so we can identify your account and contact you about it. Optionally a display name and avatar, if you choose to add them. If you sign up with a password, we store only a salted cryptographic hash — never the password itself, and we cannot recover it.
Your content
Whatever you create or store in the app. This belongs to you. We access it only when you ask us to for support, or in the rare case where we are legally required to.
Basic technical data
Information needed to operate and secure the service: IP address, device and OS version, and timestamps of requests and sign-in attempts. We use this to keep accounts secure, to diagnose faults, and to detect abuse.

2. how you sign in

We support several sign-in methods. What we receive depends on which you use:

We use these only to authenticate you. We do not import your contacts, calendar, photos, or social graph from any provider.

3. what we do not do

4. why we use your information

We use what we collect to create and maintain your account, to store and sync your content, to answer your support requests, to keep accounts secure and detect abuse, and to send you essential service messages such as password resets or notice of a material change to this policy. We do not send marketing email unless you separately opt in.

If you are in the UK, EU, or EEA: our legal basis is performance of our contract with you for operating your account and storing your content; our legitimate interests in keeping the service secure and functioning; your consent where we ask for it; and compliance with legal obligations where they apply.

5. where your information is held

Your account and content are stored on infrastructure operated by third parties acting as our processors. They may process your information only on our instructions and only to provide their service to us — never for their own purposes. Our processors are:

Supabase
Database and authentication. Stores your account record, sign-in credentials, and the content you create in the app. Supabase runs on Amazon Web Services infrastructure.
Vercel
Hosting for this website. Vercel also acts as our domain registrar and DNS provider.
ImprovMX
Email forwarding for our contact address, so that mail you send us reaches our inbox.

Our infrastructure is located in the United States. If you access our apps from outside the United States, your information will be transferred there. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for these transfers.

6. purchases

Purchases and subscriptions are processed entirely by Apple through the App Store. We never see your name, billing address, card number, or any other payment details. Apple provides us only anonymous aggregate sales data, and may tell us that a given account holds an active subscription.

7. deleting your account

You can delete your account, and all content in it, from inside the app — look in Settings for "Delete Account". You do not need to email us or ask permission.

When you delete your account, your content and profile are removed from our live systems immediately. Residual copies may persist in encrypted backups for up to 30 days, after which they are overwritten. We may retain a minimal record of the deletion itself, and any information we are independently required by law to keep.

If you cannot access the app for any reason, email hello@36two.com and we will delete the account for you.

8. how long we keep things

Account information and content are kept for as long as your account is open, and then deleted as described above. Security and diagnostic logs are kept for up to 90 days. Support email is deleted once the issue is resolved and no longer useful for reference.

9. security

Data is encrypted in transit using TLS, and encrypted at rest by our infrastructure providers. Passwords are stored only as salted hashes. Access to production systems is limited to those who need it. No system is perfectly secure, but if a breach ever affects your personal information we will notify you and the relevant regulators as required by law.

10. children

Our apps are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account or provided us with personal information, email us and we will delete it promptly.

11. your rights

Depending on where you live, you may have the right to access a copy of the personal information we hold about you, to correct it, to export it in a portable format, to delete it, to object to or restrict certain processing, and to withdraw consent you previously gave. These rights come from laws including the GDPR, UK GDPR, and CCPA/CPRA.

Email hello@36two.com to exercise any of them and we will respond within 30 days. We will not discriminate against you for asking. Because we sell no personal information and share none for behavioural advertising, there is no "Do Not Sell or Share My Personal Information" action for us to offer — but you are welcome to confirm that with us in writing.

If you are in the UK, EU, or EEA and think we have handled your information badly, you may lodge a complaint with your local supervisory authority. We would rather you told us first so we can fix it.

12. this website

This site is static. It sets no cookies, runs no analytics, and embeds no third-party scripts or fonts. Our hosting provider may keep standard server logs (IP address, timestamp, page requested) for security and operational purposes.

13. changes to this policy

If we change this policy, we will update the date at the top of this page. For material changes we will also notify you in the app or by email before the change takes effect.

14. contact

362 LLC (trading as we heart apps)
1001 S Main Street
Kalispell, MT 59901
United States
hello@36two.com

362 LLC is the data controller for the information described in this policy.