LoveBridge Privacy Policy

Version: Draft v0.1 · Last updated: 2026-10-17 · Effective date: [TBD]

LoveBridge is operated by [Legal entity name] ("we", "us"). We know that the conversations and memories between partners are deeply private. This policy explains what personal data we collect when you use the LoveBridge apps, the website lovebrideg.one and related services, why we collect it, how we use and share it, how long we keep it, and your rights.

1. Data we collect

We do not access your contacts, do not track your location in the background and never record your calls.

2. How we use it

• Core features: accounts and sign-in, pairing, sending and syncing messages, storing and showing albums, anniversary and festival reminders, diaries, challenges and games.
• Translation and AI: sending the relevant text to the translation or AI provider when you use those features and returning the result.
• Purchases: verifying Apple / Google transactions, granting and maintaining membership benefits, handling renewal and refund notifications.
• Notifications: new messages, partner interactions and reminders (you can turn these off).
• Safety and compliance: account security (rate limiting, suspicious sign-in detection), preventing scams and abuse, handling reports, meeting legal obligations.
• Improving the Service: analysing de-identified or aggregated usage statistics and error logs.

We do not sell your personal data, do not use your private chats or photos for advertising, and do not use them to train our own AI models. If we want to use data for a purpose not described here, we will ask for your consent first.

Legal bases (where the GDPR or similar laws apply): performance of our contract with you; your consent (e.g. notifications, translation, AI, private-photo access — withdrawable at any time); our legitimate interests (security, fraud prevention, improving the Service); and compliance with legal obligations.

3. Sharing, processors and third parties

We share data only as needed to provide the Service, with the following types of providers, who are contractually required to protect it:

• Network and security: Cloudflare and similar CDN / reverse-proxy providers process your IP address and request data for delivery and attack protection.
• Sign-in and payments: Apple (Sign in with Apple, App Store) and Google (Google Sign-In, Google Play). Payments are handled by the stores; we receive only the transaction result.
• Push: Apple Push Notification service and Firebase Cloud Messaging deliver notifications to your device.
• Translation (when enabled): DeepL SE (Germany) receives the message text to be translated.
• AI (when enabled): [AI provider — TBD] receives the text you submit to the AI assistant; where options exist we choose terms under which data is not used for model training.
• Voice / video calls (when enabled): [RTC provider, e.g. Agora / Twilio — TBD] to establish real-time connections.
• Email (when enabled): [email delivery provider — TBD] for verification codes and transactional email.

Photos, videos and chat media are kept in object storage that we operate ourselves, not with a third-party cloud storage provider. Otherwise we disclose data only with your consent, where necessary to protect the safety or property of you or others, or when required by law or a competent authority. In a merger or acquisition, we will require the successor to remain bound by this policy.

4. What your partner can see

Once paired, what you send or create in the couple space (chats, shared albums, anniversaries, diaries, lists, game records, status) is visible to your partner, as is your profile (nickname, avatar, country, time zone). Private photos can only be viewed after you grant access, in the agreed way, and you can revoke it at any time. Content you post in community or public areas may be seen by other users.

5. Where data is stored and how we protect it

• Our servers are located in [country / region — to be confirmed]. Because LoveBridge serves cross-border couples, your data may be processed outside your country; where cross-border transfers occur we apply the safeguards required by law (such as standard contractual clauses).
• All traffic is encrypted with HTTPS (TLS); passwords are stored only as salted hashes; media lives in private buckets and is served only through time-limited signed links; databases and internal services are reachable only on the server's local network; services authenticate to each other with internal tokens; access follows least privilege and admin actions are audit-logged.
• The app offers App Lock / Face ID, and viewing sensitive content can require re-authentication.
• No system is perfectly secure. If a personal-data breach occurs we will notify you and the regulator as required by law and take remedial action.

6. Retention and account deletion

• We keep your data for as long as your account exists, to provide the Service. You can delete individual messages, photos, diary entries and other content at any time.
• Deleting your account: after you submit a request under Settings → Account & Security → Delete account, a 7-day grace period begins; the account is deactivated and signing in again cancels the request. When the grace period ends, our systems automatically purge your personal data across all services: credentials, devices and sessions, profile, photos / videos you uploaded (including original files and thumbnails in storage), the content of messages you sent, translation records, push tokens, diary entries and interaction records.
• Shared content: so your partner's records stay intact, messages and photos your partner sent or uploaded remain theirs; your entries in the shared timeline become "deleted" placeholders and fields linking to you are replaced with an unlinkable anonymous identifier; shared albums containing your partner's photos are handed over to your partner.
• Legal retention: transaction and financial records, and records needed to handle reports, appeals or security incidents, are kept in anonymised or minimised form for as long as the law requires or is necessary, then deleted.
• Backups and logs: database backups roll over every 7 days and system logs are kept for up to 14 days; deleted data is fully removed as backups and logs rotate within these periods.
• Chat uploads that were never sent are deleted automatically after 7 days.

7. Your rights

Depending on the law that applies to you, you can:

• access and correct your profile (directly in the app);
• delete content you posted, or delete your account (Section 6);
• withdraw consent — turn off notifications, stop using translation / AI, revoke private-photo access — without affecting processing before withdrawal;
• obtain a copy of your data, request restriction of or object to certain processing, and request data portability;
• complain to your local data-protection authority.

To exercise these rights, email [email protected]. To protect your account we may need to verify your identity first, and we will respond within the period required by law (usually 15–30 days).

8. Device permissions

You can turn any permission off in system settings; the related feature will stop working but others are unaffected.

9. Minors

LoveBridge is only for users aged 18 or over (or the age of majority where they live). We do not knowingly collect data from minors and will delete it if we find out. If you believe a minor is using the Service, please contact us.

10. Changes and contact

We may update this policy from time to time. We will tell you about material changes (for example new purposes or new recipients) in the app and ask for your consent again where required.

Privacy questions and requests: [email protected] · Operator: [Legal entity name] · Address: [Registered address] · Data Protection Officer / EU representative: [if applicable — TBD]