Heedle Privacy Policy

Last updated: [2026-06-24]

Heedle is built on a simple promise: we want to help you notice how you use AI, without ever reading what you write. This policy explains, in plain language, exactly what that means — what we see, what we never see, and the choices you control.

If anything here is unclear, email us at support@heedle.app.

The short version:

The Heedle browser extension reads the shape of your AI sessions — timings, lengths, and which reflective moments you respond to — never the words you type or the words the AI replies.
Sharing any data with us is optional and off by default. Heedle works fully on your own device whether or not you ever turn it on.
The Heedle extension requires no account, no email, and no name.
We do not sell your data, we do not run ads, and we do not use your data to build advertising profiles.
You can turn sharing off, work entirely locally, or delete your data at any time.

The rest of this policy is the detail behind those promises.

Who we are

Heedle ("Heedle," "we," "us") provides a browser extension and a companion application that reflect the patterns of your AI-tool use back to you. This policy covers both. For any privacy question or request, contact support@heedle.app.

What the Heedle extension collects

The Heedle browser extension observes structural signals about how you interact with AI chat tools (such as ChatGPT and Claude). Specifically, it may record:

Timing signals — when sessions start and end, gaps between messages, how long sessions last, and the time of day you use AI.
Length signals — how long messages are (measured as counts, e.g. number of characters or words), not their content.
Interaction signals — which of Heedle's reflective prompts appear to you, and how you respond to them (for example, whether you pause, continue, or dismiss a prompt; which one-tap label you choose to describe how a session felt).
Structural session signals — patterns such as whether you copied a full response, returned quickly to a session, or moved between tasks — captured as category labels, never as the underlying text.

What the extension never collects

The content of your messages. Heedle does not read, store, or transmit what you type into an AI tool.
The content of the AI's responses. Heedle does not read or store what the AI says back to you.
The content of anything you type into Heedle's own reflections.
Your name, email address, or any account identifier (the extension requires none).
Your browsing on other sites, your keystrokes, or your screen.

In short: Heedle measures the shape of your engagement, not its substance.

Sharing is optional and off by default

When you install the extension, Heedle works entirely on your own device. The structural signals above are computed locally to power your reflection dashboard.

Nothing is sent to us unless you explicitly turn on data sharing. You are asked once, clearly, during setup, with no pre-selected choice. If you choose to keep everything local, no structural signals ever leave your browser, and Heedle still works fully.

If you do turn sharing on:

Only the structural signals described above are transmitted — never content.
Data is associated with a random, anonymous identifier, not with you personally. We do not know who you are.
Only signals generated after you grant sharing are transmitted; we do not retroactively collect anything from before your consent.
You can turn sharing back off at any time, and transmission stops.

Why we collect what we collect

When you choose to share, we use the anonymous structural signals to:

Power your own reflection dashboard and weekly patterns.
Understand, in aggregate, how people use AI tools, so we can improve Heedle's reflections and the research behind them.
Validate and develop the framework that underpins Heedle.

We do not use your data to: serve advertising, build advertising or marketing profiles, sell or rent to third parties, or train third-party AI models.

The Heedle companion app

The companion application (Heedle Reflect) shows your patterns back to you in more depth. Unlike the extension, the app requires you to sign in (using a passwordless email link) so that your reflections stay private to you across your devices.

The app asks for an email address for sign-in only. It is used to authenticate you and to send the email link — nothing else. It is never sold, never used for advertising, and never joined to your anonymous extension signals except through the pairing you create yourself.
The app connects to the extension using a one-time pairing code that you enter. This is what links your reflections to your account; it happens only when you choose to pair.
The app reflects the same structural signals — it never gains access to the content of your AI conversations.

If you use the app, your email address is personal information, and the rights described below ("Your choices and rights") apply to it.

How and where your data is stored

If you turn on sharing (extension) or create an account (app), data is stored using Google Firebase (Firestore), a cloud database service, on infrastructure operated by Google. We configure this storage so that the extension can only write structural signals — it cannot read other users' data.

We retain shared structural data for as long as it is useful for the purposes described above, or until you request deletion. Account data (your email) is retained while your account is active.

Service providers

We use a small number of third-party service providers to operate Heedle, including:

Google Firebase — data storage and (for the app) authentication.
Wix — to host this website.

These providers process data on our behalf and are not permitted to use it for their own purposes. We do not otherwise share your data with third parties.

Heedle is specific about what it collects
Heedle reads only structural signals from your AI sessions — things like how long a session lasted, how many messages were exchanged, and your responses to Heedle's own prompts. It never reads, stores, or transmits the content of your conversations: not what you type, not what the AI replies. Exactly what is and isn't collected is spelled out in this policy, and the data Heedle handles is declared in its Chrome Web Store privacy disclosures, which Google requires to be accurate. We believe a tool that asks you to trust it with insight into your thinking should tell you precisely what it captures — and be held to it.

This website (heedle.app) may use minimal cookies necessary for it to function. We use Google Analytics to understand site traffic in aggregate. The Heedle extension itself does not use advertising cookies or third-party trackers.

Your choices and rights

You are always in control:

Work entirely locally. Keep data sharing off and Heedle never transmits anything.
Turn sharing off at any time in the extension's settings.
Delete your data. Email support@heedle.app to request deletion of your shared structural data and, if you use the app, your account. We will action deletion requests within a reasonable period.
Uninstall the extension at any time to stop all collection.

Depending on where you live, you may have additional legal rights over your personal information — including the right to access, correct, delete, or restrict the processing of it, and to withdraw consent. Residents of the European Economic Area and the United Kingdom have rights under the GDPR; residents of Canada have rights under PIPEDA; residents of certain other regions have comparable rights. To exercise any of these, contact support@heedle.app and we will respond as required by applicable law.

Because the extension's shared data is anonymous and not linked to your identity, we may be unable to locate specific records without additional information from you (such as your anonymous identifier, which the extension can show you for this purpose).

Children's privacy

Heedle is not directed to children. The extension and app are intended for users 16 and older, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact support@heedle.app and we will delete it.

International users and data transfers

Heedle is operated from Canada, and data may be stored and processed in the United States via our cloud provider. If you use Heedle from outside that region, you understand that your data may be transferred to and processed there. Where required, we rely on appropriate safeguards for such transfers.

Changes to this policy

We may update this policy as Heedle evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide a more prominent notice. Your continued use of Heedle after changes take effect constitutes acceptance of the updated policy.

Contact

For any question, concern, or request regarding your privacy or this policy:

support@heedle.app

Heedle Privacy Policy

Last updated: [2026-06-24]

Heedle is built on a simple promise: we want to help you notice how you use AI, without ever reading what you write. This policy explains, in plain language, exactly what that means — what we see, what we never see, and the choices you control.

If anything here is unclear, email us at support@heedle.app.

The short version:

The Heedle browser extension reads the shape of your AI sessions — timings, lengths, and which reflective moments you respond to — never the words you type or the words the AI replies.

Sharing any data with us is optional and off by default. Heedle works fully on your own device whether or not you ever turn it on.

The Heedle extension requires no account, no email, and no name.

We do not sell your data, we do not run ads, and we do not use your data to build advertising profiles.

You can turn sharing off, work entirely locally, or delete your data at any time.

The rest of this policy is the detail behind those promises.

Who we are

Heedle ("Heedle," "we," "us") provides a browser extension and a companion application that reflect the patterns of your AI-tool use back to you. This policy covers both. For any privacy question or request, contact support@heedle.app.

What the Heedle extension collects

The Heedle browser extension observes structural signals about how you interact with AI chat tools (such as ChatGPT and Claude). Specifically, it may record:

Timing signals — when sessions start and end, gaps between messages, how long sessions last, and the time of day you use AI.

Length signals — how long messages are (measured as counts, e.g. number of characters or words), not their content.

Interaction signals — which of Heedle's reflective prompts appear to you, and how you respond to them (for example, whether you pause, continue, or dismiss a prompt; which one-tap label you choose to describe how a session felt).

Structural session signals — patterns such as whether you copied a full response, returned quickly to a session, or moved between tasks — captured as category labels, never as the underlying text.

What the extension never collects

The content of your messages. Heedle does not read, store, or transmit what you type into an AI tool.

The content of the AI's responses. Heedle does not read or store what the AI says back to you.

The content of anything you type into Heedle's own reflections.

Your name, email address, or any account identifier (the extension requires none).

Your browsing on other sites, your keystrokes, or your screen.

In short: Heedle measures the shape of your engagement, not its substance.

Sharing is optional and off by default

When you install the extension, Heedle works entirely on your own device. The structural signals above are computed locally to power your reflection dashboard.

Nothing is sent to us unless you explicitly turn on data sharing. You are asked once, clearly, during setup, with no pre-selected choice. If you choose to keep everything local, no structural signals ever leave your browser, and Heedle still works fully.

If you do turn sharing on:

Only the structural signals described above are transmitted — never content.

Data is associated with a random, anonymous identifier, not with you personally. We do not know who you are.

Only signals generated after you grant sharing are transmitted; we do not retroactively collect anything from before your consent.

You can turn sharing back off at any time, and transmission stops.

Why we collect what we collect

When you choose to share, we use the anonymous structural signals to:

Power your own reflection dashboard and weekly patterns.

Understand, in aggregate, how people use AI tools, so we can improve Heedle's reflections and the research behind them.

Validate and develop the framework that underpins Heedle.

We do not use your data to: serve advertising, build advertising or marketing profiles, sell or rent to third parties, or train third-party AI models.

The Heedle companion app

The companion application (Heedle Reflect) shows your patterns back to you in more depth. Unlike the extension, the app requires you to sign in (using a passwordless email link) so that your reflections stay private to you across your devices.

The app asks for an email address for sign-in only. It is used to authenticate you and to send the email link — nothing else. It is never sold, never used for advertising, and never joined to your anonymous extension signals except through the pairing you create yourself.

The app connects to the extension using a one-time pairing code that you enter. This is what links your reflections to your account; it happens only when you choose to pair.

The app reflects the same structural signals — it never gains access to the content of your AI conversations.

If you use the app, your email address is personal information, and the rights described below ("Your choices and rights") apply to it.

How and where your data is stored

If you turn on sharing (extension) or create an account (app), data is stored using Google Firebase (Firestore), a cloud database service, on infrastructure operated by Google. We configure this storage so that the extension can only write structural signals — it cannot read other users' data.

We retain shared structural data for as long as it is useful for the purposes described above, or until you request deletion. Account data (your email) is retained while your account is active.

Service providers

We use a small number of third-party service providers to operate Heedle, including:

Google Firebase — data storage and (for the app) authentication.

Wix — to host this website.

These providers process data on our behalf and are not permitted to use it for their own purposes. We do not otherwise share your data with third parties.

This website (heedle.app) may use minimal cookies necessary for it to function. We use Google Analytics to understand site traffic in aggregate. The Heedle extension itself does not use advertising cookies or third-party trackers.

Your choices and rights

You are always in control:

Work entirely locally. Keep data sharing off and Heedle never transmits anything.

Turn sharing off at any time in the extension's settings.

Delete your data. Email support@heedle.app to request deletion of your shared structural data and, if you use the app, your account. We will action deletion requests within a reasonable period.

Uninstall the extension at any time to stop all collection.

Because the extension's shared data is anonymous and not linked to your identity, we may be unable to locate specific records without additional information from you (such as your anonymous identifier, which the extension can show you for this purpose).

Children's privacy

Heedle is not directed to children. The extension and app are intended for users 16 and older, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact support@heedle.app and we will delete it.

International users and data transfers

Changes to this policy

We may update this policy as Heedle evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide a more prominent notice. Your continued use of Heedle after changes take effect constitutes acceptance of the updated policy.

Contact

For any question, concern, or request regarding your privacy or this policy:

support@heedle.app