By downloading or using Heirline (the "App"), you agree to these Terms of Service. If you do not agree, do not use the App. The App is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F); references to "we," "us," and "our" mean that developer.
Heirline is a personal records organizer for watch collectors. You enter information about watches you own; the App helps you organize service histories, box-and-papers entries, valuation records, estate letters, journal notes, and document attachments, and generate PDF reports for your own use.
The App is free to download and use with the following limits: 1 watch (with full specifications, provenance, and notes), 1 service record per watch, and a Markdown summary export per watch. The Face ID / Touch ID app lock, Recently Deleted (30-day recovery), and optional iCloud sync (to your own private iCloud account) are also available on the free tier. The free tier does not include Box-and-Papers, Valuations, Estate Transition, Documents, PDF reports, or Wrist Journal.
The paid options in Heirline unlock the same Pro feature set:
Before you confirm payment, Apple displays the product, current localized price, billing period and any eligible introductory offer. Apple's confirmation controls the purchase terms. Older installed versions may show earlier purchase options; payment is processed by Apple.
Existing Monthly subscriptions. Monthly is no longer offered to new purchasers. Heirline continues to recognize verified, active historical Monthly entitlements. Changing the available purchase options does not cancel or convert an existing subscription; manage it in your Apple Account settings.
A Lifetime purchase grants Heirline Pro access without a scheduled subscription expiry. A refunded or revoked purchase no longer provides access. Use Restore Purchases with the Apple Account used for purchase to recheck a restorable Lifetime entitlement.
The subscription renews automatically unless canceled. Apple may charge for renewal within 24 hours before the current period ends. To prevent the next charge, cancel at least 24 hours before the period or trial ends. Manage or cancel in iPhone Settings > [your name] > Subscriptions; Apple provides cancellation instructions. Deleting Heirline does not cancel a subscription.
Use Restore Purchases while signed into the purchasing Apple Account to check verified eligible access. Pending or unverified transactions do not establish paid access. Refund requests are handled through Apple under its policies and applicable law. Nothing here limits non-waivable consumer rights.
A free trial or introductory price applies only when Apple confirms eligibility and displays the offer at purchase. The purchase sheet specifies the duration and the price charged afterward. An eligible trial converts to the displayed paid subscription unless canceled in time. Access after cancellation follows Apple's applicable terms. Lifetime purchases do not automatically renew and are not subscription trials.
Private iCloud synchronization is enabled by default for Free and Pro users when no earlier preference exists and Apple can open the private cloud store. The current onboarding does not ask for a separate sync opt-in. You can turn sync off in Settings > Sync and follow the app's restart guidance. Sync may fall back to local storage when unavailable. It is separate from Apple device backup and is not a guarantee against data loss. Existing cloud copies are not erased by switching sync off; manage them in your Apple Account storage settings.
Device-backup contents and recovery depend on your system settings, a successfully completed usable backup and Apple’s restoration process; enabling backup alone does not guarantee recovery of every record or original file. We cannot retrieve or restore your device backups.
Supported records use a Recently Deleted window of up to 30 days, subject to the retained-record, parent-deletion and file limits below. Keep independent copies of important records and files.
Pro provides the following features. The behavior described here is binding on us — if a future App update materially changes any of these descriptions, we will revise this section.
The following capabilities are available to all users (Free and Pro alike), included to honor the privacy and data-portability commitments above:
The App is provided "AS IS" and "AS AVAILABLE" without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy, or non-infringement. To the maximum extent permitted by law, our aggregate liability arising out of or relating to the App is limited to the amount you paid us, through Apple, for the App in the twelve months preceding the claim. We are not liable for indirect, incidental, special, consequential, or punitive damages, including lost data, lost insurance recoveries, lost market value, disputed authenticity, or estate disputes. Reports generated by the App are tools for your use; we do not guarantee that any insurance carrier, appraiser, dealer, auction house, or court will accept them.
Your use of the App is also governed by Apple's standard End User License Agreement (EULA) for licensed applications, available at https://www.apple.com/legal/internet-services/itunes/dev/stdeula/. In the event of a conflict between these Terms and the Apple EULA, these Terms govern as between you and us; the Apple EULA governs as between you and Apple.
We may update these Terms from time to time. Material changes will be surfaced in the App on next launch. Continued use of the App after a change constitutes acceptance.
These Terms are governed by the laws of the United States and the State of California, without regard to conflict-of-law principles. Disputes will be resolved in courts located in California, except that either party may seek injunctive relief in any court of competent jurisdiction to protect intellectual property rights.
Recently Deleted marks original records with a deletion date for up to 30 days; it does not serialize a complete collection backup. Restoring clears the selected record's deletion marker. Restoring a watch makes only its still-retained, non-deleted children available; it does not restore separately deleted children or missing files. Permanent watch deletion, including expiry purge, cascades to service, box-and-papers, valuation, estate, document and journal records even if a child has time left in its own recovery window. Permanent deletion saves business-record removal and removal of unshared StoredAttachment payload rows together before deleting local cache files. Multi-page document manifests and retained references are checked; unverifiable references postpone deletion. Shared attachments remain while another record still uses them. A local filename-only cleanup journal is prepared before the database change. After a successful save, cleanup checks saved references in a separate database context and removes only queued, unreferenced files. Files still referenced by other records or retained deletion snapshots are kept. Failed cleanup is retried during normal App startup and through Retry attachment cleanup; unreadable references or journal data postpone removal. This is not guaranteed immediate or secure erasure and does not scan unknown older files. If a discarded new file cannot be added to the journal, its name is retained only in memory for retry while the App stays open; interruption can leave an untracked draft file.
Unreferenced synchronized assets keep the existing seven-day observation period before orphan cleanup; a failed save does not advance completion. With iCloud sync enabled, deletion propagation depends on Apple and device connectivity. A local commit is not confirmation that every device or cloud copy has been erased. Exports and older backups remain separate.
Support and legal inquiries: captainlongevity@gmail.com
Older installed versions may use different save or cleanup ordering and may not offer these retry controls.
The updated first-watch setup checks the database save before setting the onboarding-complete preference or moving to the normal collection. If saving fails, the current brand, model, reference, serial and optional year entries stay in the open setup form for retry; the failed attempt does not leave a duplicate watch. An entered nonempty year must be a complete integer before saving. These setup entries are temporary form memory, not a restart-proof draft or complete backup. A successful local save is not confirmation of completed iCloud propagation when sync is enabled. Updating the app preserves your existing collection records and your sync and purchase preferences.