Privacy at Heart Check

Using the app as a guest

Your Heart Check answers and guided-reflection messages stay in memory in this open page. The app does not upload them, save them in browser storage, send them to Joey, or send them to ChatGPT or OpenAI for processing. Suggestions are generated on your device using the Renegade Rescue framework.

Use “Finish & clear” or “Clear this session” when you’re done. Refreshing or leaving the page also clears the unsaved check-in. The app does not restore guest answers or transfer them into an account.

What still uses the internet

Loading pages, audio, and the resource list makes normal internet requests. Hosting providers may process ordinary technical information such as IP addresses and request logs. Guest answers aren’t included in those requests. The guest experience has no app-added analytics or session-recording scripts. External resource links have their own privacy practices.

Choosing to save with an account

Your account email, name provided at sign-in, signup date, and email-update preference are recorded in Renegade Rescue’s private member contact log and synced to the owner’s Command Center. This supports membership contact. Promotional emails are optional and off by default; you can change your preference on the account page. Private journal answers are not included in that log. No Heart Check is saved just because you sign in. Pressing “Save this Heart Check” sends that entry to the site’s database so you can revisit it and build patterns across visits. The app restricts each person’s history to their own signed-in account. It does not publish entries or send them to Joey as messages or reports.

Saved data is not end-to-end encrypted. Authorized site operators and hosting providers can technically access stored account data. For answers you want to keep off the server entirely, use guest mode or leave the entry unsaved.

Email accounts and password recovery

You can create an account with an email address and password without a ChatGPT account. Passwords are stored as salted, one-way hashes. Sign-in uses an HTTP-only session cookie that expires after 14 days. A password change or reset invalidates other email sign-in sessions. Email addresses entered during signup are not automatically verified.

If you request a password reset, your email and the request date appear in Joey’s private recovery inbox. Emails are not sent automatically. Joey can send a one-use reset link to the account email from his own email app. Links expire after one hour. Existing members can add an email password while signed in with their original account to keep their saved history. A new signup never inherits another account’s history just because its email matches.

Optional voice dictation

The Speak button asks your browser to convert microphone speech into editable text. Your browser or its speech provider may process audio online under their policies, including when you use the guest guide. This app does not record or store audio. Words appear in the message box and are not sent to the Coach until you press Send. If browser dictation is unavailable, you can use your keyboard’s dictation or type instead. Read aloud uses the browser’s speech synthesis and device voices to speak only the response you select. Voice processing follows the browser or voice provider’s policies. It does not automatically read responses or create an audio recording in your account.

Choosing the online AI coach

The guided reflection works on your device. The separate online AI coach requires sign-in and an explicit choice to enable it. When enabled, your messages, conversation context, and relevant saved Heart Check history are sent to OpenAI to generate replies, and the conversation is saved in your account. Saved custom answers and chat excerpts also help populate your private patterns, cycles, and suggested answers. Coach takeaways are labeled as unconfirmed reflections; they are not counted as facts about you. Guest conversations and unsaved checks are not added to account history. The app requests no response storage from the AI service, but this is not a guarantee of zero provider retention or access.

Posting in the member community

Community posts, comments, chosen display names, and profile photos are stored and shared with signed-in members. Your email is not displayed to other members. Submitted text and photos are sent to OpenAI for safety checks before publication. This is separate from private Heart Checks and does not post journal entries or coach conversations automatically.

Members can delete their own posts and comments. The owner can review reports, remove any post or comment, and pause a member’s posting access. Deleting a post also removes its comments. Reports are visible to the owner. Content filters can make mistakes, so please report anything unsafe.

On a shared device

Clear your session when you finish, and sign out if you used an account. Anyone who can see your screen, browser extensions, or device backups is outside the app’s control. “Guest” means the app does not store or send your written answers; it does not mean all internet activity is anonymous.