Heimdall

Terms of Service

Last updated: 23 July 2026

Draft — pending legal review. This page describes how the service is intended to work, but has not yet been reviewed by a lawyer and is not a final, binding agreement. Don't rely on it as legal advice, and don't treat it as final until this notice is removed.

1. What Heimdall is

Heimdall ("we", "us") lets you create and run your own isolated data collection platform ("your platform"), provisioned on request and billed as its own subscription. These Terms govern your use of the Heimdall account and control-plane service (this app) and, by extension, any platform you provision through it.

2. Your account

You sign in using a passkey (WebAuthn) rather than a password. You're responsible for keeping access to your own passkey-capable devices. You must provide accurate information when creating an account and keep it up to date.

3. Your platform and your data

Data you or your platform's members enter belongs to you. We don't claim ownership over it, and we don't use it for any purpose beyond operating and supporting the service you've asked for. You can export your platform's data at any time from your account, and you're responsible for having a lawful basis to collect and hold any personal or health information your platform captures.

4. Subscriptions and billing

Each platform you spin up is billed independently through Stripe as its own subscription. Destroying a platform cancels that platform's subscription only — it has no effect on any other platform you run. Pricing and billing cadence are shown to you before you provision a platform.

5. Acceptable use

You agree not to use Heimdall or any platform provisioned through it to:

  • Break any applicable law, including health-privacy and data-protection law;
  • Attempt to access another customer's platform, account, or data without authorisation;
  • Interfere with or disrupt the service, or attempt to bypass its rate limiting or abuse protections;
  • Use the service to collect data you don't have a lawful basis to collect.

6. Suspension and termination

You can destroy your own platform, or delete your account, at any time. We may suspend or terminate access for a breach of these Terms, non-payment, or where required by law, and we'll make a reasonable effort to give you notice and a chance to export your data first, except where we're legally prevented from doing so.

7. Service availability

We take reasonable steps to keep the service available and your data backed up (see our FAQ for specifics), but the service is provided without a guarantee of uninterrupted availability. We'll aim to give advance notice of planned maintenance that could cause downtime.

8. Changes to these Terms

We may update these Terms from time to time. We'll post the updated version here with a new "last updated" date, and for material changes we'll make a reasonable effort to notify you directly.

9. Contact

Questions about these Terms can be raised from your account page.