Privacy Policy

All of Our Hearts is run by Arc Line and North, LLC (“we”). This page covers the All of Our Hearts app and this website, aooh.app. It says what we collect, why, and what you can do about it, and it goes with our Terms of Service. Email hello@aooh.app.

Our stories are written with AI and edited by our team, and the voices are made with AI; the people and events are made up.

Your account. If you sign in with Apple: the private id Apple gives us for you. If you sign in with Google: the private id Google gives us for you. If you sign in with email: your address. For signing in, we keep it as a scrambled code and a short hint like j…@example.com, so we can match you next time, and the full address is used only to send your six-digit code. If the app sets up your account before you sign in, it uses a random key made on your phone, and we keep only a scrambled copy of it.

Your coins and episodes. Your coin balance, your coin history (each purchase, unlock, gift and refund) and the episodes you’ve unlocked.

Your purchases. The store takes the payment, and we never see your card. We get the purchase record: which pack, when, the store’s transaction number and whether it was refunded.

Usage data, unless you switch it off. What happens in the app: plays and how far you listened, reading, downloads, unlocks, taps on the app’s screens and errors. It carries a random id made for the app on your phone, never your account, name or email, and the time it arrived, rounded to the hour.

The questions the app asks the first time you open it. Your answers stay on your phone until the app starts sending them. With usage data, the app may also send your answers to the five questions, as the options you picked, never free text. They never go with your account, and switching usage data off stops them too.

When you write to us. Your email address and what you write.

If you join the email list on this website: your email address; the box you ticked to join and the exact words you agreed to; where you said you found us, if you told us; which link brought you (for example, our TikTok); the country your sign-up came from; and the date (not the time).

When you visit this website: a short record of what happens on the page. It covers: that it opened; which link brought you; whether you’re in an app’s browser, such as TikTok’s or Instagram’s, and the kind of device (iPhone, Android or computer); whether your phone is in dark mode; whether you pressed play, how long it took to start, whether it played from a copy saved earlier, and roughly how far you listened (a quarter, half, three quarters, the end); and whether you downloaded, shared, opened the words, opened the Safari help, joined the list or hit a playback problem.

Each visit gets a new random number, made when the page opens and never saved on your device. We don’t use it, our server logs or the time of a sign-up to connect visits to each other or to you. These records never include your email address, and we don’t store your IP address with them. Our server adds the hour and the country the visit came from.

Server logs: like most websites, our host, Amazon CloudFront, logs each request to this site: your IP address, the time, the page or file, your browser’s details and the page that sent you. We use them only to keep the site working and safe.

To run your account and sign you in; to keep your coins right and deliver the episodes you unlock; to answer you when you write; to keep All of Our Hearts safe and working, and fix what breaks; and to follow the law.

Usage data helps us make better stories and a better app: which episodes keep people listening, where they stop, and what to make next.

The email list’s address is used only to tell you about new episodes and the All of Our Hearts app, never more than once a week.

We never sell your information or share it for advertising. There are no ads in All of Our Hearts, no advertising id and no tracking across other companies’ apps or sites, which is why the app never asks to track you.

On this website: no cookies, no stored ids, and no advertising or analytics trackers, pixels or code from other companies.

Your account, coins and unlocks: until you delete your account. We never remove an account that holds coins or unlocks because it hasn’t been used. An account the app set up before you signed in, with nothing in it, is deleted after 180 days unseen.

After you delete your account: only a record of each past purchase (the store’s transaction number, the pack, the coins, the date and whether it was refunded), with no name, email or link to you, for our accounts. Our backups roll over within 35 days.

Usage data: up to 12 months, then it’s deleted.

Smaller records: sign-in codes, a day after they expire; records of download links, 90 days; the purchase messages RevenueCat passes on from Apple and Google Play, 400 days.

Emails you send us: as long as we need them to help you. Ask, and we’ll delete them.

On this website: the list, until you leave it or ask us to delete your address. After that we keep only the address, on a do-not-email list, so we never write to it again. If your sign-up comes from outside the US, we don’t email you, and we delete it within 30 days. Visit records: 12 months. Server logs: 30 days.

From you, and from the app on your phone. If you sign in with Apple or Google, that company tells us your private id, and when you buy coins, RevenueCat passes on the store’s record of the purchase. We never buy information about you or get it from data brokers.

No location from your phone, no contacts and no advertising id. We never store your name, and we never store your IP address or your phone’s model with your account. We never see your card. If your phone shares an age range with the app, it stays on your phone, and we never get your birthday.

We don’t ask for sensitive information, like your health, beliefs or finances, and we don’t use what we hold to make decisions about you outside the app, like credit, work or housing.

Apple runs the App Store, where iPhone users buy coins as in-app purchases. Apple handles the payment and any refund, and runs Sign in with Apple.

Google runs Google Play, where Android users buy coins as in-app purchases. Google handles the payment and any refund, and runs Sign in with Google.

RevenueCat checks Apple’s and Google Play’s purchase records for us, so the right coins reach your account. It knows your account only by its random id.

Amazon Web Services hosts the app’s servers, the episodes and this website, stores your account, the app’s usage data and the email list, and sends your sign-in codes and our emails.

The voices are made with ElevenLabs, which never receives anything about you.

Each of these works only for us, on our instructions. We share your information with no one else, unless the law requires it, or if All of Our Hearts moves to a new owner, who must keep this page’s promises.

Usage data is on unless you switch it off: Account, then Settings, then Share anonymous listening stats. When it’s off, nothing is recorded or sent, and anything waiting to be sent is cleared.

It goes only to us, on our own servers. It carries a random id made for the app on your phone, never your account, name or email. When you delete your account, the app asks us to delete the usage data your phone sent us.

We never pay you or give you coins for your information, or for answering the app’s questions.

In the app: the episodes you unlock and their reading versions are saved on your phone, with your place in each, your settings and your answers to the questions. Your sign-in is kept in your phone’s secure storage (the Keychain on iPhone, the Android Keystore on Android). Signing out removes the episodes you unlocked from the phone, and deleting your account removes everything.

On this website: when you press play, your browser may keep a copy of the episode and the spot where you stopped, so it can play without a connection and pick up where you left off. The spot is also kept in this page’s address, so a link you copy picks up there too. Neither identifies you. To delete them, tap “Remove” under the player in Safari or Chrome, or clear this site’s data in your browser’s settings. Your browser may also clear them on its own.

All of Our Hearts is for people 13 and older, as our Terms of Service say. We don’t knowingly collect anything from a child under 13. If we learn we have, we delete it.

For teens 13 to 17, a parent or guardian is responsible for the account.

If you’re a parent or guardian and think we hold something about your child, write to us at hello@aooh.app, and we’ll delete it.

We never sell or share anyone’s information for advertising, a teen’s included.

We don’t track you across other apps or sites, and no advertising or analytics company collects information through All of Our Hearts for its own use, so the app and the site work the same whether or not your browser sends a Do Not Track signal. If your browser sends an opt-out signal, like Global Privacy Control, we treat it as a request not to sell or share your information, which we never do anyway.

Our pages link to our profiles on social media as plain links: no social buttons, plugins or embedded posts that report back to those companies. Once you’re on their sites, their own privacy policies apply.

Everything between the app, the site and our servers travels encrypted. The email list keeps your address as you typed it, and so does the do-not-email list once you leave. The app’s usage data never carries a name or an email address. The app’s server logs never carry your sign-in, codes, email address, account id or IP address, and on your phone your sign-in lives in the phone’s secure storage. No system is perfect, though, and if something ever goes wrong that affects you, we’ll tell you.

If this page changes, we’ll update the date at the top. Before any change to how we use your information takes effect, we’ll tell you in the app and on this site, and we’ll email the list before any change to how we use your address.

If anything on this page is hard to read or use, or you’d like it in another form, write to us at hello@aooh.app.

In the app: Account, then Delete account. It happens right away when you’re online. If the connection drops partway, it finishes the next time the app is online. It can’t be undone. It deletes your sign-in, your coins (standard and gift), your unlocks, the episodes saved on your phone and your answers to the questions, and asks us to delete the usage data your phone sent us. We also delete your record at RevenueCat and end Apple’s or Google’s sign-in for All of Our Hearts. What’s left is the purchase record described above, with no link to you.

By email: if you can’t use the app, write to us at hello@aooh.app, and we’ll answer within 30 days.

The email list: every email has a one-tap link to leave it. Records of visits to this website aren’t linked to you, so we can’t find or delete one person’s.

Wherever you live, you can ask to see what we hold about you, get a copy, correct it or delete it. Delete your account in the app, or write to us at hello@aooh.app; we’ll answer within 30 days. We may need to check it’s really you, for example by asking you to write from your account’s email address. Someone you authorize can ask for you, with your written permission. If we turn a request down, we’ll say why, and you can ask us to look again.

California: we don’t sell or share personal information, as California’s law uses those words, and we never sell or share a minor’s. We honor opt-out signals like Global Privacy Control, and we don’t give personal information to anyone for their own marketing. Using your rights never changes how we treat you.

Other states: if you live in another state, like Colorado, Connecticut, Utah or Virginia, you have the same rights with us. If we turn a request down, you can appeal by replying to our answer, and we’ll answer an appeal within 45 days. If you’re still not happy, you can contact your state’s attorney general.

All of Our Hearts is offered in the United States, and this page is written for US law.

hello@aooh.app