Privacy Policy

1. Data controller

The Service is owned and operated by Cabridens Jérôme EI, a French sole trader (“entrepreneur individuel”), 16 place des Quinconces, 33000 Bordeaux, France, acting under the name “Lovely Couple”. For the purpose of this Privacy Policy, “Lovely Couple”, “we”, “us” and “our” refer to the operator of the Service.

For any privacy request, you can contact us at support@lovecouple.app.

2. Services covered by this policy

This Privacy Policy applies to the website lovecouple.app, its localized pages, the online game where available, the Lovely Couple mobile applications on iOS and Android, sales of the Date Night Kit on the website, the Lovely Couple space and sales of the Pass, and related support or communication channels.

This policy does not apply to third-party websites or services that we do not control, such as the App Store, Google Play, analytics providers, advertising platforms, hosting providers or external links.

3. Data we may process

Depending on how you use the Service, we may process the following categories of data:

• Voluntary data: names, nicknames or partner names entered in the game, custom cards or prompts if such features are available, support messages, feedback and email address if you contact us.
• Anonymous account (versions of the app before version 4): a random identifier created automatically by the app. No email address or password is used. See section 4.
• Game data (versions of the app before version 4): the number of actions and truths played, the game modes used and your premium status, linked to an anonymous identifier. See section 4.
• Photos (versions of the app before version 4): photos you take when a question asks for one, and photos you add yourself from the in-app gallery. See section 5.
• Technical data: device type, browser, operating system, language, IP address, app version, diagnostic data, crash logs, security logs and similar technical information.
• Usage data: pages viewed, game started, card category selected, download buttons clicked, app store redirects, feature interactions and aggregated performance metrics. In the versions of the app before version 4, usage data is measured with Google Firebase Analytics; version 4 uses no measurement tool.
• Purchase data: product purchased, subscription status, transaction identifier, platform, renewal status or entitlement status. Full payment details are processed by the relevant payment provider, such as Apple, Google or another provider, and not directly stored by us. For the Date Night Kit bought on the website, see section 6. For the Pass bought in the Lovely Couple app, see section 7a.
• Lovely Couple space: your email address, your password if you have one (as a fingerprint), what Google or Apple sends us if you sign in with them, your first names, your games, your memories and their photos and, if you buy the Pass, your order. See section 7.
• Couple quiz answers: if you take the quiz, we record anonymously the week, the language, your age range, your choices, the result, how long you have been together and the age range of your youngest child. These answers are not linked to any IP address, cookie or email address: they cannot identify you and are used only for overall statistics.
• Answers to the relationship quiz for parents: if you take the quiz, we record anonymously the week, the language, your family’s stage (expecting, or the age of your youngest child), your choices and the result. These answers are not linked to any IP address, cookie or email address: they cannot identify you and are used only for overall statistics.
• Would You Rather game answers: if you play, we anonymously count the choice made for each question, in order to show the share of players who made the same choice. This count is not linked to any IP address, cookie or email address: it cannot identify you and is used only for these overall statistics.
• Most Likely To game answers: if you play, we anonymously count the answer given to each question (“me” or “you”), in order to show the share of players who gave the same answer. This count is not linked to any IP address, cookie or email address: it cannot identify you and is used only for these overall statistics.
• Anonymous visit count: the language and the page viewed, the type of device, the system of a phone (iOS, Android or other) and the category of origin, without cookies, IP address or identifier. See section 10.
• AI generator data: choices selected in the love message generator, such as recipient type, occasion, tone, length, intensity and the optional personal detail you choose to enter.
• AI technical logs: pseudonymized or hashed technical information such as request date and time, generation status, source used, model name, token usage, estimated cost, fallback or rate-limit reason, masked or hashed IP, device hash and user agent hash.
• Cookie and tracker data: consent preferences, technical identifiers, analytics events, advertising or conversion events when such tools are enabled.

4. Anonymous session and game data (versions of the app before version 4)

In the versions of the app before version 4, to save your progress, the app automatically creates an anonymous account with Google Firebase. No name, email or phone number is required. Your game data is linked to a random identifier and includes: the number of actions and truths played, the game modes used, and your premium status. This data is used only to save and restore your game and your premium access. It is not sold, not used for advertising, and not shared with anyone other than our hosting provider, except where required by law. It is automatically deleted after 12 months of inactivity. How you use the app (for example, games started) is measured separately with Firebase Analytics; see “Usage data” in section 3.

5. Photos (versions of the app before version 4)

In the versions of the app before version 4, some questions ask you to take a photo, and you can also add other photos outside of the questions. These photos are uploaded to Google Firebase Storage, linked to your anonymous identifier, only so they can be used in your game. They are not public, not shared with third parties (except where required by law), not used for advertising, and not used to train any AI model. You can view, add or delete your photos at any time from the in-app gallery. Deleting a photo removes it from our servers. Photos are automatically deleted after 12 months of inactivity.

6. Buying the Date Night Kit on the website

The Date Night Kit (“Kit Soirée Couple” in French) is a digital product (PDF files) sold on the website. Payment takes place on Stripe’s secure checkout page, where you enter your email address and card details. Card details are processed by Stripe; we have no access to them.

We receive and keep: your email address; the amount, currency, date and status of the payment; the language of the order; the Stripe identifiers of the order; the page and button from which the purchase was started; the version of the terms of sale you accepted and the date you accepted them.

The download link is personal and limited in time and number of uses. To secure it, each download records a hashed (pseudonymized) fingerprint of your IP address and browser.

The Kit’s cards can also be played online, with the “Play now” link. When you open this link, two technical cookies, necessary for this service, keep in your browser for one year the key of your order and a randomly drawn identifier: they are used to reopen your cards without going back to the email and to limit the game to 4 devices per purchase. Your browser also remembers the card where you stopped in each chapter: this information stays on your device and is not sent to us. We keep, with the order, a hashed fingerprint of this identifier and the date it was last used. We also count each day the number of games opened, without any personal data.

This data is used to process the payment, deliver the Kit (on the confirmation page and by an email sent through Brevo), answer your requests, prevent abuse and meet our accounting obligations. Legal bases: performance of the sales contract, our legal obligations and our legitimate interest in securing downloads. Your email address is not used for marketing.

Stripe also processes some data on its own behalf, in particular to prevent fraud and meet its legal obligations, as described in its privacy policy.

For purchases made from pages in a language other than French, payment goes through Link, Stripe’s checkout service, which acts as the seller of record: Link also collects your name and billing address to calculate the taxes of your country, and processes this data on its own behalf.

7. Your Lovely Couple space and the Pass

The Lovely Couple space, on lovecouple.app, opens with your two first names, without an account (see the next paragraph), or when you create a free account. With an account, we process your email address; your password if you chose one, of which only a fingerprint (hash) is stored; your first name and, if you enter it, the other person’s, which fill in the cards; the language of your space; the date you confirmed you are 18 or over; the dates your account was created and you last signed in. To confirm your address and to sign in, we send you a 6-digit code by email. If you choose “Continue with Google”, Google sends us your email address, your name and the link to your profile photo, stored with your account; the first name for the cards is suggested from that name, and you can change it. If you choose “Continue with Apple”, Apple sends us your email address, or a relay address that hides yours if you choose one; the first time, Apple also gives your name to the page, which uses it only to suggest your first name for the cards.

To play without an account, your two first names and the confirmation that you are 18 or over are enough. We then open an account without an email address, identified by a random identifier, which keeps your first names, the language, the date you confirmed you are 18 or over and your games, like an account with an email address. Its session stays in this browser: if you clear the browser’s data, this account can no longer be reached. Memories and buying the Pass on the website require an account with an email address. When you create an account, or sign in to an existing one, from this browser, what you played without an account (your evenings, your favorites, your cards, your Lovely Party game…) joins that account, which keeps the date of this merge (it only serves to count, in our dashboard, the accounts born from a game without an account and the Pass bought afterwards), then the account without an email address is deleted. You can erase it at any time in “Settings” (“Erase our games from this phone”); after 30 days without a game, it is deleted with its data, unless it holds a Pass bought in the app.

For your games, we record your favorite cards, the cards you write yourselves, the couple ideas you tick off and the days you play, which show your evenings of the month. The cards you write only appear in your space. In Deep Questions, we keep the questions you have already seen, to show you the new ones first, and your opinion of a question (“Useful” or “Not interesting”: that one is no longer shown to you). We only look at the totals per question, without your names, to know which questions to keep or rewrite. In Fix the World, we keep the statements you have already seen and the side of each person playing (for or against), without first names: those of the people you add stay on your device. Only the totals are shown, for all couples. For Lovely Party, we keep with your account the game in progress (its length, the board, the position of the pawns, the hearts, whose turn it is, the open square, the cards already played, the figures of the recap and the reward drawn), so that you can resume it on another device; a new game replaces it. We also keep the history of your games: each one as above, with its language, its options, each turn played (the die, the square, the card drawn, the answer given, the hearts won or lost, the time spent), its end and whether you gave or declined your opinion. If you give it, we keep your opinion of the game (from 1 to 5 stars for the fun, the cards and the pace, and your text), with the language, the length and the options of the game, and whether your account has the Pass. We use them to improve the game; only our team reads them. Your Lovely Party trophies, in the “Us” tab, are calculated from your finished games (their number and their dates). Without the Pass, we note the Pass card given to you for free one evening on a Pass square, so as to give only one per evening.

In the “Collection” tab, our site draws a card at random for your account every day. We record the card, the day, whether you already had it (a double) and when you scratched it, as well as the cards you choose in exchange for four doubles or with the Pass, those you mark “We did it!” and those that become shiny, with their date: these cards make up your collection. When you turn a card marked as done into a memory in your album, we keep the link between the card and that memory. Without an account, only the card of the day joins the account you then create or sign in to from this browser.

In the “Memories” tab, you keep the memories of your couple. For each one, we record what you put in it: its title, its date and, if you add them, a place, a stamp, a label, whether it was a first time, your two sentences and photos, with their order and the dates they were added and changed; the Start step keeps the memory of the day you met in the same way. Before sending, your device reduces each photo (a large image and a thumbnail) and writes it again, which removes its metadata, the GPS position among them. On arrival, our site checks that both files really are images, of the expected size and with nothing hidden, and computes their fingerprint (a string of characters drawn from the file, which does not show the photo), to refuse a photo already removed for illegal content. The photos are kept with Supabase, in the Paris region, like the rest of your space. Your memories and their photos only appear in your space, on the devices signed in to your account: a photo is never public, it opens through a private link valid for one hour, which our site gives to your account only. Apart from this check, we do not analyze them (no face recognition, no artificial intelligence, no inference of any kind) and use them for nothing other than showing them to you: we only look at totals (number of memories, of accounts that have some, room taken by the photos). Nobody looks at your memories or your photos, except in three cases, each in a case opened for its reason: a request from an authority provided for by law, a report or an abuse spotted (for example a file that our site’s check set aside), or help you ask for by allowing it in “Settings” (for 48 hours; you can withdraw it at any time, and your log notes when you grant or withdraw it). A case only shows the memories and photos of the account concerned, for 48 hours at most, and each photo looked at is noted (the time, the person, their IP address) in a register nobody can change. If a content appears to us to be illegal, we take it out of your space and keep a copy, safely stored, for the authorities; at the request of an authority, we may also copy the photos of an account in this way (the “freeze”), without changing anything in your space. These copies, the case and its register are erased one year after the case is closed, unless an authority asks us to keep them. We only pass your memories and your photos on to the authorities, when the law requires it or for manifestly illegal content (see article 3 ter of our terms of use). Anyone, even without an account, can report content to us, for example a photo in which they appear without their consent. If we take a measure against an account (photos blocked, account suspended), we keep the measure, its date and its reason while it lasts, and at the latest until the account is deleted. To spot an abuse without looking at the photos, our site counts, from the log, the devices and networks that use an account and the photos added, refused and shown: an account that stands out appears on a list our team reviews, and a strong signal (for example a file already removed being sent again) pauses its adding of photos for 24 hours, without deleting anything. The “Report content” form keeps what you write in it (what the content shows, the account concerned if you give it, your description, and your email address and name if you give them), to handle the report and answer you. If we close an account for a serious abuse, we keep the fingerprint of its email address (not the address itself), to refuse a new sign-up with it.

To comply with the law, which requires a host to be able to identify the author of a content, and to protect the service from abuse, we keep a log of your account: the date, time and IP address of its creation, of your sign-ins, of each photo added, refused or deleted and of each request to show your photos, with the device used (its randomly drawn identifier and the name of its browser), the size and fingerprint of the photos, and the email address of the account when it is created and when it is deleted. This log contains neither your photos nor your memories. It is kept for one year, even after your account is deleted, then erased. We only consult it to answer a request from an authority provided for by law or to handle a report or an abuse, and only pass it on to the authorities. Legal bases: our legal obligations and our legitimate interest in protecting the service.

To keep your account secure, the IP address and browser of each sign-in session are recorded; they are deleted when you sign out, and at the latest with your account. Supabase, which hosts the space, also keeps its technical logs (sign-ups, sign-ins and requests, with the IP address) for 7 days at most.

To protect the sign-up, the sign-in and the sending of codes against robots, these forms go through Cloudflare Turnstile (Cloudflare, Inc., United States): Cloudflare receives the IP address and technical information from the browser, the time to check that the request comes from a person. This data may be processed outside the European Union, with the safeguards the GDPR provides for such transfers.

The “Continue with Google” button on the sign-up and sign-in pages is provided by Google (Google LLC, United States): showing it sends Google the IP address and technical information from the browser, and signing in happens with your Google account, under Google’s own rules. This data may be processed outside the European Union, with the safeguards the GDPR provides for such transfers.

The “Continue with Apple” button opens a window from Apple (Apple Inc., United States): Apple’s script, loaded on the sign-up and sign-in pages, sends Apple the IP address and technical information from the browser, and signing in happens with your Apple Account, under Apple’s own rules. This data may be processed outside the European Union, with the safeguards the GDPR provides for such transfers.

The Pass opens on four devices at once at most. For this, when your account has the Pass, we record for each device that opens the space a random identifier kept by its browser, the name of the device and its browser (for example “iPhone · Safari”), the sign-in session it is linked to and the date of its last visit. You see them, and can remove them, in “Settings”. A device without a visit for 90 days is deleted, and all of them are deleted with your account.

If you buy the Pass, payment takes place on Stripe’s secure checkout page: card details are processed by Stripe, and we have no access to them. We keep your order: the email address of your account, the amount, currency, dates and status of the payment, the Stripe identifiers, the billing country Stripe passes on to us, the button of the site or the space that led you to the Pass, where your visit came from (a category only, for example a Google ad, a search engine or a direct visit, which your browser keeps until the tab is closed; it is not recorded if the visit count is turned off or if your browser sends the “Do Not Track” or “Global Privacy Control” signal), the type of device used (an iOS, Android or other phone, a tablet or a computer), the version of the terms of sale you accepted and the time you accepted them, and the date of the email that confirms your purchase, sent through Brevo. Stripe also processes some data on its own behalf (see section 6).

Your browser keeps, in its local storage and on your device only, your sign-in session, so that you do not have to sign in again, the last category played, your choice of sound for the games and, for 12 hours at most, the first names given for the evening: those of the people playing with you (“Who’s playing?”) and, if your account does not have it, the other person’s. It also keeps the random identifier of this device (see above), even after signing out. For the banner that suggests adding the space to your home screen, it keeps the number of your visits to the home of the space and, where applicable, the date of your “Later” or of the adding. For the “Memories” tab, it keeps the private links of your photos for one hour and, in its cache, the thumbnails already shown, so that they show quickly; it forgets both when you sign out. So that your games show at once, it also keeps, with the identifier of your account, what the space sent them on your last visit: the cards, questions, statements and ideas of the games, your first names, whether this device opens the Pass, your favorites, the cards written, the ideas ticked off, the questions and statements seen, your opinions and your sides. For the same reason, it keeps what the home of your space (with the card of the evening for the next seven days), the “Us” tab (your evenings played, game by game, and your finished Lovely Party games), the “Memories” tab (your memories and the list of their photos), the “Collection” tab (your cards, those marked as done or shiny, the card of the day and, for the badge on the tab, the day of the last card scratched on this device), the “Settings” tab (including the devices of the Pass and “Help from our team”) and “Your cards” showed on your last visit. For Lovely Party, it keeps the game in progress (the board, the position of the pawns, the hearts, the turns and the cards already played and the reward drawn), to resume it where you left off, and the game length and the “Spice it up” option chosen last time. It forgets all of it when you sign out, except these two choices. For the length of the visit, it also keeps the name of the button that led you to the sign-up or to the Pass. The pages of the space use no analytics or advertising tool, apart from the anonymous visit count and the one of the space (see section 10).

If you write to us from your space (“Write to us”), your message leaves by email, through Brevo, for our support, with the email address of your account so that we can answer you and, for a bug, the browser and device used; the website keeps nothing of it, except the number of messages sent per account that day, deleted after 2 days, which limits abuse.

This data is used to run your space, the “Memories” tab included, send you the codes and the purchase confirmation, give you the Pass, keep your account secure, handle reports and meet our accounting and legal obligations. Legal bases: performance of the contract (your space and, where applicable, the Pass), our legitimate interest in securing accounts and handling reports, and our legal obligations. Your email address is not used for marketing.

You can change your first names yourselves, or clear the other person’s, in “Settings”, and change or delete your memories and their photos in the “Memories” tab, at any time. To delete your space, see section 16.

7a. The Lovely Couple app (version 4)

The Lovely Couple app for Android, from version 4, opens the same Lovely Couple space as the website, with the same account: everything section 7 says applies to it, except what follows.

You can play in it without an account, with your two first names, as on the website: the app then opens an account without an email address (see section 7), whose session stays on this phone; what you play there joins the account you then create or sign in to from the app. You sign in to an account with a code sent by email or with a Google account chosen on your phone; Google then sends us the same information as on the website. Before opening an account without an email address or sending a code, the app opens, out of sight, a page of our website that runs the same check against robots as the website (Cloudflare Turnstile, see section 7).

For the Pass’s rule of four devices, the app itself draws a random identifier, which it keeps on the phone, and names the device “Android · Lovely Couple”.

In the “Memories” tab, the app opens the phone’s photo picker: it only sees the photos you choose there, and asks for no access to your photos. Like the website, it reduces and rewrites each photo on the phone, which removes its metadata (including the GPS position), then hands it to our website (see section 7).

The app keeps on the phone, and on the phone only: your sign-in session; your first names and what it has already loaded from your space (your cards, your favorites, the questions and statements of the games, your evenings, your trophies, your memories), to show it without waiting; the thumbnails of the photos of your memories already shown and, for an hour, their private links; the cards already seen in each game and tonight’s card once turned over; the Lovely Party game in progress (the board, the position of the pawns, the hearts, the turns and the cards already played and the reward drawn), to resume it where you left off; the language chosen, your choice of sound for the games, the last levels chosen in the games, the last game length chosen in Lovely Party, the last price of the Pass shown by Google Play and the identifier of the device. What belongs to your account is forgotten when you sign out, and everything is when you uninstall the app.

In Would You Rather and Most Likely To, your choice is counted anonymously, as on the website (see section 3), to show the share of players who made the same one. If you write to us from the app (“Write to us”), your message leaves as it does from the website, with, for a bug, the version of the app and of the phone’s system.

The Pass is bought in the app through Google Play, which processes the payment: we have no access to your payment methods. It can also be bought there without an account: it then opens on the app’s account without an email address, stays linked to your Google Play account, which finds it again with “Restore purchases”, and joins, with its purchase, the account you then create or sign in to from the app. RevenueCat (RevenueCat, Inc., United States) manages the purchases made in the app on our behalf: it receives the identifier of your Lovely Couple account and, from Google Play, the product bought, its price, its currency, the country of the store, the dates and the identifier of the transaction, which it passes on to our website to open your Pass. We keep with your Pass the store and the identifier of the transaction, so that we can take the Pass back if the purchase is refunded, or if it moves to another account when you restore your purchases from that account. Google Play and RevenueCat also process some data on their own behalf, under their own rules. This data may be processed outside the European Union, with the safeguards the GDPR provides for such transfers.

The app contains no advertising and uses no third-party analytics, advertising or crash reporting tool. Like the space on the site (see section 10), it counts anonymously, by day and by language, apart from what the site counts: visits and the tabs opened, the games opened, the windows of the Pass shown and arrivals at the Pass, the arrival without an account and the sign-up (their errors, the couples who start playing without an account, the accounts created, including those that keep the games played without one, the check against robots) and Lovely Party games. Only the name of the event, that of the button involved and the language are sent; no IP address or identifier is stored. You can stop this counting on your phone, in “Settings”. Legal bases: performance of the contract (your space and, where applicable, the Pass) and our legitimate interest in securing accounts and in knowing how the app is used without identifying you.

8. Why we use data

We may use data for the following purposes:

• to provide, operate and display the Service;
• to personalize game cards locally with names or nicknames entered by Users;
• to manage accounts, premium access, subscriptions or purchase entitlements where applicable;
• to respond to support requests, bug reports or legal requests;
• to measure audience, understand how pages and features are used, and improve conversion to the mobile app;
• to improve product quality, stability, security and user experience;
• to prevent fraud, abuse, technical incidents or unauthorized access;
• to limit automated or abusive use of the AI message generator, control technical costs and diagnose generation errors;
• to comply with legal, tax, accounting or regulatory obligations.

9. Legal bases

Where the General Data Protection Regulation or similar laws apply, we may rely on one or more of the following legal bases:

• Performance of a contract, when processing is necessary to provide the Service, a requested feature or the Kit or the Pass you bought.
• Legitimate interest, for security, fraud prevention, support, product improvement, basic analytics, debugging and service maintenance, provided that your rights do not override our interest.
• Consent, for optional cookies, analytics, advertising or conversion tracking when legally required.
• Legal obligation, where we must keep or disclose information to comply with applicable law, including accounting rules.

10. Cookies, analytics and advertising trackers

The website may use cookies or similar technologies. Some cookies are necessary for the website to function properly. Others may be used for analytics, advertising measurement or conversion tracking only where allowed and, when required, after your consent.

Tools that may be used depending on the current configuration include analytics, tag management, advertising measurement, app attribution, crash reporting or product analytics services. These tools may set cookies, read identifiers or receive event information.

You can manage your preferences through the cookie banner where available and through your browser settings. Refusing optional trackers should not prevent access to the core website, although some measurement or personalization features may be limited.

If you bought the Date Night Kit and opened its online game, two technical cookies keep the key of your order and a randomly drawn identifier (see section 6). They are necessary for the service you bought and are never used for analytics or advertising.

If you created your Lovely Couple space, your browser keeps in its local storage your sign-in session, the last category played, your choice of sound for the games and, where applicable, the first names given for the evening, the random identifier of this device, what you did with the banner for adding the space to your home screen and, for one hour, the private links of the photos of your memories, and until you sign out their thumbnails and what your space and your games need to show at once (see section 7): they are necessary for the service and are never used for analytics or advertising. For the length of the visit, it also keeps the name of the button that led you to the sign-up or to the Pass, for the count described below and for your order.

In the Lovely Couple space and the games that lead to it, the anonymous count described below also counts, by day and by language, the Pass windows shown, the arrivals on the Pass page and on the sign-up with the name of the button that led there, the accounts confirmed, the couples who start playing without an account (with the name of the button that led them there) and those who then create their account, the errors of the sign-up form (by type), the result of the check against robots on the sign-in and sign-up pages (passed, box asked for, or Cloudflare’s error code), the games opened from the space, the games of Lovely Party started (with their length), resumed and played to the finish, on its Pass squares, the free cards played and the classic cards chosen and, at the end of a game, the opinions sent or declined, the visits to the space and the openings of its tabs (“Play”, “Us”, “Collection”, “Memories”, “Settings”), each counted once per visit, the collection cards scratched, exchanged for doubles, chosen with the Pass, marked “We did it!”, turned shiny or made into a memory and, for a couple without an account, “Not now” tapped in the window that offers to keep the card, the banner for adding the space to the home screen (shown, “Add to Home Screen” tapped, added, “Later”) and the visits to the space opened from the home screen.

The website also counts its visits anonymously, without cookies: for each page shown, it records only the language of the page, the page itself, the type of device (mobile, tablet or computer), the system of a phone (iOS, Android or other) and the category of origin (for example a Google ad, a search engine, a social network, an AI assistant or a direct visit), never the exact address you came from. It also records how fast the page was, as your browser measures it: the display time, the responsiveness and the stability of the layout. No IP address and no identifier is recorded: only daily totals are kept, for overall statistics. This count does not take place if your browser sends the “Do Not Track” or “Global Privacy Control” signal, and you can turn it off on this device:

11. Service providers and recipients

We may share necessary data with providers that help us operate, host, secure, analyze, monetize or support the Service, including:

• hosting and infrastructure providers;
• analytics and product measurement tools, including PostHog (instance hosted in the European Union) on the website, only if you accept it in the cookie banner;
• advertising, conversion and attribution tools;
• crash reporting and diagnostic tools;
• payment, purchase and entitlement providers, including Apple App Store and Google Play, and RevenueCat, which manages the purchases made in the Lovely Couple app (version 4);
• Stripe, for payment of the Date Night Kit and the Pass;
• AI providers used server-side for the message generator, such as OpenAI when AI generation is active;
• product analytics providers for non-sensitive events that do not include free text entered in the generator or generated messages;
• OVHcloud, which hosts the website and the Kit order data;
• Supabase, which hosts the accounts, data and photos of the Lovely Couple space, in the Paris region;
• Cloudflare, which protects the sign-up and sign-in of the Lovely Couple space against robots (Turnstile);
• Google Firebase (hosting, anonymous authentication, storage, analytics), for the versions of the app before version 4;
• Brevo, for the Kit delivery email and the emails of the Lovely Couple space (codes, Pass purchase confirmation);
• email, support and communication tools;
• legal, accounting or compliance advisors where necessary.

These providers may process data outside the European Economic Area. Where required, we rely on appropriate transfer mechanisms, contractual safeguards or legal bases provided by applicable law.

12. Hosting provider and international transfers

Game data and photos of the versions of the app before version 4 are hosted by Google Firebase (Google LLC) on servers located in the United States. These transfers outside the European Economic Area are covered by the EU–US Data Privacy Framework and Google’s Standard Contractual Clauses.

The website, including the Kit order data, is hosted in France by OVHcloud. Stripe may process some payment data outside the European Economic Area, in particular in the United States; these transfers are covered by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

The accounts, data and photos of the Lovely Couple space are hosted by Supabase (Supabase Pte. Ltd, Singapore) in the Paris region. Any transfers outside the European Economic Area are covered by the European Commission’s Standard Contractual Clauses, provided for in Supabase’s data processing agreement.

RevenueCat, which manages the purchases made in the Lovely Couple app (version 4), is located in the United States: these transfers are covered by the safeguards the GDPR provides.

13. AI message generator

Lovely Couple provides a love message generator that can help create personalized text from the information you choose to enter.

The information entered in the generator is used to produce the message requested, ensure the service works properly, prevent abuse, limit automated use, monitor technical costs and diagnose generation errors.

The data processed may include the choices selected in the form, such as recipient type, occasion, tone, length and intensity, as well as the optional personal detail you choose to enter. This optional field may contain personal information. We recommend that you avoid entering sensitive or highly identifying information, such as full names, addresses, phone numbers, health information or intimate identifiable details.

In the current configuration, free text entered in the optional personal detail field is not stored after generation, except for very limited pseudonymized technical logs that do not contain the message content. If a temporary audit mode is enabled for security reasons, free text may be kept for a maximum of 30 days only to secure the service, detect abuse, handle incidents and verify that generation works correctly. Access to such audit data is restricted to authorized administrators.

Generated messages are not stored in our AI audit logs. The free text entered in the generator and the generated messages are not used for audience analytics or advertising tracking.

When AI generation is active, the information necessary to generate the message may be transmitted server-side to our AI provider, such as OpenAI, to produce the requested response. The OpenAI API key is never exposed in the website HTML, JavaScript or CSS. AI generation can be disabled at any time; in that case, the service may use local message templates instead.

You can request access to or deletion of data concerning you by writing to support@lovecouple.app.

14. Retention periods

We retain data only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

• Support messages may be kept for the time needed to handle the request and maintain a reasonable support history.
• Analytics and event data are kept according to the configuration of the tools used and may be aggregated or anonymized.
• Purchase and entitlement data may be kept for the duration necessary to provide premium access, handle disputes and comply with accounting or legal obligations.
• Date Night Kit order data, including download fingerprints, is kept for 10 years from the purchase, to meet our accounting obligations and as proof of delivery in case of dispute.
• The data of your Lovely Couple space (account, first names, favorites, cards written, ideas ticked off, questions and statements seen, opinions and sides, evenings, Lovely Party game, history and opinions, free Pass cards, collection cards, memories and their photos, devices of the Pass) is kept as long as your account exists, and deleted with it. The log of your account (see above) is kept for one year, even after the account is deleted, then erased. Moderation cases, their register and the copies kept for the authorities are erased one year after the case is closed, unless an authority asks to keep them. A case that serves no authority may be erased earlier; a summary of it then stays in the account’s log. Reports are erased one year after our answer, and the fingerprint of the address of an account closed for a serious abuse after three years. An account with no sign-in for 3 years is deleted with its data, unless it has the Pass, which has no time limit. An account without an email address (to play without an account) is deleted with its data after 30 days without a game, unless it holds a Pass bought in the app. An account that has not confirmed being 18 or over is deleted after 7 days, with its data.
• A memory or a photo you delete is erased at once. When a memory, a photo or an account is deleted, the files of the photos are erased at the same time, or within 24 hours at the latest.
• Sign-in sessions of the space (IP address, browser) are deleted when you sign out, and at the latest with your account; Supabase’s technical logs are kept for 7 days at most.
• Pass order data is kept for 10 years from the purchase, to meet our accounting obligations and as proof of purchase in case of dispute, even if you delete your account.
• The store and the identifier of the transaction of a Pass bought in the app are deleted with your account; Google Play and RevenueCat keep their own purchase data, under their own rules.
• AI generator audit logs and prompt audit logs are kept for a maximum of 30 days by default, unless deleted earlier from the administration interface.
• Game data and photos of the versions of the app before version 4 are automatically deleted after 12 months of inactivity. You can delete your photos earlier at any time from the in-app gallery.
• Aggregated or anonymized statistics that no longer identify a person may be kept for a longer period.
• Technical logs are kept for a limited period necessary for security, debugging and abuse prevention.

15. Your rights

Depending on your country and applicable law, you may have the right to request access, rectification, deletion, restriction, objection, portability or withdrawal of consent regarding your personal data.

To exercise your rights, contact us at support@lovecouple.app. We may ask you for information necessary to verify your identity and process your request. For data linked to the anonymous account of the versions of the app before version 4, see section 16.

If you are located in the European Union and believe your rights have not been respected, you may lodge a complaint with your local supervisory authority. In France, this authority is the CNIL.

16. Deleting your data

In the versions of the app before version 4, you can delete your photos yourself at any time from the in-app gallery (see section 5). Because these versions do not require an account, we cannot link data to your name or email. To request earlier deletion, write to support@lovecouple.app with the approximate date and time you played; we will locate and delete the corresponding data. Deleting the app does not automatically delete data stored on our servers.

You can delete your Lovely Couple space yourselves at any time, on the website as well as in the app, in “Settings” (“Delete account”): your account and its data (first names, favorites, cards written, ideas ticked off, questions and statements seen, opinions and sides, evenings, Lovely Party game, history and opinions, free Pass cards, memories and their photos, devices of the Pass, sign-in sessions) are deleted at once. You can also write to support@lovecouple.app from the email address of your account. Only the Pass order data is kept, for our accounting obligations (see section 14). Uninstalling the app erases what it keeps on the phone, but not your account.

17. Children and minors

The Service is intended for adults and is not directed to children or minors. We do not knowingly seek to collect personal data from children. The Lovely Couple space asks you to confirm you are 18 or over before the account is created.

If you believe that a minor has provided personal data to us or accessed adult-oriented features, please contact us so that we can take appropriate action.

18. Security

We implement reasonable technical and organizational measures designed to protect data against unauthorized access, loss, misuse, alteration or disclosure. However, no online service can guarantee absolute security.

For the AI message generator, security measures may include pseudonymized logs, no storage of raw IP addresses in AI usage logs, restricted admin access, protected configuration and storage files, limited technical retention, rate limits, budget controls and the ability to quickly disable AI generation in case of abuse or security risk.

19. International users

The Service may be accessed from different countries. By using the Service, you understand that your data may be processed in countries where our providers operate, subject to applicable data protection requirements.

20. Changes to this policy

We may update this Privacy Policy to reflect changes to the Service, legal requirements, tools used or data practices. The “Last updated” date indicates the version currently in force.

21. Contact

For any question about this Privacy Policy or your personal data, contact us at:

support@lovecouple.app