The small print
Privacy policy
Last updated: February 1, 2026
The short version: what you two share stays between you two.
On this page
Introduction
Welcome to loveline ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.
By using loveline, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
Information We Collect
Personal Information
When you register for loveline, we collect the following information:
- Name and email address (via Google OAuth authentication)
- Profile picture (if provided through your Google account)
- Device information (device IDs, MAC addresses for pairing)
Usage Data
We automatically collect certain information when you use our services:
- Messages you send to your paired partner
- Images you upload and share
- Streak data and activity metrics
- Device online/offline status
- Timestamps of actions and interactions
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our service:
- Essential Cookies: Required for authentication and basic functionality
- Functional Cookies: Remember your preferences (e.g., PWA install prompts)
- Session Cookies: Maintain your logged-in state
How We Use Your Information
We use the collected information for the following purposes:
- To provide and maintain our service
- To authenticate your identity and manage your account
- To enable messaging between paired partners
- To sync data across your devices
- To display your activity streaks and statistics
- To improve and optimize our services
- To detect and prevent technical issues or abuse
Legal Basis for Processing (GDPR)
If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data and the context:
- Contract Performance: Processing is necessary to provide our services
- Consent: You have given us permission to process your data
- Legitimate Interests: Processing is in our legitimate interests (e.g., improving services, security)
Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following situations:
- With Your Partner: Messages and images are shared with your paired partner
- Service Providers: We use third-party services (Google OAuth, database hosting) that may process your data on our behalf
- Legal Requirements: If required by law or to protect our rights
Data Retention
We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:
- Account data: Retained while your account is active
- Messages: Retained indefinitely unless deleted by you
- Images: Automatically deleted after 30 days or when you delete them
- Session data: Expired after the session ends
Your Data Protection Rights (GDPR)
If you are a resident of the EEA, you have the following data protection rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Request transfer of your data
- Right to Object: Object to our processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, please contact us using the information provided below.
Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encrypted connections (HTTPS/TLS)
- Secure authentication via OAuth 2.0
- Database access controls
- Regular security updates and monitoring
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Children's Privacy
Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Email: [email protected]
International Data Transfers
Your information may be transferred to and maintained on servers located outside of your country where data protection laws may differ. By using our services, you consent to the transfer of your information to these locations. We will take appropriate measures to ensure your data receives adequate protection.