Privacy Notice

Last updated: August 19, 2026

Who We Are

This Privacy Notice applies to Heala and the website at heala.house. Heala is an NYC-based events business that hosts intimate Jewish gatherings.

Privacy questions and requests: hello@heala.house.

Information We Collect

We currently collect the following categories of information:

• Name and email address, which we use to identify you and communicate with you about your reservations and account.
• Account and profile information when you choose to create a Heala account, such as the name and email associated with your profile.
• Basic Google account information — such as name and email — when you choose to sign in with Google. Google provides the information needed to authenticate you and create or link your account.
• Event reservation and purchase information, including the event you reserved, attendee name and email, transaction identifiers, purchase amount and currency, reservation status, and any cancellation or refund history connected to the reservation.
• Waitlist information, including your name, email, and waitlist or notification status for events you have asked to be notified about.
• Newsletter subscription information, including your email address, subscription status, and any unsubscribe or suppression flags.
• Communications you send directly to Heala, such as emails or messages to hello@heala.house.
• Technical information generated through normal hosting and security infrastructure, such as IP address, browser and user-agent information, and request logs.

We do not currently collect phone numbers, dietary preferences or allergies, accessibility information, attendance or check-in records, device identifiers, or behavioral site-usage analytics.

An account is not always required to make a purchase. Depending on the event, guest checkout may be available, in which case we collect only the information needed to fulfill that specific reservation.

Accounts and Authentication

Heala uses its hosting and authentication infrastructure to manage accounts. You can sign in with an email address and password, or you can sign in with Google. If you use Google sign-in, Google provides the basic account information needed to authenticate you and create or link your Heala account. Password authentication is handled by our managed authentication provider; Heala’s application database does not store your password. If you sign in with Google, Heala does not receive your Google password.

Payments

Paddle is Heala’s Merchant of Record. Paddle handles payment processing, billing, and applicable tax matters for Heala gatherings. When you pay for an event, you enter payment information into Paddle’s checkout, and Paddle processes the transaction on Heala’s behalf.

Heala does not store full payment-card numbers or CVV/security codes. We retain information necessary to maintain reservation and refund records, such as Paddle transaction and customer identifiers, purchase amount and currency, and the name and email associated with the purchase. Some payment information, such as card brand, last four digits, and billing ZIP/postal code, may be received from Paddle temporarily for transaction or receipt processing and is not persisted in Heala’s application database.

Heala does not currently offer subscriptions or recurring billing.

How We Use Information

We use the information we collect to:

• Create and manage your account;
• Process reservations, purchases, and waitlist sign-ups;
• Operate events and manage event capacity;
• Process cancellations and refunds;
• Send transactional communications and event updates, such as order confirmations, refund notices, and event reminders;
• Send the Heala newsletter to people who have affirmatively subscribed;
• Maintain security, prevent misuse, and protect our community;
• Maintain business and payment records and comply with legal, accounting, and tax obligations;
• Operate and improve Heala’s services.

We do not use your information for behavioral advertising, profiling, targeted advertising, or third-party analytics.

Newsletter and Emails

You can subscribe to Heala’s newsletter by affirmatively signing up on the site. You can unsubscribe at any time using the unsubscribe link in any marketing email.

Even if you unsubscribe from marketing emails, we may still send you transactional and service communications that are necessary to operate your account or fulfill your reservation — for example, purchase confirmations, refund updates, waitlist notifications, and event changes. Unsubscribing from marketing does not delete your transaction or event records.

Who We Share Information With

We share information only with the people and providers needed to operate Heala’s services:

• Paddle, for payment processing and Merchant of Record functions such as billing, tax, and transaction support.
• Lovable and its underlying hosting and cloud infrastructure, as applicable, for website hosting and operation.
• Supabase / Lovable Cloud, for database and authentication infrastructure.
• Email-delivery infrastructure used by Lovable, including Mailgun where applicable, to send transactional and marketing emails.
• Google, only when you choose Google sign-in, to authenticate you and provide basic account information.
• Professional advisers or authorities, where reasonably necessary or legally required, such as for legal, accounting, or tax advice or in response to valid legal process.

We do not share your information with analytics providers, advertising networks, data brokers, or customer-support platforms. Heala does not sell personal information.

Cookies and Similar Technologies

Heala does not use advertising or analytics cookies. The site uses limited browser storage that is necessary or useful for basic functionality, such as keeping you signed in, remembering that the newsletter prompt has been shown, and preserving basic site behavior.

Third-party services such as Paddle may use their own cookies or similar technologies when you interact with their checkout or services. Those third-party practices are governed by their own policies.

Event Photography

Photography or video may take place at Heala gatherings. Event photographs may appear on Heala’s website, social media, or other promotional channels. Consistent with our Terms & Conditions, if you do not want to appear in identifiable promotional content, you may tell us before or during the event, and we will make reasonable efforts to accommodate your request. We do not currently store photography-consent preferences through the website.

Sensitive Information

Heala does not ask attendees to state their religious beliefs as part of ordinary registration, and we do not collect health, allergy, accessibility, or waiver information through the site. Participation in events that are explicitly Jewish in nature could, however, reveal or permit inferences about religious interests or affiliation. Event-specific waivers may be used separately in the future.

Data Retention

We retain information for as long as reasonably necessary for the purposes described in this notice, including providing our services, maintaining transaction, refund, and event records, resolving disputes, maintaining security, and meeting legal, accounting, and tax obligations.

You may contact hello@heala.house to ask about deletion of your personal information. We will evaluate such requests subject to information we need or are legally permitted or required to retain.

Privacy Choices and Requests

You may contact hello@heala.house to ask about, access, correct, or request deletion of the personal information Heala holds about you, subject to applicable law and legitimate record-retention requirements. You may also unsubscribe from marketing emails at any time using the unsubscribe link in those emails.

Depending on where you live, applicable law may provide additional privacy rights. We do not promise a specific response deadline where the law does not require one.

Security

We use reasonable technical and organizational safeguards to protect the information we collect, including encryption in transit and access controls. No online service can guarantee perfect security.

Changes and Contact

We may update this Privacy Notice from time to time. The current version and its effective date will be posted on this page.

Privacy questions and requests should be sent to hello@heala.house.