Privacy Policy

Effective 15 November 2026. This policy explains what data Sowheart collects, what it is used for and how you control it. Sowheart is only for people aged 18 and over. The Vietnamese text is the reference version.

1. Who handles your data

Sowheart is run by an independent developer in Vietnam, who is responsible for players' personal data. Privacy contact: admin.sowheart@gmail.com, or in the game: Help & Safety → Contact support, category "Privacy".

2. What we collect

Account: email, username (if any), hashed password (the password itself is never stored), account gender, Google sign-in link (if used).
Birth date: asked once when you create your account, to confirm you are 18 or over, and used for age-range matching at the Wish Tree. It is never shown to other players.
Character and profile: character name, appearance, occupation, hobbies, profile photos you upload.
Home city: city, region, country and time zone, found from a GPS fix rounded to about 1 km. Your device's precise coordinates are not stored.
What you send: private messages, Love Bench chat once both agreed to get to know each other, wishes, bottle letters, Wish Tree answers.
In-game relationships: friends, people you blocked, matches, in-game partners and spouses, gifts sent.
Safety: reports you file or that are filed about you, with evidence recorded by the server (recent messages between the two); moderation decisions; appeals.
Support: tickets, account and character ids, app version, platform, correlation ID. A diagnostic log is sent only with your consent and is scrubbed of tokens, passwords, coordinates and email addresses.
Devices and security: device name, app/browser, IP address of a sign-in session, sign-in times; your history of accepting these documents.
Game data: farm progress, items, coins, leaderboards.

Sowheart shows no ads and does not sell data to advertisers.

3. Data when you sign in with Google

When you choose Continue with Google, Sowheart only receives your Google account ID, your email address and whether Google has verified that email. We use them only to create your Sowheart account and sign you in. We never post to your Google account, never read your contacts or any other Google data, and never sell or share your Google data with anyone. When you delete your Sowheart account, the Google link is erased on the schedule in section 6.

4. Why we use it

To provide and run the game and keep your data in sync across devices.
To confirm players are 18 or over.
Real weather, local time and Dating Night by city.
Wish Tree matching by the age range and interests you choose.
Safety: anti-cheating, handling reports, suspending accounts that break the rules.
Player support and fixing bugs.
Necessary emails (verification codes, password reset, appeal outcomes).

We process data to perform our agreement to provide the game (the Terms of Service), with your consent (location, diagnostic logs), to keep players safe, and where Vietnamese personal data protection law requires it.

5. Sharing

We do not sell personal data. Data is only shared with:

OpenStreetMap/Nominatim (or a compatible provider): the rounded coordinates, to find your city.
Open-Meteo: the city centre's coordinates, for weather and time zone.
Google: when you choose to sign in with Google (see section 3).
Email delivery service: your email address and the message we need to send you.
Hosting provider: game data is stored on rented servers located in Vietnam.
Authorities, when the law requires it.

Other players only see your character's name, look, city (while your profile is on) and what you choose to share.

6. How long we keep it

Active account: for as long as you use the service.
After you delete your account: it cannot sign in from that moment; after 30 days your email, username, password, birth date, gender, Google link, sessions, profile photos and home city are erased for good. Records shared with others (match history, reports, messages you sent) keep only an anonymous id.
Support tickets: 365 days after their last update once closed.
Personal data copies: downloadable for 48 hours.
Server logs: up to 31 days.
Reports and moderation decisions: as long as needed to handle appeals, keep rule breakers from returning and answer lawful requests from authorities; once the account is deleted they keep only an anonymous id.

7. Your rights

Under Account you can:

see and sign out signed-in devices;
request a copy of your personal data (JSON);
clear your saved home city (the game will ask for GPS again before you play);
turn your profile off and block other players;
delete your account.

If you cannot get into the game, you can ask for your account to be deleted by email at sowheart.com/delete-account.

You may also ask for corrections (for example a mistyped birth date), withdraw consent and complain to the personal data protection authority. Send requests through Contact support (category "Privacy") or to admin.sowheart@gmail.com.

8. Security

Passwords are hashed with bcrypt, connections are encrypted, sign-in tokens are short-lived and revocable. Staff only look at report evidence or diagnostic logs when handling a case, and every such look is written to the admin audit log.

9. People under 18

Sowheart is only for people aged 18 and over. An account cannot be created with a birth date under 18, and we do not knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we suspend and delete it. If you think someone is under 18, report them in the game or email us.

10. Changes

Every version has a version number and an effective date. When this policy changes you will be asked to read and accept the new version before you play on.