Plus Privacy Policy
Effective November 3, 2026
Happy Heart Plus (plus.happyheartsoftware.com) is the service behind the paid and AI features in Happy Heart Software’s apps. This policy covers Plus. Each app’s own privacy policy says what that app keeps, and what it sends to Plus for each feature.
Your Plus
Your Plus is either a Plus key, a Google Play purchase, or your Happy Heart Software account. For a key, Plus keeps only a one-way hash of it (SHA-256), never the key itself. If you buy Plus in an app from Google Play without signing in, the purchase is your Plus: the app reaches it with the purchase token Google gives it, and nothing else identifies you. Getting Plus on the web without signing in works the same way with the license key Polar gives you: Plus keeps only a one-way hash of it, with the Polar order or subscription it came from. Signing in later can move either onto your account. For an account, signing in happens on accounts.happyheartsoftware.com, under its own privacy policy, and Plus keeps only your account ID. With either, Plus keeps:
- which products you have, where each came from (bought on the web or in Google Play, or given by our staff), and until when;
- how much AI you’ve used, per product and month or billing period: its cost, the number of requests, and how much came from AI credits;
- if you buy AI credits, how many you have and which Polar or Google Play orders added them;
- for purchases in Google Play, the purchase token and order ID Google gives the app, and which app and product they were for, so Plus can check them with Google and follow renewals and refunds;
- for purchases on the web made without signing in, or support purchases, the Polar order or subscription ID, so Plus can follow renewals, cancellations and refunds;
- a count of your recent requests, to stop runaway use, deleted after a day.
AI features
When you use an AI feature, the app sends Plus that feature’s fields (its privacy policy lists them), which for some features include a photo or a PDF, such as a receipt. Plus checks a file is the kind the app says, then passes the fields to an AI model provider through Cloudflare’s AI Gateway, and returns the answer to the app. Plus doesn’t keep what was sent or the answer. Depending on the model, the provider is Anthropic (Claude models) or Cloudflare (Workers AI models), and it handles the request under its own terms.
So we can find requests that fail, the gateway keeps a record of each one without its content: when it was made, which app and feature it was for, the AI model, an ID Plus gives your Plus (not your key itself), whether it worked and, if the answer couldn’t be used, why, how many tokens it used, and what it cost. It never records what was sent or the answer.
Buying and billing
Plus’s pages (on plus.happyheartsoftware.com) sign you in with your Happy Heart Software account. Signing in sets a cookie here holding your account ID, name and email address, so the pages can show who’s signed in; it lasts a week or until you sign out, and Plus doesn’t keep them anywhere else.
Buying, billing and receipts are handled by Polar (polar.sh), our merchant of record, under its own privacy policy. In an app installed from Google Play, you buy through Google Play instead, under Google’s privacy policy; Plus asks Google whether the purchase is valid and active, and Google tells Plus when it renews, ends or is refunded. Plus never sees your payment details. Plus gives Polar your account ID, so your purchases are linked to your account, and, for AI used from a subscription or credits, the product, feature and model each charge was for and how many credits it used, so Polar can show your usage.
Who else is involved
- Cloudflare runs Plus, stores its database and runs the AI Gateway. Like every web host it sees your IP address. Plus keeps no request logs besides the gateway’s record above.
- Anthropic or Cloudflare Workers AI answer AI requests, as above.
- Polar handles buying and billing on the web, and Google Play in apps installed from it, as above.
Our staff can see Plus keys’ labels, products, usage and credits, and the gateway’s records, to help people and fix problems. We don’t sell or share your information with anyone else, and Plus has no analytics, advertising or tracking.
Your choices
Deleting your Happy Heart Software account (on accounts.happyheartsoftware.com) deletes everything Plus keeps for it: its products, usage, AI credits and Google Play purchase records. While a paid subscription is still running, cancel it first (on its page here, or in Google Play), and delete the account once it has ended; deleting the account doesn’t cancel it. A Plus key isn’t linked to an account: to have one’s information deleted, email us. Purchases and receipts stay with Polar or Google Play, under their policies, and the gateway’s records above (which hold no content) are kept as Cloudflare keeps them.
Contact
Questions? Email contact+plus@happyheartsoftware.com.