📜 Terms of Service

§ 7 — INTELLECTUAL PROPERTY, COPYRIGHT AND TRADEMARKS

We respect intellectual property rights and ask that you do the same.

All content, software, images, text, graphics, logos, patents, trademarks, service marks, copyrights, photographs, audio, video and the entire "look and feel" of the Services, as well as all associated intellectual property rights (the "Platform Content"), belong to Heartbeat Pakistan or are licensed to Heartbeat Pakistan. Use of Platform Content for purposes not expressly permitted by these Terms is strictly prohibited.

Trademarks: The name "Heartbeat Pakistan", the app logo, the app icon and all associated identifying marks are trademarks of Heartbeat Pakistan. The use, imitation or reproduction of these trademarks without our express written permission is prohibited.

Copyright: All content created by us, including text, designs, graphics, code, animations and audiovisual material, is protected by copyright. Any unauthorized reproduction, distribution, modification or making available to the public is prohibited and may have legal consequences.

Reporting copyright infringements: If you believe that content on our platform infringes your copyright, you may report this using the reporting function in the app or by email to support@heartbeatpakistan.com. We will review the reported content and remove it if an infringement is confirmed.

We reserve the right to suspend or terminate the accounts of users who repeatedly infringe the copyright, trademarks or other intellectual property rights of third parties.

§ 8 — USER CONTENT AND GRANT OF LICENSE

You retain all ownership rights in the content that you create and share via the platform ("User Content").

By uploading or publishing User Content, you grant Heartbeat Pakistan a non-exclusive, royalty-free, worldwide license to use, display, reproduce, distribute and make your User Content publicly available — exclusively for the purpose of operating, providing and improving the Services.

Important: This license applies for the duration of your use of the account and terminates automatically when you:

• delete the relevant content — the license for that content ends immediately,
• delete your account — the license for all of your content ends after the 90-day deletion period.

Exception: Content that was shared, quoted or sent in group chats by other users prior to deletion may continue to exist in anonymized form, since Heartbeat Pakistan has no control over copies that have already been distributed.

You are solely responsible for all content that you create, upload, publish or share via the platform. You confirm that you hold all necessary rights in the content and that the content does not infringe any third-party rights.

Heartbeat Pakistan is a hosting service within the meaning of the Digital Services Act (DSA / Regulation (EU) 2022/2065). We do not proactively monitor user-generated content and are not liable for user-generated content as long as we have no actual knowledge of illegal content. Upon obtaining knowledge, we will act without delay and remove illegal content (notice and takedown).

Users may report illegal content at any time using the reporting function in the app.

§ 9 — MUSIC IN POSTS AND STORIES

The platform integrates music services (Deezer, MusicBrainz, Saavn) so that you can add music to your posts and stories.

• Use: Music is provided exclusively for use within the platform. Downloading, extracting or using the music externally is prohibited.
• Availability: Music may be removed without prior notice if the respective service so requires.
• Copyright: The rights to the music remain with the respective rights holder. Heartbeat Pakistan grants no license for the independent use of the music outside the platform.

§ 10 — PERMISSIONS AND CONSENTS

Heartbeat Pakistan always requests your explicit consent before accessing device functions:

• Camera — for photos, videos, stories, live streams
• Microphone — for voice messages, calls, live streams, Community Rooms
• Photo library / gallery — for uploading images and videos
• Location — for the map feature and location sharing (optional)
• Push notifications — for messages, likes, comments, friend requests
• Voice input (speech recognition) — for the dictation function when creating posts. Speech processing is carried out by your device's operating system, not directly by Heartbeat Pakistan.
• Biometric data — for the optional app lock and chat lock (Face ID / Touch ID / fingerprint). Biometric data is processed only by the operating system, not by us (see Privacy Policy § 12).

Following your first sign-in or registration, you will be asked once to grant all of the device permissions listed above (with the exception of biometrics). You may decline individual permissions or skip the entire request. Declined permissions can be granted subsequently at any time in your device settings. Each permission can be revoked individually in your device's system settings.

App security (freeRASP): Heartbeat Pakistan uses freeRASP (Runtime Application Self-Protection) to protect against tampering, rooting/jailbreaking, debugger attacks, hooking frameworks (Frida/Xposed) and unofficial app stores. Detected threats are logged in anonymized form. No personal data is collected by freeRASP (see Privacy Policy).

§ 11 — COMMUNITY GUIDELINES AND CODE OF CONDUCT

🗽 OUR COMMITMENT TO FREEDOM OF EXPRESSION

Heartbeat Pakistan stands for the fundamental right to freedom of expression. We believe that everyone has the right to share their thoughts, opinions and beliefs freely — as long as the dignity of others is respected.

We do not censor content because it is inconvenient, controversial or critical. We remove content only in cases of clear violations of applicable law or of the following community guidelines.

No shadowbanning: Your posts will never be secretly hidden or restricted in their reach. If content is removed, you will always be informed and given an explanation.

The following rules of conduct apply to all content and interactions on the platform — including posts, virals, stories, comments, polls, chat messages, live streams, Community Rooms, profile information and usernames.

🚫 PROHIBITED — ZERO TOLERANCE (immediate suspension possible):

• Child sexual abuse material (CSAM) — Any depiction, distribution, promotion or glorification of sexual violence against or exploitation of minors. This will be reported immediately and forwarded to the competent authorities.
• Terrorism and extremism — Propaganda, glorification, recruitment or financing of terrorist organizations and violent extremist groups.
• Human trafficking and exploitation — Offering, advertising or facilitating human trafficking, forced labor or sexual exploitation.

🔴 PROHIBITED — Violations lead to a warning or suspension:

• Hate speech and discrimination — Content that incites hatred, violence or discrimination against persons or groups on the basis of ethnicity, origin, religion, gender, sexual orientation, disability, age or nationality. Note: Objective criticism of ideologies, religions, political systems or social practices is permitted and protected.
• Violence and threats — Specific threats of violence, calls for violence, depictions of real violence (except for educational or documentary purposes with appropriate labeling).
• Pornography and sexually explicit content — Sexually explicit depictions, nudity for sexual purposes, non-consensually shared intimate images ("revenge porn").
• Bullying, harassment and stalking — Repeated targeted harassment, intimidation, doxxing (publication of private information) or cyberstalking.
• Fraud and deception — Phishing, scams, fraudulent offers, identity theft, impersonation of other persons.
• Self-harm and suicide — Content that glorifies, instructs in or promotes self-harm, eating disorders or suicide. Note: Sharing personal experiences and seeking help is permitted and encouraged.
• Illegal activities — Content that promotes or facilitates the sale, purchase or manufacture of illegal substances, weapons or other illegal goods.
• Spam and manipulation — Mass unsolicited messages, botting, fake engagement, manipulation of the Coins system or of the feed algorithm.
• Harmful misinformation — Deliberately false information that poses an immediate danger to health, public safety or democratic processes (e.g. false medical treatment instructions, election manipulation). Note: Opinions, satire, political positions and the questioning of official accounts are not misinformation and are protected.
• Copyright infringements — Repeated uploading of third-party copyrighted content without permission.

✅ EXPRESSLY PERMITTED AND PROTECTED:

• Political opinions and positions — of any persuasion
• Objective criticism of governments, institutions, religions, ideologies and social practices
• Satire, parody and humorous content
• Journalistic reporting and documentation (including of conflicts and violence, with labeling)
• Scientific discussions and debates
• Personal accounts of experience (including on sensitive topics)
• Cultural and religious content
• Artistic forms of expression (including controversial ones)

Moderation: Reported content is reviewed manually by our team. We currently do not use automated content moderation or AI-based filtering. All moderation decisions are made by humans.

Appeals: You may appeal against any moderation decision (see § 12).

§ 12 — RULE VIOLATIONS, WARNINGS, SUSPENSION AND TERMINATION

We use a graduated and fair system:

1. First warning — Notification of the violation with an explanation. The content concerned may be removed.

2. Second warning — A further warning with an indication of possible consequences.

3. Third warning → 24-hour suspension — Temporary suspension of the account.

4. Further violation → 7-day suspension.

5. Repeated violation → Permanent termination of the account.

Monthly reset: Warnings are reset at the beginning of each calendar month. We believe that people learn from their mistakes and we give everyone a fair second chance.

Exception: In the case of particularly serious violations (CSAM, terrorism, human trafficking), immediate permanent termination may occur without prior warnings.

Right of appeal: You may appeal against any warning, suspension or termination:

• In the app: Settings → Help & Support → Appeal
• By email: support@heartbeatpakistan.com

We review each appeal individually and respond within 30 days. During the review, the decision remains in force unless we determine that it was manifestly erroneous.

§ 13 — DELETING YOUR ACCOUNT

You may close your account at any time in the app settings under "Account → Delete account".

What happens when you delete your account:

• All of your data will be removed from our active systems within 90 days, unless statutory retention obligations exist.
• All accumulated Coins will be irrevocably deleted.
• All of your posts, virals, stories, comments, polls and profile information will be deleted.
• Your chat messages will be deleted (copies held by other participants may be retained).
• Your Public Profile and all associated analytics will be deleted.
• Content that has already been shared or quoted by other users may continue to exist in anonymized form.

Security confirmation: Before your account is finally deleted, you will be asked to read the Terms of Service and the Privacy Policy again and to confirm expressly that you consent to the deletion. Account deletion can only be carried out if you have given this consent. This renewed confirmation serves your protection and ensures that you are fully informed about the consequences of account deletion.

§ 14 — INDEMNIFICATION

You undertake to indemnify and hold harmless Heartbeat Pakistan, its employees, representatives and partners against all claims, costs and damages (including reasonable attorneys' fees) arising from:

• a breach of these Terms on your part,
• the infringement of third-party rights by your User Content,
• your use of the Services in an unauthorized manner.

This clause does not apply to the extent that it is unenforceable under the applicable law of your country of residence (see Part B for country-specific provisions).

§ 15 — DISCLAIMER OF WARRANTIES

The Services are provided "as is" and "as available", and we give you no express or implied representation or warranty in respect of them.

In particular, we do not guarantee that:

• the Services will be available without interruption, securely or free of errors,
• the Services are free of viruses or other harmful components,
• the results obtained through use of the Services are accurate or reliable,
• particular features will remain permanently available.

You use the Services at your own risk. This clause does not apply to the extent that mandatory consumer protection law in your country of residence grants more extensive rights (see Part B).

§ 16 — LIMITATION OF LIABILITY

To the extent permitted by law, Heartbeat Pakistan is not liable for: lost profits, loss of data, indirect damages, consequential damages or special damages arising from the use of or the inability to use our Services.

In particular, Heartbeat Pakistan is not liable for:

• Content created, uploaded or shared by users
• The conduct of other users on or outside the platform
• Disputes between users
• The loss of User Content, Coins or other virtual items
• Interruptions, delays or outages of the Services
• Unauthorized access to your account due to insufficient password security on your part
• Damages caused by third-party services (e.g. Giphy, Deezer, Google, Cloudflare)
• Content, listings, contacts, agreements, purchases, sales or other transactions in the Sale & Purchase (classified listings) area between users — including fraud, deception, non-performance and disputes

Our total liability is in every case limited to the amount you have paid us in the last 12 months (or zero if you have made no payments). This limitation does not apply to the extent that mandatory law in your country of residence provides otherwise.

§ 17 — CHAT MESSAGES AND DATA STORAGE

Private chat messages are stored in Firebase Firestore (Google LLC, USA) and transmitted encrypted via TLS 1.2+. Messages are held on the Firebase servers in plain text.

What you need to know:

• Messages are not end-to-end encrypted. Heartbeat Pakistan and Firebase, as infrastructure service providers, have technical access to message content.
• The optional chat lock (PIN or biometrics) protects access to your chats on your device — not at server level.
• Old messages from the E2EE phase (prior to May 2026) are displayed as "[Old encrypted message — no longer readable]".
• You can find details of Firebase processing in our Privacy Policy § 8.

Your responsibility: The chat lock protects your messages at device level. It does not protect against screenshots, forwarding or unauthorized access to your account.

§ 18 — LIVE STREAMING, COMMUNITY ROOMS AND CALLS

Live streaming:

• All community guidelines (§ 11) apply to live streams in real time.
• Violations during a live stream may result in the immediate termination of the stream and in warnings/suspensions.
• You are responsible for all content shown during your live stream.
• Live streams are publicly accessible by default.

Community Rooms (audio and video group rooms):

• The creator of a Community Room may activate the recording function. All participants are informed when a recording is active.
• By entering a room in which recording is active, you consent to the recording. If you do not wish to be recorded, leave the room.
• The community guidelines also apply in Community Rooms.

Audio and video calls:

• Calls (audio and video) are transmitted via the real-time communication infrastructure of Agora (Agora.io, Inc., USA). Audio and video data is routed through Agora's global servers in order to ensure reliable connection quality even under varying network conditions.
• Heartbeat Pakistan has no access to the content (audio/video) of calls. Agora processes exclusively the data technically necessary for establishing the connection and for connection quality.
• You can find detailed information about data processing by Agora in our Privacy Policy § 8.

§ 19 — PUBLIC PROFILES

Users may create a public profile in order to produce content for a wider community.

• Public content: Content from Public Profiles is public by default and can be seen by any user (even without a friendship).
• Followers: Other users may subscribe to ("follow") Public Profiles without sending a friend request.
• Analytics: Public Profiles have access to internal statistics (likes, views, comments, follower development, daily statistics). This data is not disclosed to third parties.
• Responsibility: Public Profiles bear the same responsibility for their content as all other users. The community guidelines (§ 11) apply without restriction.
• No employment relationship: Creating a Public Profile does not establish any employment, service or contractual relationship with Heartbeat Pakistan.

§ 20 — MISCELLANEOUS PROVISIONS

a. Entire agreement — These Terms, together with the Privacy Policy and the Community Guidelines, constitute the entire agreement between you and Heartbeat Pakistan.

b. No waiver — Our failure to exercise a right under these Terms does not constitute a waiver of that right.

c. Security — We take appropriate technical and organizational measures to protect the Services, but do not guarantee that they are free of errors or security vulnerabilities.

d. Severability — Should any provision of these Terms be invalid, the remaining provisions shall remain unaffected. The invalid provision shall be replaced by a valid provision that comes closest to the economic purpose.

e. Assignment — You may not assign these Terms or any rights under them without our consent. We may assign our rights and obligations in the course of a corporate restructuring.

f. Account inactivity — We may reclaim (i.e. release) your username after 6 months of inactivity. Before release, you will be notified by email and given 30 days to log in.

g. Force majeure — Heartbeat Pakistan is not liable for delays or outages caused by circumstances beyond our reasonable control (e.g. natural disasters, war, pandemic, power outages, failure of third-party cloud services).

§ 21 — 🇪🇺 EU/EEA — DIGITAL SERVICES ACT & CONSUMER RIGHTS

Digital Services Act (DSA): Heartbeat Pakistan is a hosting service within the meaning of Regulation (EU) 2022/2065. We are obliged:

• To provide a notice and action mechanism for illegal content (reporting function in the app).
• To inform users about moderation decisions and to provide options for appeal.
• To publish an annual transparency report on moderation measures.
• To cooperate with national authorities in combating illegal content.

EU right of withdrawal: If, as an EU consumer, you enter into a paid offer (none currently available), you have a 14-day right of withdrawal pursuant to the Consumer Rights Directive 2011/83/EU. Since Heartbeat Pakistan is currently free of charge and does not offer any paid transactions, no right of withdrawal currently exists.

Warranty: The consumer protection laws of your EU Member State may grant you more extensive rights than those set out in § 15. These remain unaffected.

Online dispute resolution: The European Commission provides an online dispute resolution (ODR) platform: https://ec.europa.eu/consumers/odr. We are currently neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration body.

Applicable law: For consumers in the EU, the law of their habitual residence applies to the extent required by mandatory consumer protection law (Art. 6(2) of the Rome I Regulation).

§ 22 — 🇬🇧 UNITED KINGDOM — ONLINE SAFETY ACT & CONSUMER RIGHTS ACT

Online Safety Act 2023: We undertake to take appropriate measures to protect users from illegal content and to enforce our community guidelines.

Consumer Rights Act 2015: The provisions of the Consumer Rights Act 2015 apply to consumers in the United Kingdom. Digital content and services must be of satisfactory quality, fit for the intended purpose and as described.

Applicable law: English law applies to UK consumers, without prejudice to mandatory consumer protection provisions.

§ 23 — 🇨🇭 SWITZERLAND

For users in Switzerland, the provisions of the Swiss Code of Obligations (OR) apply in addition. Mandatory consumer protection provisions of Swiss law remain unaffected.

Applicable law: Swiss law, to the extent mandatory.

§ 24 — 🇹🇷 TURKEY

E-Commerce Law No. 6563: We provide the information required under Turkish e-commerce law.

Consumer Protection Law No. 6502: The provisions of the Turkish Consumer Protection Law apply to consumers in Turkey. Mandatory consumer rights remain unaffected.

Internet Law No. 5651: We cooperate with Turkish authorities in the case of lawful requests pursuant to Law No. 5651 on the Regulation of Publications on the Internet.

Minimum age: 18 years. Turkish child protection law is complied with.

§ 25 — 🇸🇦🇦🇪🇶🇦 ARAB COUNTRIES

Content moderation: Content that violates local laws (e.g. blasphemy laws, public morality laws) may be restricted in your region by order of the competent authorities.

Data processing: Your data may be processed in accordance with the applicable local data protection laws (e.g. the PDPL of Saudi Arabia, the UAE data protection law, Qatar Law No. 13/2016).

§ 26 — 🇵🇰 PAKISTAN

PECA (Prevention of Electronic Crimes Act 2016): We cooperate with Pakistani authorities in the case of lawful requests pursuant to PECA.

Content moderation: Content that violates Pakistani law is removed upon obtaining knowledge of it.

PTA (Pakistan Telecommunication Authority): We respond to lawful requests from the PTA.

Minimum age: 18 years. The Punjab Child Protection Welfare Bureau Act and similar laws are observed.

§ 27 — 🇦🇫 AFGHANISTAN

For users in Afghanistan, local laws and regulations are observed as far as possible. The community guidelines (§ 11) apply without restriction.

Minimum age: 18 years.

§ 28 — 🇮🇳 INDIA

DPDPA (Digital Personal Data Protection Act, 2023): For users in India, we comply with the provisions of the DPDPA. You can find details of your data protection rights in our Privacy Policy.

IT Act (Information Technology Act, 2000): We comply with the applicable provisions of the IT Act.

IT Rules 2021: We meet the requirements for intermediaries under the IT Rules 2021 (Intermediary Guidelines).

Minimum age: 18 years (in accordance with the DPDPA requirements).

§ 29 — 🇺🇸 USA

COPPA (Children's Online Privacy Protection Act): Heartbeat Pakistan is not directed at children under 13 years of age. Our minimum age is 18.

CCPA/CPRA (California Consumer Privacy Act): California residents can find detailed information on privacy rights in our Privacy Policy.

Section 230 (Communications Decency Act): As a hosting service, we are not liable for user-generated content pursuant to Section 230.

Applicable law: For users in the USA, the law of the state in which you have your residence applies, unless these Terms provide otherwise.

§ 30 — 🇨🇦 CANADA

PIPEDA (Personal Information Protection and Electronic Documents Act): For users in Canada, we comply with PIPEDA. You can find details in our Privacy Policy.

CASL (Canadian Anti-Spam Legislation): We send push notifications only with your explicit consent. You may deactivate them at any time.

Applicable law: Canadian law, subject to mandatory provincial consumer protection laws.

§ 31 — 🇦🇺 AUSTRALIA

Privacy Act 1988 & APPs: For users in Australia, the Australian Privacy Principles (APPs) apply. You can find details in our Privacy Policy.

Online Safety Act 2021: We meet the requirements of the Australian Online Safety Act.

Consumer Law (ACL): For Australian consumers, the guarantees of the Australian Consumer Law apply. These cannot be excluded.

Applicable law: Australian law, subject to mandatory consumer protection provisions.

§ 32 — 🇮🇷 IRAN

For users in Iran, local laws and regulations apply to the extent applicable. The community guidelines (§ 11) apply without restriction.

Minimum age: 18 years.

Note: Use of Heartbeat Pakistan in Iran is subject to local internet regulations. Use is at your own responsibility.

§ 33 — 🇷🇺 RUSSIA

Federal Law No. 149-FZ "On Information": We cooperate with Russian authorities in the case of lawful requests.

Federal Law No. 152-FZ "On Personal Data": You can find details on data protection in our Privacy Policy.

Content moderation: Content that violates Russian law is removed upon obtaining knowledge of it.

Minimum age: 18 years.

§ 34 — 🇧🇩 BANGLADESH

Digital Security Act 2018: We cooperate with Bangladeshi authorities in the case of lawful requests.

Content moderation: Content that violates Bangladeshi law is removed upon obtaining knowledge of it.

BTRC (Bangladesh Telecommunication Regulatory Commission): We respond to lawful requests from the BTRC.

Minimum age: 18 years.

§ 35 — 🇮🇩 INDONESIA

UU ITE (Undang-Undang Informasi dan Transaksi Elektronik): We comply with the provisions of the UU ITE.

UU PDP (Data Protection Law No. 27/2022): You can find details on data protection in our Privacy Policy.

Content moderation: We respond to instructions from the Ministry of Communication and Informatics (Kominfo).

Minimum age: 18 years.

§ 36 — 🇺🇿🇹🇯🇹🇲🇰🇬🇰🇿 CENTRAL ASIA (Uzbekistan, Tajikistan, Turkmenistan, Kyrgyzstan, Kazakhstan)

For users in Central Asia, the respective national laws apply to the extent applicable. The community guidelines (§ 11) apply without restriction.

Data processing: Your data is processed in accordance with the applicable local data protection laws (see Privacy Policy).

Minimum age: 18 years.

§ 37 — 🇲🇾 MALAYSIA

PDPA 2010 (Personal Data Protection Act): For users in Malaysia, the provisions of the PDPA apply. You can find details in our Privacy Policy.

Communications and Multimedia Act 1998 (CMA): We comply with the CMA and respond to lawful requests from the Malaysian Communications and Multimedia Commission (MCMC).

Content moderation: Content that violates Malaysian law is removed upon obtaining knowledge of it.

Minimum age: 18 years.

§ 38 — 🇧🇾 BELARUS

Law No. 99-Z "On the Protection of Personal Data" (2021): For users in Belarus, the provisions of this law apply. You can find details in our Privacy Policy.

Content moderation: Content that violates Belarusian law is removed upon obtaining knowledge of it.

Minimum age: 18 years.

§ 39 — APPLICABLE LAW

Unless stated otherwise in Part B for your region, these Terms are subject to the law of your country of habitual residence, to the extent that mandatory consumer protection provisions so require.

The courts of your place of habitual residence have jurisdiction over disputes arising from these Terms, unless mandatory law provides otherwise.

§ 40 — CONTACT

If you have questions or concerns, please use our Help & Support function:

In-app: Settings → About & Help → Help & Support

Reports of illegal content pursuant to the Digital Services Act can be submitted using the reporting function in the app.

Processing time for requests: 30 days.

All content of these Terms of Service is copyright-protected property of Heartbeat Pakistan. The name "Heartbeat Pakistan", the app logo and all associated identifying marks are trademarks of Heartbeat Pakistan.

Last updated: August 22, 2026

© 2026 Schwaben Apps / Heartbeat Pakistan. All rights reserved.