HERCode — Privacy Policy

1. Who Is Responsible for Your Data?

HERCode, operated by Jasmin Semra Gabrielli, is responsible for personal data processed through the Service, unless another provider acts as an independent controller for its own service, such as Google Play.

Privacy questions and requests may be sent to hello@hercode.ai.

2. Information We Collect

We collect information you provide, information created through your use of HERCode, and limited technical information needed to operate the Service.

Account information may include:

• email address;
• display name;
• account identifier;
• email-verification status;
• profile image, if supported and chosen;
• subscription and Premium status; and
• account preferences.

HERCode content may include:

• archetype and quiz answers;
• reflections and journal entries;
• mood or emotion ratings;
• boundary logs;
• relationship profiles and relationship information;
• Analyzer submissions and communication examples;
• suggested scripts and generated insights;
• weekly summaries and monthly reports;
• saved insights and bookmarks;
• support messages; and
• screenshots, images, files, voice recordings, or transcriptions if those features are enabled and you choose to use them.

Technical and service information may include:

• app version;
• operating system and device information provided through normal service requests;
• authentication events;
• error or security information;
• timestamps;
• subscription status; and
• records needed to prevent fraud and maintain the Service.

Payment-card details are processed by Google Play or the Apple App Store. HERCode receives purchase and subscription information needed to provide Premium access but does not receive your complete card details.

3. How We Use Information

We use personal data to:

• create and secure your account;
• provide and synchronize HERCode features;
• personalize reflections, insights, summaries, and recommendations;
• link entries to selected relationships;
• calculate evidence-based trends and streaks;
• manage Premium access and purchases;
• provide support;
• maintain security and prevent fraud or misuse;
• send service-related emails;
• comply with legal obligations; and
• improve HERCode’s reliability and user experience.

We do not sell personal data.

4. Automated Analysis and AI-Powered Features

HERCode uses automated systems and AI-powered features to analyze information you choose to enter and to generate educational insights, summaries, scripts, classifications, prompts, and recommendations.

Automated processing may involve HERCode's cloud infrastructure and external AI/model service providers where those services are enabled for a feature. Information submitted to an AI-powered feature may therefore be transmitted to the provider used to generate the requested output.

HERCode aims to limit processing to information needed to provide the requested feature. Automated results may be inaccurate or incomplete and may misunderstand context, relationships, emotions, intentions, or communication.

Automated outputs are not medical, psychological, legal, financial, or other professional advice.

5. Services We Use

Firebase Authentication: Used for account creation, sign-in, email verification, and password-reset functions. Firebase Authentication may process authentication data outside Switzerland, including in the United States.

Cloud Firestore: Used to store and synchronize user profiles, reflections, boundary logs, relationship profiles, Analyzer records, reports, saved data, subscription information, and related app content.

Firebase Storage: Used for supported file or image storage where an upload feature is enabled and you choose to upload content.

Cloud and AI processing: HERCode may use cloud functions and AI/model services to process requests for AI-powered features. Information submitted to such a feature may be transmitted to the relevant service provider as necessary to generate the requested output.

Google Play Billing: Used to process Android subscriptions and purchases and to confirm Premium access. Google processes payment information under its own terms and privacy policy.

Apple App Store: If HERCode becomes available on Apple platforms, Apple may process subscriptions and purchases under its own terms and privacy policy.

Email services: HERCode uses Firebase-related email functionality, a Firestore-based email queue, and/or connected email services to send operational messages such as account, verification, welcome, support, or service communications where enabled.

Local device storage: HERCode may use in-memory state and local preferences to maintain sessions, settings, temporary state, or limited offline fallback information.

At the effective date of this Policy, HERCode does not have Firebase Analytics, Firebase Crashlytics, or Firebase Cloud Messaging push notifications actively integrated. This Policy will be updated if those services are activated.

6. Legal Grounds for Processing

Where Swiss data-protection law applies, we process personal data according to its principles and information requirements.

Where the GDPR or UK GDPR applies, our legal grounds may include:

• performance of our contract with you, to provide the Service;
• legitimate interests, such as security, fraud prevention, support, and responsible improvement;
• consent, for optional processing or marketing where required; and
• compliance with legal obligations.

You may withdraw consent for consent-based processing. Withdrawal does not affect processing that occurred before withdrawal.

7. When We Share Information

We may share personal data only where reasonably necessary with:

• technical providers used to host, authenticate, store, deliver, secure, process, or support the Service;
• AI/model service providers where an AI-powered feature requires external processing;
• Google or Apple for subscriptions, billing, and app-store functions;
• email-service providers where operational emails are enabled;
• professional advisers under confidentiality obligations;
• authorities where required by law or necessary to protect legal rights or safety; and
• a successor organization in connection with a merger, reorganization, financing, or sale, subject to applicable privacy law.

Service providers may process data only for the services they provide and under their applicable contractual and legal obligations.

We do not sell personal information or share it for independent targeted advertising.

8. International Data Transfers

Some providers may process data outside Switzerland, the European Economic Area, or your country, including in the United States.

Where required, international transfers are protected through recognized safeguards such as adequacy decisions, contractual protections, or other lawful transfer mechanisms.

No online service can guarantee that data will always remain in one country.

9. Data Retention

We retain personal data while your account is active and as necessary to provide HERCode.

Retention may also be required for:

• security and fraud prevention;
• legal obligations;
• billing and transaction records;
• resolving disputes;
• enforcing agreements; and
• maintaining necessary backups for a limited period.

Individual content may remain until you delete it, delete your account, or request deletion, subject to technical and legal limitations.

10. Account Deletion

You may request account deletion through the app where available or by contacting hello@hercode.ai.

When an in-app account deletion request successfully completes, HERCode's account-deletion process is designed to remove the associated HERCode user-data tree, supported user-owned records and uploads, and the associated Firebase Authentication identity.

Deletion may require recent authentication or identity verification for security reasons.

We may retain limited information where required for legal compliance, billing records, fraud prevention, security, dispute resolution, or where information is retained independently by an app store or another provider under its own legal obligations.

Deleting your HERCode account does not automatically cancel a subscription purchased through Google Play or the Apple App Store. App-store subscriptions must be cancelled separately.

If you cannot access the in-app deletion function, contact hello@hercode.ai from the email address associated with your account to request deletion. We may ask you to verify your identity.

11. Data Access and Export

You may request access to personal data associated with your HERCode account.

The current in-app export provides a limited export of primary account information and does not necessarily provide a complete archive of every reflection, boundary log, Analyzer session, relationship profile, report, or saved insight.

You may contact hello@hercode.ai to request broader access or data portability. We will respond according to applicable law and technical feasibility.

12. Your Privacy Rights

Depending on your location, you may have rights to:

• receive information about how your data is processed;
• access your personal data;
• correct inaccurate data;
• request deletion;
• restrict or object to certain processing;
• withdraw consent;
• receive portable data where applicable; and
• lodge a complaint with a competent data-protection authority.

To exercise a right, contact hello@hercode.ai. We may need to verify your identity.

Rights may be subject to legal exceptions.

13. Security

HERCode uses measures intended to protect personal data, including authenticated access, Firestore Security Rules, encrypted network transmission provided by service infrastructure, and access restrictions.

No service can guarantee absolute security. You are responsible for using a secure password and protecting access to your account and device.

HERCode is not represented as end-to-end encrypted unless that architecture is separately implemented and verified.

14. Children

HERCode is intended only for users aged 18 or older.

We do not knowingly permit children or minors under 18 to create or use a HERCode account.

If you believe a person under 18 has created an account, contact hello@hercode.ai.

15. Marketing and Service Communications

HERCode may send necessary service communications relating to accounts, security, purchases, support, or material changes.

Marketing or promotional messages will be sent only where permitted and, where required, with consent. Users may unsubscribe from marketing communications.

Push notifications are not currently active. If notifications are introduced, users will receive appropriate controls and this Policy will be updated where necessary.

16. Changes to This Policy

We may update this Privacy Policy when HERCode, its providers, or legal requirements change.

Material changes will be communicated through the app, by email, or another appropriate method. The current effective date will appear at the top of the Policy.

17. Contact and Complaints

Privacy questions and requests may be sent to:

HERCode

Operated by Jasmin Semra Gabrielli

Email: hello@hercode.ai

Business address: Official business information and address will be published before public release.

You may also lodge a complaint with the competent data-protection authority in your country.

In Switzerland, the relevant federal supervisory authority is the Federal Data Protection and Information Commissioner.