Privacy policy
Last updated: 24 October 2026
In short: HeyUs does not ask you for an account, shows no ads, uses no trackers or audience measurement tools and sells no data. What you share with your loved ones goes through our server only to be delivered to them, and you can delete everything from the app.
1. Who is responsible for your data
The HeyUs app (Android and Windows), the "HeyUs Connect" sync service and the heyus.app website are published by El Mehdi KOUHAILI, the data controller. Contact: info@heyus.app.
2. What stays on your device
Much of HeyUs works without sending anything: your automations, your reminders, your saved places and arrival detection, the emergency health card, the scam shield, health data read through Health Connect, your notes and the journeys you record yourself stay on your device. The Google or Microsoft accounts you connect (calendar, email, storage) also stay on the device: their tokens are never sent to our server.
3. What our server processes, and why
As soon as you connect a device or a loved one, HeyUs Connect transmits what you choose to share. It only processes what the service needs:
| Data | Why |
|---|---|
| Anonymous device ID, the name you give it, platform (Android or Windows), creation and last connection dates, profile photo and public ID if you choose one | To run the service and let your loved ones recognize you. The device's access key is only stored as a hash. |
| Links with your loved ones and your devices, and the permissions granted to each | To know who to deliver what you share to, and only to them. |
| Device status you share: battery, status, last shared location and its accuracy | To show them to the loved ones you have authorized. The last location replaces the previous one: no location history is kept on the server. |
| Journeys you share yourself ("My journeys") | To deliver them to the loved one or group you choose: end-to-end encrypted, start and end hidden around your places, taken back in one tap. |
| Messages, photos, voice messages, questions and answers, alerts and commands between devices | To deliver them to their recipients. |
| Content of shared spaces: groups, lists, tasks, couple, family, crisis mode, care, gifts | To sync them between the members of the space. |
| Backups, family vault, documents of the couple and of trusted people, exchanges between your own devices | To store and sync them. They are end-to-end encrypted: we cannot read them. |
| Activation code: PayPal order and transaction IDs, amount, number of seats, dates, devices covered, fingerprint of the code (never the code itself) and fingerprint of the payer's email | To deliver and verify the code, manage its seats and those gifted to a loved one, let you find your code again, and apply a refund. No banking data. |
| Invitation codes and accepted invitations | To connect loved ones and count invitations. |
Everything travels over HTTPS. Apart from end-to-end encrypted content, data is encrypted in transit but readable by the server, which only uses it to deliver it; it is not analyzed, profiled or used for advertising.
4. Legal bases
- Providing the service you request (connecting devices and loved ones, transmitting what you share, managing your subscription).
- Your consent, given and withdrawable in the app, for location, family supervision, remote access and sensitive permissions.
- Legal obligations for purchase records that accounting rules require us to keep.
- Legitimate interest for the security of the service (fighting abuse, technical backups).
5. App permissions, and what they are used for
HeyUs only asks for them when you turn on the feature concerned, and you can revoke them in your device settings.
- Location (including in the background): location sharing with your loved ones if you turn it on, "Arrived safely", safe trips, SOS, places, automations, and the journeys you record yourself ("My journeys"), started and stopped by you, with a visible notification for the whole recording. Live sharing is time-limited and always shown by a visible notification.
- Physical activity and sensors: fall and car crash detection, computed on the device.
- SMS, call log, phone state, answering calls: only to show and manage your own phone's calls and SMS on your PC (continuity between your devices, end-to-end encrypted), and for offline SOS. Verification codes are never forwarded.
- Notification access: show your phone's notifications on your other devices, if you turn it on.
- Camera, microphone, photos: photos, voice messages, QR codes.
- Usage statistics: screen time, only as part of a family agreement accepted on the device concerned.
- Health Connect (read-only: steps, sleep, heart rate, exercise): automations and suggestions, on the device only.
- Calendar (read), NFC, Bluetooth, alarms, Do Not Disturb, display over other apps, notifications: automations, alerts and reminders that you set up.
6. Who your data is shared with
- Your loved ones, only what you have agreed to share with them.
- Our hosting provider, which provides the HeyUs Connect server, with no authorized access to content.
- PayPal for the payment of an activation code on our website: PayPal processes your payment data under its own policy; we only receive confirmation of the payment (order and transaction IDs, amount, payer's email, of which we keep only a fingerprint).
- Services you connect yourself (Google, Microsoft, Dropbox…), directly from your device.
- Authorities, only if the law requires us to.
We do not sell or rent any data, and we use no advertising or analytics SDK.
7. How long
| Data | Duration |
|---|---|
| Pending commands, alerts and messages | From 1 minute to 24 hours depending on their type, then expired; the text of a forwarded SMS is erased as soon as it is delivered. |
| Photos and voice messages sent outside a space | 7 days |
| Files in a shared space | 365 days |
| Documents retrieved from your own devices | 1 day |
| PC screen images | 1 hour at most, erased as soon as they are received |
| Crisis mode locations | Erased when the crisis ends; the crisis is deleted after 7 days of inactivity |
| Invitation codes | 10 minutes (invitation links: 30 days) |
| Encrypted backups | The last 10 versions |
| Device, links and spaces | Until you delete your data |
| Purchase records | The period required by accounting and tax obligations |
| Recorded journeys | On your device, until you delete them (or 3 months, or 1 year, as you choose); a shared journey, until you take it back |
| Server backup copies | 14 days, then replaced |
8. Children
HeyUs is not intended for children under 13 without a parent's consent and guidance. Family supervision only works if the child accepts the agreement on their own device; it does not show their messages, their screenshots or the list of sites visited, only time per category and the number of blocked items. A visible banner reminds them of it.
9. Your rights
You can access your data, correct it, export it, object to processing, withdraw your consent and delete everything. Most of these actions can be done directly in the app (My account, under your picture). For any request: info@heyus.app. You can also contact your country's data protection authority (for example the CNDP in Morocco, the CNIL in France or the ICO in the UK).
See also: Data protection and Delete my account.
10. Changes
We will publish any change to this policy here, with its date; significant changes will be announced in the app.