Privacy Policy

Information we collect

Account and identity

• Email address. Every account has one; the waitlist and sign-in are keyed on it.
• Google account data. If you sign in with Google, we receive the basic profile Google shares: your name, email address, and profile picture.
• Password. If you sign up with email and password instead, the password is stored in hashed form by our authentication provider; we never see or store it in plain text. Email ownership is verified with a one-time code.

Profile

• Your handle, display name, and profile photo, as you set them. Profiles are visible to other users of the app.

Content you create

• Videos you upload, together with their captions and thumbnails.
• Comments you post on videos.
• Direct messages you exchange with other users.

Activity

• Likes, saves, video views, follows, and which messages in a conversation you have read. We use these to run the product features they belong to (your saved list, view counts, your feed), not to build advertising profiles.

Waitlist and newsletter

• When you join the waitlist we store your email address, the role you picked (traveler, creator, or hotel), and which form the signup came from. The newsletter stores your email address only.

Technical data

• Our servers and infrastructure providers process IP addresses and basic request metadata (such as timestamps and user-agent) to serve requests, rate-limit abuse, and keep the service secure. The website uses cookieless, aggregated page analytics (Vercel Analytics); it sets no tracking cookies and does not identify individual visitors.

What we do not collect

• No advertising or third-party tracking SDKs, in the app or on the website. No precise location. No access to your contacts. We do not sell personal data.

How we use your information

• Running the service - hosting and showing videos, comments, profiles, and messages; operating likes, saves, follows, and feeds.
• Account management - sign-in, the waitlist and invitations, and the account-deletion process.
• Communications - transactional email such as waitlist confirmations, invitations, and deletion confirmations. The newsletter is sent only to addresses that signed up for it.
• Safety and moderation - reviewing reported content and users, and enforcing our Terms of Service and Child Safety Standards.
• Security and legal compliance - preventing abuse and fraud, and meeting legal obligations.

Who can see what

LOVO is a social product. Your profile, videos, comments, and activity such as likes and follows are visible to other users. Video files are served from public storage URLs so the app can play them; anyone with a file's exact URL can fetch it. Direct messages are visible only to the two participants in the conversation; they are not end-to-end encrypted, and we can access them where necessary for moderation, security, or legal compliance as described in this policy.

Third parties we share data with

We use a small set of service providers (processors) to run LOVO. They process data on our behalf and on our instructions:

• Supabase - database, authentication, and file storage. Account data, profiles, content, messages, and activity live here.
• Vercel - hosting for the website and its server endpoints, and the cookieless website analytics described above.
• Resend - delivery of transactional email and the newsletter.
• Google - sign-in, if you choose "Continue with Google". Google's own privacy policy governs what Google does with your Google account.

Beyond these providers we disclose personal data only where the law requires it, or where disclosure is necessary to protect the safety of our users or the public - including reporting child sexual abuse material to the relevant authorities as described in our Child Safety Standards. Our providers may process data in countries other than the one you live in; where they do, we rely on the safeguards those providers maintain for international transfers.

How we protect your data

• All traffic is encrypted in transit (TLS).
• Database access is deny-by-default: clients cannot read tables directly and reach data only through narrowly-scoped server functions that check the caller's identity and permissions.
• Administrative credentials are held server-side only and never shipped to browsers or the app; staff access is limited to a short allowlist.
• On your device, the app keeps session tokens in the operating system's secure storage.
• Passwords are stored hashed, never in plain text.

No system is perfectly secure, but if we learn of a breach affecting your personal data we will notify you as required by law.

How long we keep data

Account data and content are kept for as long as your account exists. Beyond that, the specific windows are:

• Reports (including snapshots of the reported content) - kept 12 months after the report is resolved, then deleted.
• Moderation audit log - kept 24 months.
• Content removed by moderation - retained as evidence for 90 days after removal, then permanently deleted; held longer only while an open report still references it.
• Deletion-request records - a minimal record of each account deletion (user ID, a SHA-256 hash of the email address, timestamps, and where the request came from) is kept for 24 months, then deleted. The email address itself is not kept in readable form.
• Waitlist and newsletter signups - kept until you ask us to remove them or until your account is deleted, whichever comes first.

These safety records are kept even when the account they concern is deleted, because we need them for security, fraud prevention, and legal compliance - the retention Google Play policy permits.

Deleting your account

You can request deletion of your account and associated data at any time, from two places: inside the app (in account settings) or - with or without the app installed - on our public deletion page at trylovo.com/delete-account. On the web page you confirm ownership through a one-time link sent to your email address.

Grace window. Deletion runs 7 days after the request. During those 7 days the account is locked; signing in shows a choice to cancel the deletion (which restores the account unchanged) or let it proceed. After the window, deletion is executed and cannot be undone. We send a confirmation email once it completes.

What is deleted:

• your account and sign-in identity,
• your profile (handle, display name, photo),
• your videos, including the stored video files,
• your comments,
• your likes, saves, view history, and follows,
• your waitlist entries.

What remains:

• Messages you sent remain visible to the people you exchanged them with, shown as coming from "Deleted user" with no profile behind them. They stay part of the other person's conversation until that conversation (or that person's account) is deleted.
• The hashed deletion record and any safety records listed under How long we keep data, for their stated windows.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Deletion is available to everyone through the process above. For anything else, contact hello@trylovo.com and we will respond within the timeframe your local law requires. If you are in the EU/EEA or UK, you also have the right to complain to your data-protection authority.

Children

LOVO is not directed at children. You must be at least 18 years old to create an account, per our Terms of Service. If we learn that an account belongs to someone under that age we will remove it. Our Child Safety Standards describe how we handle child-safety concerns on the platform.

Changes to this policy

When this policy changes we will post the new version at this URL and update the date at the top. For material changes we will give notice in the app or by email before the change takes effect.

Contact

Vali Ollah Mohammadi
Privacy contact: hello@trylovo.com