Love Profile Privacy Policy

1. Information we process

The information depends on the features you use and may include:

• Profile: birthday or age, gender, height, zodiac sign and relationship status you provide, plus display name, email and avatar URL.
• Questionnaires and analysis: answers, scores, dimension results, analysis records and completion times.
• Discover interactions: responses, selections and preferences you submit, with related categories and times, to display interaction results and preference analysis.
• Plans and supporting records: plan selections, start and end dates, progress, task feedback, mood and practice records, daily signs, wishes, prayers, and future-letter contents and dates.
• Account: identifiers, email, name and avatar supplied by sign-in services, and session tokens needed to maintain sign-in. Local mode uses a randomly generated identifier; cloud account recovery may also process recovery tokens and a hash of an Android device identifier.
• Operation: IP addresses, request times, device and operating system information, app version, and screen-view events, errors and crash logs when the relevant diagnostic services are enabled.
• Contact: email address, messages and attachments you voluntarily send with feedback or privacy requests. In-app feedback also stores a reference, category, app version, platform, language and account identifier when signed in. Feedback drafts stay on your device until submission succeeds.

2. How we use information

We use information to save and display your profile and results, recommend plans or daily steps based on relationship status, questionnaire results and mood, record progress, schedule reminders you set, provide sign-in, recovery and cross-device sync, troubleshoot issues, protect the service and respond to feedback.

Questionnaires and relationship records may contain private information. Only provide content you want to use for these features, and avoid entering another person’s identity, contact details or private information without permission. Analyses and plan suggestions support self-understanding and are not medical diagnoses or professional treatment advice.

3. Local storage and cloud sync

When you are signed out, core profile, questionnaire history and plan records are primarily stored on your device. Local mode does not mean there is no network communication: the app may still contact initialization, sign-in or diagnostic services, while syncing personal records requires a valid cloud account.

After sign-in, supported profile, questionnaire history, plan progress and supporting records are linked to your account and saved or restored through Supabase. Existing local records may also be migrated and synced to that account during sign-in. Local records remain available if cloud sync fails, and later actions may retry synchronization.

Signing out stops subsequent sync under that account but does not automatically delete existing cloud data. Local and operating-system secure storage hold records, preferences, and session or recovery credentials. Uninstalling, clearing app data or changing devices may lose records that have not been synced. System backup and secure-storage retention depend on the device platform.

4. Public wishes and sharing

Only when you choose to publish a wish publicly are its content, category, gender information you provide and publication time added to the world-wishes list for other users. The list does not display your name or email, but the server retains an association between the publication and your account. Anonymous display therefore does not mean the service cannot identify the publisher.

Do not include contact details or another person’s private information in public content. Reports and other content you export or send through system sharing are handled by the recipients or apps you choose. Contact us using the email in this policy to request removal of published content.

5. Third-party services and disclosure

The app currently uses the following services. Providers may process information needed to deliver their services, according to their policies and the features you use. We do not sell personal information. Other than delivering selected services, complying with legal obligations or acting with your authorization, we do not disclose your personal records for other purposes.

• Supabase: authentication, cloud database and realtime sync; processes account identifiers, authentication credentials and app records synced to the cloud.
• Google Sign-In and Sign in with Apple: verify your identity when you choose that sign-in method and provide account information within the permissions granted.
• Firebase Analytics and Crashlytics: process usage events, device or app information and diagnostic logs on devices where these services are supported and enabled. Firebase initialization checks Google services availability on Android, and the debug build disables Crashlytics crash collection. Diagnostic logs may include technical identifiers or error details from the affected operation.
• Cloudflare: hosts this policy and the Lovkai website and processes network requests needed to deliver and protect them. This static webpage has no advertising, site analytics scripts or tracking cookies.

6. Device permissions and reminders

The app uses network access for sign-in and cloud services and can schedule local reminders, such as future letters, after notification permission is granted. Time-zone information determines reminder times; Android boot events restore scheduled reminders. You can disable notification permission in system settings, which may prevent delivery. Reminder content may appear on your lock screen; adjust notification previews as needed.

Local storage, PDF export, system sharing and secure storage use the relevant platform capabilities. Current core features do not depend on reading contacts, precise location, the microphone or the camera.

7. Retention and security

Local records generally remain until you delete them in the app, clear app data or the device system removes them. Cloud records are retained as needed for account, sync and recovery services, or handled following a verified deletion request. Legally required records and service backups may require additional retention under applicable law or provider backup cycles.

We use measures including HTTPS transmission, account access controls and operating-system secure storage. Ordinary local records and cloud-synced records are not end-to-end encrypted and should not be treated as a vault that only you can decrypt. Protect your device, sign-in account and recovery credentials.

8. Access, correction, deletion and other rights

You can view or edit your profile in the app and use available page actions to manage records, export reports or sign out. You can also email us to request access, correction, deletion of personal information or a cloud account, restriction of processing, or other rights available under applicable law. We may verify account ownership and will process requests or explain limitations within the time required by applicable law.

After confirmation, “Delete Account” in the profile center permanently deletes the current cloud account, linked questionnaire and plan records, supporting records, public wishes, interaction records and feedback submitted while signed in. It also clears related local records, recovery credentials and reminders. This cannot be undone; a failed server deletion is not reported as successful. For feedback submitted while signed out or other privacy requests, email us with the feedback reference or your sign-in email and the request scope. Do not send passwords or full session or recovery tokens.

9. Service locations and international processing

Cloud, sign-in, diagnostic and hosting services may use infrastructure outside your country or region. Using cloud sync or third-party services may result in relevant information being processed abroad. We will apply protections required by applicable law. Contact us for information about processing locations relevant to your account.

10. Minors

If you are below the age at which you may independently consent to processing under local law, a guardian should review this policy and consent where required. Avoid providing unnecessary private information. Guardians who believe a minor provided information without appropriate authorization may contact us for verification and deletion.

11. Changes and contact

We will update this page and its effective date when features, providers or processing practices change. For material changes to information uses or rights, we will provide notices required by applicable law and obtain consent where needed. Send privacy questions, rights requests and requests to remove public content to the email below.