Privacy Policy

LoveUIDo ("we", "us", "our") provides an AI-guided relationship platform. This policy explains how we collect, use, and protect your personal data when you use our website and app (the "Service").

For data protection purposes, the controller is LoveUIDo, LoveUIDo, 2195 S. Virginia Street, Office #28, Reno, NV 89502, USA, contactable at privacy@loveuido.app. Privacy requests are handled by the LoveUIDo privacy team.

This policy covers users in both the United States and the United Kingdom. For UK users, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018; our supervisory authority is the Information Commissioner's Office (ICO). For US users, applicable state privacy laws apply (including the California Consumer Privacy Act / CPRA and similar state laws) — see Section 9A. Where a section is region-specific, it is labeled.

• Account data: name, email, password (hashed), date of birth (to confirm you are 18+).
• Profile & conversation data: the messages you exchange with Aisa, and the relationship profile she builds with you (how you show up in relationships, your ideal partner, your ideal relationship). This can include sensitive and intimate information about your feelings, relationships, and history that you choose to share.
• Matching data: preferences and information used to suggest and explain potential matches.
• Payment data: if you subscribe, your payment is processed by Stripe, Inc. We do not store your full card details; we receive limited billing information (e.g. subscription status, last 4 digits, billing country).
• Technical data: IP address, device/browser type, and usage analytics, used to run and secure the Service.

Before you create an account, the public landing page offers a short conversation with Aisa. This teaser chat is processed in-session only — we send your messages to our AI provider so Aisa can reply, and then we discard them. Message content is never written to our database and is not used to build a profile.

We do record small non-content aggregates for the visitor funnel: how many turns the conversation reached, the rounded average length of your messages, whether the email prompt was shown, whether you left your email, and a short-lived anonymous session identifier stored in your browser. Your IP is retained briefly for abuse prevention. If you leave your email, it is stored so we can notify you the day we open in your city — see Section 4.

Some of what you share with Aisa may reveal information treated as special category data under UK GDPR (for example, details about your health, sexual orientation, or relationships). We process this only with your explicit consent, which you give when you choose to use Aisa and share this information. You can withdraw consent at any time (see Section 9), though this may mean we can no longer provide the Service.

Aisa is powered by a third-party large language model provided by Anthropic, PBC (USA). To generate Aisa's responses, the relevant parts of your conversation and profile are sent to Anthropic's API for processing.

• Anthropic acts as our sub-processor under Anthropic's Commercial Terms of Service and Data Processing Addendum.
• Under Anthropic's commercial API terms, inputs and outputs submitted through the API are not used to train Anthropic's models. Anthropic retains API inputs and outputs for up to 30 days for trust and safety purposes, after which they are deleted; flagged content may be retained longer where required.
• Other sub-processors we rely on:
  • Lovable Cloud (managed Supabase hosting, USA) — application hosting, database, authentication, and transactional email delivery.
  • Stripe, Inc. (USA) — subscription payments and billing.
  • Amazon Web Services, Inc. (USA) — photo verification via Amazon Rekognition (see Section 5a).
  • Google LLC (USA) — Google Analytics for aggregated product usage (see Section 12).

To keep the community safe, members complete a one-time photo verification before being introduced to matches. When you verify, you take a short live selfie in your browser. That selfie is sent over an encrypted connection to Amazon Web Services (AWS) and processed by Amazon Rekognition, which acts as our sub-processor for identity verification.

Rekognition returns two things:

• A face-detection quality score (confirming a real, single, well-lit face is present).
• A similarity score comparing the selfie to the photos on your LoveUIDo profile.

What we store: only the numeric scores, a verified/not-verified status, the timestamp, and your recorded consent. What we do not store: the selfie image itself, and any face template or embedding generated during the check. We use Amazon Rekognition's stateless CompareFaces and DetectFaces operations, which do not create a persistent face template on our behalf. The selfie bytes exist only in memory for the seconds needed to run the comparison, and are then discarded. We do not keep a searchable biometric database and we do not use your selfie to train any model.

You give explicit consent on the verification screen before any image is captured. You can request deletion of your verification status at any time via Settings → Delete my data; deleting your account removes all verification records.

AWS AI services opt-out: we have enabled the AWS Organizations AI services opt-out policy for the account that runs Rekognition, effective 2 July 2026. This instructs Amazon not to store or use any content we send (including verification selfies) to develop or improve its services.

AWS processes verification requests in the region configured for our account. If you are outside that region, your selfie is transferred internationally for the duration of the check under the safeguards described in section 6.

Free accounts may be shown a small number of curated partner offers, selected using only your city, your age range, and whether you hold a membership.

Separately, you can choose to turn on personalized suggestions — a concierge service where we curate trips, events, and experiences suited to you. If you opt in, we use a limited set of lifestyle information from your profile (such as interests, activity level, and travel preferences) to choose suggestions. We never use your conversations with Aisa, your relationship history, or the emotional content of your love profile for this, and personalized suggestions are off unless you turn them on. You can turn them off at any time in Settings.

In both cases: we do not share any of your personal information with a partner unless you actively choose to engage with their offer and provide it yourself. We may use aggregated, anonymized statistics about our community (never about identifiable individuals) to choose which partners to work with. Nothing here involves "selling" your personal information or "sharing" it for cross-context behavioral advertising as defined under the CCPA/CPRA.

LoveUIDo is operated from the United States and our sub-processors are primarily US-based. If you access the Service from the UK or EEA, your data is transferred to the United States. Where required, we rely on appropriate safeguards including the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (for UK users) and the EU Standard Contractual Clauses (for EEA users), together with the supplementary measures described in this policy.

We do not use your conversations, profile, or verification data to train or improve our own AI models. Aisa's underlying model provider's training position is described in Section 5.

• Account and profile data — kept for as long as your account is active.
• Raw Aisa chat transcripts — automatically deleted on a rolling 90-day window. You can also wipe your own transcripts at any time from Settings.
• Distilled profile insights that Aisa saves from those conversations — kept for the life of your account, because they are what lets Aisa remember you between sessions.
• After account deletion — we delete or anonymise your personal data within 30 days, except limited records we must keep longer for legal, tax, accounting, or safety reasons (e.g. payment records, safety incident records).
• Backups — routine encrypted backups may contain your data for a short period after deletion and age out on their normal rotation.

Under UK GDPR you have the right to: access your data; correct it; delete it ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any of these, email privacy@loveuido.app. You also have the right to complain to the ICO (ico.org.uk).

Depending on the state you live in, you may have rights under laws such as the California Consumer Privacy Act / CPRA, and similar laws in states including Virginia, Colorado, Connecticut, Utah, Texas, and others. These rights typically include the right to know what personal information we collect and how it's used; to access, correct, or delete it; to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising; and to limit the use of sensitive personal information. We do not sell your personal information and do not use it for cross-context behavioral advertising.

To exercise any of these rights, email privacy@loveuido.app. We will not discriminate against you for exercising them. If we deny a request, you may appeal by replying to our response. You may also designate an authorised agent to make a request on your behalf; we may require the agent to provide proof of authorisation and may verify your identity directly.

We protect your data with measures including encryption in transit (TLS), encryption at rest on our managed database, access controls, and row-level security so each user can only access their own data. Verification biometrics are handled as described in Section 5a. No system is perfectly secure, but we take the sensitivity of relationship data seriously and design for it.

The Service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that someone under 18 has registered, we will delete their account and data.

We use essential cookies to run the Service (for example, to keep you signed in). We also use Google Analytics to understand aggregated product usage so we can improve the Service. Google Analytics may set cookies and process a truncated IP address; we do not use Google Analytics for advertising or cross-context behavioral advertising, and Google Signals / advertising features are disabled.

Where the law in your region requires prior consent for analytics cookies (for example in the UK or EEA), we will ask for it via a consent banner before those cookies are set. You can also opt out at any time using your browser's cookie controls or Google's opt-out tools.

We may update this policy. If we make material changes, we will notify you by email and in-app before they take effect.

Questions or requests: privacy@loveuido.app, or by post at LoveUIDo, 2195 S. Virginia Street, Office #28, Reno, NV 89502, USA.

See also our Terms of Service.