This Privacy Policy applies to the HerWay website, account sign-in, and related services. If the app begins collecting additional information, we will update this policy before or when that collection begins.
Information we collect
Account sign-in
- Your email address and account identifier;
- The sign-in method you choose, such as email or Google;
- Authentication and session data needed to keep you signed in; and
- Basic technical details needed to secure account access.
Supabase processes authentication information on our behalf. Email sign-in uses a one-time code. Google may share account details according to the permissions and privacy choices you make with that provider.
The current email sign-in flow does not add your IP address, location, or request time to the one-time-code email or Supabase account metadata.
During email sign-in, we keep the address in a short-lived, HTTP-only cookie for up to 10 minutes. We remove it after successful verification or sign-out. Supabase uses session cookies to keep you signed in.
Technical information
The website may receive standard technical information needed to operate and secure it. We do not intentionally request precise location through the website.
Support chat
If you use the website chat, Crisp processes the conversation and related support information so we can respond. Crisp may also process technical information connected to the chat session. See Crisp's privacy statement.
Website analytics and attribution
When analytics is enabled, we use PostHog to understand how visitors find and use the website. PostHog may receive an anonymous identifier, session information, page URLs, referrer information, browser and device details, eligible interaction data, and website errors or exceptions.
We also record campaign and referral parameters when they are present in a visitor's link, including UTM parameters, advertising click IDs, and creator or referral codes. These values may be stored in the browser so that the original campaign can be associated with later website actions. Explicit website analytics events are not intended to include authentication credentials or one-time sign-in codes.
When analytics is enabled, after a successful sign-in we record that authentication completed and whether email or Google was used. When a new account is created, we also record account creation. These events do not include your email address, account identifier, or sign-in code.
Payments and give-back fulfillment
When you add payment details for agreement give-backs, our payment processor collects and processes your payment method information. HerWay retains tokenized customer identifiers and basic card metadata (such as brand and the last four digits) to manage your active agreements. HerWay never sees, processes, or stores full payment card numbers or security verification codes.
When a give-back is fulfilled, our gift card fulfillment provider processes the delivery of the agreed gift card. The recipient partner's email address is shared with the gift card fulfillment provider solely to facilitate digital delivery of the gift card.
How we use information
- To authenticate account access and maintain sign-in sessions;
- To understand user needs and improve HerWay;
- To measure campaign and website performance;
- To prevent abuse and unauthorized account access;
- To respond to support requests; and
- To comply with legal, security, and operational obligations.
How information is shared
We use service providers to operate the website and its features. Current categories of providers include authentication infrastructure, a payment processor for payment card authorization and processing, a gift card fulfillment provider for give-back gift card fulfillment, website analytics and error capture, website support chat, and website hosting infrastructure. Google also processes information when you choose its sign-in option.
We do not sell personal information. We may disclose information to service providers acting on our instructions, or when necessary to protect users, prevent abuse, comply with law, or respond to a valid legal request.
Analytics choices
Analytics is enabled by default for this U.S.-focused marketing site. You can open Privacy choices in the website footer to turn analytics off or back on. Turning analytics off stops future optional analytics capture from that browser; it does not delete data already received by PostHog. Site functionality remains available when analytics is turned off.
Account and contact requests
You can sign out from your account. To request account deletion or make another privacy request, email talk@herway.app. We may need to verify your request. Some information may need to be retained for security or legal reasons.
Retention
We keep account information while the account is active and as reasonably necessary for security and legal obligations. When information is no longer needed, we will delete it or securely de-identify it, subject to legal or security exceptions.
Security
We use reasonable technical and organizational safeguards appropriate to the information and services in use. No internet transmission or storage system can be guaranteed completely secure.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent. California residents may also have rights under the CCPA/CPRA, including rights to know, delete, correct, opt out of sale or sharing where applicable, and receive equal treatment for exercising those rights.
To make a request, email talk@herway.app.
App data
The HerWay application processes partner pairing, mutual commitments, self-reported completion status, and give-back transactions. All payments and payouts are governed by our payment processor and gift card fulfillment provider as described in this policy. HerWay never stores full card numbers.
Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The date above shows when it was last updated.
Contact
Privacy questions and requests: talk@herway.app.