Privacy Policy

Who we are

This policy explains how MorningHeart (a Veryeo brand) (“we”, “us”) handles personal information when you use morningheart.veryeo.com and the MorningHeart program.

What we collect

• Account information: your email address, used to create your account and send secure login links.
• Purchase information: whether you've purchased the program and a customer reference from Stripe. Card details are entered on Stripe's secure checkout and are never seen or stored by us.
• Progress: which workouts you mark as complete. If you aren't logged in, this is stored only in your own browser.
• Email list: if you sign up for the free Week 1 plan or the shop waitlist, your email address and which list you joined.
• Usage analytics: anonymous, aggregated page-view data from Vercel Analytics, which does not use cookies and does not identify you personally.
• Messages: anything you send us by email.

How we use it

• To give you access to the program and keep your progress.
• To process payments and refunds.
• To send the emails you asked for (login links, the Week 1 plan, launch news). You can unsubscribe at any time.
• To understand which pages are helpful and improve the site.
• To meet legal, tax and accounting obligations.

Who we share it with

We never sell or rent your personal information. We use trusted service providers to run the site:

• Supabase: secure database and login.
• Stripe: payment processing.
• Vercel: website hosting and privacy-friendly analytics.
• Any email service we use to send newsletters (we'll list it here when added).

We may also disclose information if required by law.

Cookies and local storage

We use essential cookies to keep you logged in, and your browser's local storage to remember things like your progress (when logged out), your cart and whether you've dismissed a pop-up. We don't use advertising cookies.

How long we keep it

We keep your account information for as long as your account is active. Purchase records are kept as long as required for tax and accounting purposes. You can ask us to delete your account at any time.

Your rights

Depending on where you live (for example, under GDPR in the UK/EU or the CCPA in California), you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain uses. To make a request, email hello@veryeo.com. We'll respond within 30 days.

Security

We use industry-standard security, including encrypted connections (HTTPS), secure password-free login and row-level database security. No system is perfectly secure, but we work hard to protect your information.

Children

MorningHeart is intended for adults. We do not knowingly collect information from children under 16.

Changes

If we make important changes to this policy, we'll update the date above and let account holders know by email.