Lovelet

Privacy Policy

Draft outline — not yet binding. These headings describe what the real policy has to cover, based on the services this app actually uses. They are not reviewed legal copy — replace them before launch. This page is set to noindex until then.

1. What we collect

List the categories: account email, the content you put on a page (names, photos, audio, messages), recipient replies, payment records held by Stripe, and basic technical logs.

2. Why we collect it

Tie each category to a purpose and a lawful basis — performing the service you asked for, processing payment, preventing abuse, and meeting legal obligations.

3. Page privacy

Published pages live on unlisted URLs and are excluded from search engine indexing. Anyone holding the link can open the page unless you set a passcode. Say plainly that an unlisted link is not the same as a secret.

4. Recipient replies

Explain what happens to a reply — text, voice note, or photo — who can see it, and how a recipient can ask for theirs to be removed.

5. Processors we use

Name each third party and its role: Supabase (hosting, database, file storage), Stripe (payment), Resend (email), Pexels (background media). Link to their own policies.

6. Retention

Free pages and their uploads are removed after the 7-day window. State how long Premium pages, account records, and logs are kept, and what deleting your account removes.

7. Your rights and contact

Describe how to access, correct, export, or delete your data, and give the contact address for privacy requests plus the supervisory authority for your jurisdiction.