lovebitsPrivacy Policy
LoveBits is built around private conversations between two people, so we treat your data with care. In short:
- Your answers only go to your partner, and only after you've both answered.
- Your data is stored in the EU.
- We never sell your data, there are no ads, and we never use your answers to train AI.
1. Who is responsible
LoveBits · Contact: hello@lovebits.app
The team behind LoveBits is the controller of your personal data. For any privacy question or request, email hello@lovebits.app.
2. What we collect
- Account: your email address, or the identifier from Sign in with Apple or Google; your first name or nickname; and your confirmation that you're 18 or older.
- Your couple link: who your linked partner is, and when you linked.
- Your answers and content: your answers to questions, the rituals and date ideas you pick, and anything else you write in the app.
- Onboarding answers: what you tell us when you start (for example how long you've been together, what you'd like more of and when you have five minutes), so we can choose what fits you.
- Activity: streaks, which questions you've seen, and your settings, such as reminder times.
- Notifications: a push-notification token for your device, if you allow notifications.
- Purchases: whether you have Premium, which plan and its renewal status. Payment itself goes through Apple or Google; we never see your card details.
- Crash reports and usage statistics: only if you agree to them in the app. They don't contain your answers.
- Support: the emails you send us.
- Website visits (lovebits.app): we count page views and taps on the "Download on the App Store" and "Get it on Google Play" badges, without cookies. For each one we store the date and time, the page, the button (App Store or Google Play) and where it sat on the page, the referring website's domain (for example tiktok.com), campaign tags in the link (such as utm_source or src), whether you use a phone or a computer, a rough guess of the operating system, your country (worked out from your IP address by our host; we don't store the IP address) and a random ID that lives in your browser tab's session storage and disappears when you close the tab. We don't use cookies or fingerprinting, and we can't tell who you are. If your browser sends Do Not Track or Global Privacy Control, we don't count you at all.
3. Sensitive answers
Some questions, especially in the intimacy deck, can reveal something about your sex life or health. Under the GDPR this is "special category" data. We only process it with your explicit consent (Article 9(2)(a) GDPR), which you give with a separate checkbox when you create your account. You can withdraw that consent at any time in the app's settings or by emailing us. If you do, we stop processing those answers and delete them; you can keep using the rest of LoveBits.
4. Why we use it, and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Run your account and the app, link you with your partner and show answers once you've both replied | Account, couple link, answers, activity | Contract (Art. 6(1)(b)) |
| Process sensitive answers (for example the intimacy deck) | Answers that reveal sex life or health | Explicit consent (Art. 9(2)(a)) |
| Pick questions, rituals and dates that fit you | Onboarding answers, activity | Contract (Art. 6(1)(b)) |
| Send reminders and "your partner answered" notifications | Notification token, settings | Consent (Art. 6(1)(a)); turn off anytime |
| Manage Premium and shared access | Purchase status | Contract (Art. 6(1)(b)) |
| Fix crashes and improve the app | Crash reports, usage statistics | Consent (Art. 6(1)(a)) |
| Count website visits and store-button taps, so we know how many people want LoveBits on iPhone or Android | Website visits (no cookies, no IP address) | Legitimate interest (Art. 6(1)(f)) |
| Answer support requests | Your emails | Contract or legitimate interest (Art. 6(1)(b)/(f)) |
| Keep LoveBits safe and prevent abuse | Account, technical logs | Legitimate interest (Art. 6(1)(f)) |
| Keep purchase and tax records | Purchase records | Legal obligation (Art. 6(1)(c)) |
5. Your partner
Your answers are shown to your linked partner, and only after you've both answered that question. Nobody else sees them. If either of you unlinks, you stop seeing each other's new answers, and answers you've already seen are removed from each other's app within 30 days. You can also delete your own answers at any time.
6. Who helps us (processors)
We use a few trusted companies to run LoveBits. They only process your data on our instructions, under a data processing agreement.
| Company | What for | Where |
|---|---|---|
| Supabase | Database, login and storage; website visit counts | EU (Frankfurt, Germany) |
| RevenueCat | Checking your subscription status (no answers) | USA, under Standard Contractual Clauses |
| Apple and Google | App stores, payments, Sign in with Apple/Google, push notifications | Under their own privacy policies |
| Vercel | Hosting the website and receiving website visit counts | USA and EU, under the EU-US Data Privacy Framework and Standard Contractual Clauses |
| Brevo | Account and service emails | EU (France) |
Your answers are stored in the EU. We never sell your data, we don't show ads, we don't share your data with advertisers, and we never use your answers to train AI models.
7. International transfers
Your data is stored in the EU. Where a processor may access data from outside the EU (for example RevenueCat for subscription status), we use the EU Standard Contractual Clauses or an adequacy decision, such as the EU-US Data Privacy Framework.
8. How long we keep it
- Account, answers and activity: as long as your account exists. When you delete your account, we delete them within 30 days.
- Backups: deleted data disappears from our backups within 30 days.
- Accounts that stay unused for 24 months: we email you first, then delete the account.
- Purchase and tax records: kept for up to 7 years, because the law requires it. They don't include your answers.
- Support emails: up to 2 years after your last message.
- Website visit counts: 180 days.
9. Your rights
You can ask us for access to your data, a copy in a portable format, correction, deletion and restriction, and you can object to processing based on legitimate interest. You can withdraw any consent at any time. Most of this you can do in the app (export your answers, delete answers, delete your account). For anything else, email hello@lovebits.app; we respond within one month. See how to delete your account.
10. If you live in the United States
We give everyone the rights above, wherever you live. We don't sell or "share" personal information for cross-context behavioral advertising, and we only use sensitive personal information to provide LoveBits to you. Residents of states such as California, Colorado, Connecticut, Virginia and others can use their state privacy rights (to know, access, correct, delete and opt out) by emailing hello@lovebits.app. We won't treat you differently for using them.
11. Age
LoveBits is only for people aged 18 and over. If we learn that someone under 18 has an account, we delete it.
12. Security
We encrypt data in transit and at rest, limit who on our team can access it, and use row-level security so each account can only read its own couple's data. No system is perfect: if a breach affects you, we'll tell you and the authorities as the law requires.
13. Changes
If we change this policy, we update the date at the top. For important changes, we'll tell you in the app or by email before they take effect.
14. Complaints
Please email us first, and we'll do our best to help. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl, or to the authority in the EU country where you live.