Privacy Policy

1. Who We Are

Loventide ("we", "us", "our") is an independent mobile application for romantic couples. For privacy inquiries, contact us at support@loventide.app.

2. Data We Collect

We collect only what is necessary to operate the app:

• Account data: email address, encrypted password (managed by Supabase Auth), display name, timezone, and avatar configuration.
• Profile & preference data: love language, relationship start date, mood check-ins, notification preferences, and app settings you configure.
• Content you create: journal entries, letters (including time-capsule letters), voice notes, photos and videos uploaded to Memories, quiz answers, date ideas you mark as done, and daily question answers.
• Couple & connection data: your couple pairing code, your partner's display name, and shared activity signals (e.g., which tab each partner is viewing — only when you opt in).
• Push notification tokens: device push token registered via Expo, used solely to deliver in-app notifications from your partner.
• Purchase & subscription data: subscription status and in-app purchase records managed by RevenueCat. We do not store raw payment card details.
• Device & usage data: crash reports and diagnostic data collected by Sentry (crash reporting). These are never linked to your content.

3. How We Use Your Data

• To create and maintain your account and couple relationship.
• To deliver your content (letters, voice notes, pulses) to your partner.
• To send push notifications you have enabled.
• To process subscription purchases through RevenueCat.
• To diagnose crashes and improve app quality using anonymised reports.
• To analyse aggregate feature usage so we can prioritise improvements.

We do not use your personal content (journal text, letters, voice notes) for training AI models, advertising, or any purpose other than delivering it to your partner.

4. Data Storage & Location

Your data is stored in Supabase (database and file storage), which is hosted on AWS infrastructure in the United States. Media files (photos, videos, voice notes) are stored in Supabase Storage (Cloudflare R2 or AWS S3 depending on your region). By using Loventide you consent to your data being transferred to and processed in the United States.

5. Data Sharing

We share your data only with the following sub-processors, each under a privacy agreement:

• Supabase Inc. — database, authentication, and file storage. (supabase.com/privacy)
• Expo (Expo Inc.) — push notification delivery and app build infrastructure. (expo.dev/privacy)
• RevenueCat Inc. — subscription and in-app purchase management. (revenuecat.com/privacy)
• Sentry (Functional Software, Inc.) — crash reporting and error monitoring. (sentry.io/privacy)

We do not sell, rent, or trade your personal information to third parties.

6. Data Retention

We retain your account data and content for as long as your account is active. If you delete your account, your account, profile, and personal data are permanently deleted from our systems within 30 days. Some residual data may remain in automated backups for up to 90 days before being purged.

Shared keepsakes after a relationship ends or an account is deleted. When a couple unlinks, each of you keeps a private, read-only copy of only the content you yourself created — your letters, voice notes, photos, and journal entries — in your own personal Vault. You each leave with what you created: nothing your partner authored stays with you, and nothing you authored stays with them. If you delete your account, everything you created is permanently erased everywhere, including from your former partner's Vault. Vaulted items are retained for 30 days for everyone, and beyond that only for users with an active premium subscription; otherwise they are purged.

7. Your Rights & Choices

You have the right to:

• Access: Request a copy of the data we hold about you.
• Correction: Update your account information directly in the app (Profile tab).
• Deletion: Delete your account at any time from Profile → Delete account. This permanently removes your account, your personal data, and all content you created — everywhere, including your former partner's Vault. Your former partner keeps only the content they themselves created.
• Portability: Request an export of your data by emailing us.
• Object / Restrict: Contact us to restrict certain processing of your data.

To exercise any of these rights, email support@loventide.app.

If you are in the EEA/UK, you may also lodge a complaint with your local data protection authority.

8. Children's Privacy

Loventide is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us immediately and we will delete it.

9. Security

We use industry-standard security measures including TLS encryption in transit, row-level security (RLS) in our database so each user can access only their own data, and hashed passwords managed by Supabase Auth. No method of transmission over the internet is 100% secure; if you have a security concern please contact us.

10. Cookies & Tracking

Loventide is a native mobile app and does not use browser cookies, advertising identifiers, or third-party analytics trackers.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via a push notification or in-app notice. The "Effective date" at the top of this page will always reflect the date of the most recent revision.

12. Contact

For any privacy questions or data requests, email us at support@loventide.app.