Privacy and data rights.
Lovv.in is a members app for conscious-minded adults. This policy explains how we collect, use, share, and delete personal data. It is written to align with the Digital Personal Data Protection Act, 2023 and, where the GDPR applies, the GDPR transparency and rights rules.
Who we are
Lovv.in acts as the data fiduciary and controller for the personal data you submit to the service. Use the Account page for export or deletion requests and the Contact page for privacy questions.
What we collect
- Account details from your sign-in provider, your auth record, and your profile, such as name, email, city, age, intention, focus, bio, avatar URL, and visibility choice.
- Service data such as favorites, messages, membership status, and support requests tied to your account.
- Payment and billing status from Stripe when you choose a paid plan. We do not store full card numbers.
- Basic browser and device data needed to operate the site, plus saved preferences in browser storage.
Why we use it
- To create and maintain your account, profile, favorites, and messages.
- To provide membership checkout and confirm your plan.
- To answer support requests, prevent abuse, and secure the service.
- To meet legal, tax, accounting, and safety obligations.
Our legal basis depends on the activity: contract or service performance to run your account, consent where required, legitimate interests or equivalent lawful purpose for security and abuse prevention, and legal obligation where the law requires retention or disclosure.
Who we share it with
- Your sign-in provider for OAuth sign-in.
- Supabase for authentication, database, edge functions, and storage of auth records, profiles, messages, favorites, subscriptions, and support requests.
- Stripe for payment processing and membership billing.
- Hosting and infrastructure providers needed to deliver the site.
We do not sell your personal data or use it for advertising.
Cookies and storage
Lovv.in uses essential browser storage to keep you signed in and to remember simple preferences such as saved favorites and plan selection. We do not run advertising trackers or analytics cookies on the site. Third-party providers may set their own operational cookies or storage when you sign in or pay.
International transfers
Your data may be processed outside your home region by your sign-in provider, Supabase, Stripe, or our hosting providers. Where cross-border transfer rules apply, we rely on the provider safeguards and legal mechanisms they offer.
Retention
We keep account data while your account is active and for as long as needed to provide the service, resolve disputes, meet legal obligations, or protect the platform. When you delete your account, we remove the linked public profile and attempt to delete associated account records promptly, subject to any legal retention requirement.
Your rights
- Access and copy your data.
- Correct or update inaccurate data.
- Delete your account and request erasure where applicable.
- Withdraw consent where processing depends on consent.
- Raise a grievance with Lovv.in and, where the GDPR applies, lodge a complaint with your local supervisory authority.
- Where the DPDP Act applies, use the grievance redressal process and any statutory escalation right available to you.
- Under the GDPR, request portability, restriction, or objection where those rights apply.
- Under the DPDP Act, request information about processed personal data and exercise the right to nominate, where available.
You can use the Account page to download or delete your data. For other requests, use the Contact page.
Children
Lovv.in is for adults only. You must be at least 18 years old to use the service.
Changes
We may update this policy if the service, laws, or providers change. The latest version will always be posted here.