Document type: Privacy Policy
Version: 1.0
Effective date: June 3, 2026
Last updated: June 3, 2026
Important legal notice. This document is provided for informational and operational purposes and does not constitute legal advice. Although it has been drafted to reflect the actual data practices of the LovUp application and to align with the principal international privacy frameworks (LGPD, GDPR, UK GDPR, CCPA/CPRA, PIPEDA, Swiss FADP, Australian Privacy Act and others), review and approval by qualified legal counsel in each relevant jurisdiction is strongly recommended before production use.
LovUp ("LovUp", the "App", the "Service") is a mobile application that helps couples celebrate and document their journey together. The App allows two paired partners to keep a shared journal of memories (including photos), answer relationship quizzes, maintain shared lists, play relationship games, complete monthly check-ups, track relationship milestones, and stay connected through profile information and optional location sharing.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how long we keep it, the choices and rights available to you, and how we protect it. Please read it carefully. By creating an account or using the App, you acknowledge that you have read and understood this Privacy Policy.
The entity responsible for processing your personal information (the "Controller" under GDPR / the "Controlador" under LGPD / the "Business" under CCPA/CPRA) is:
| Field | Detail |
|---|---|
| Legal entity name | KAMPLISH – DESENVOLVIMENTO DE SISTEMAS LTDA |
| Trade name | KAMPLISH |
| Company registration (CNPJ) | 35.977.805/0001-74 |
| Legal form | Sociedade Empresária Limitada (Limited Liability Company) |
| Registered address | Av. Marquês de São Vicente, 1619, Edif. LED Barra Funda, Conj. 1510, Várzea da Barra Funda, São Paulo – SP, CEP 01.139-003, Brazil |
| Privacy / data protection contact | support@lovup.app |
References to "we", "us", or "our" in this Policy mean KAMPLISH – DESENVOLVIMENTO DE SISTEMAS LTDA.
couple_id.This Policy applies to personal information processed through the LovUp mobile application on iOS and Android (bundle identifier com.kamplish.lovup.app), associated back-end services, push notifications, the iOS home-screen widget, and any related support communications.
It does not apply to third-party services that you access through the App and that operate under their own privacy policies (for example, the Apple App Store, Google Play, or Google services), except to the extent we share data with them as described in this Policy.
We collect the following categories of personal information, organized by source and purpose. We only collect what is necessary to operate the features you use.
profiles storage bucket)couple_id) linking the two accountsmemories storage bucketaudit_log)consent_records) documenting consents you have given or withdrawn, for accountability and complianceSome data is stored locally on your device to make the App work offline and load quickly, including a local SQLite database (lovup_db_v1.sqlite), securely stored authentication tokens (in the platform secure keystore/keychain), app preferences, an image cache, and data shared with the iOS home-screen widget through the App Group group.com.kamplish.lovup.app. This local data remains on your device and is removed when you uninstall the App (subject to platform behavior and backups you control).
We process personal information for the following purposes:
We do not sell your personal information and we do not use your content to build advertising profiles.
Where the GDPR, UK GDPR, or LGPD applies, we rely on the following legal bases (GDPR Art. 6; LGPD Art. 7 / Art. 11):
| Purpose | Legal basis (GDPR/UK GDPR) | Legal basis (LGPD) |
|---|---|---|
| Account creation, authentication, core features | Performance of a contract (Art. 6(1)(b)) | Execution of a contract (Art. 7, V) |
| Couple pairing & shared content | Performance of a contract / Consent | Execution of a contract / Consent |
| Precise location features | Consent (Art. 6(1)(a)) | Consent (Art. 7, I) |
| Push notifications (non-essential) | Consent | Consent |
| Security, fraud prevention, diagnostics | Legitimate interests (Art. 6(1)(f)) | Legitimate interest (Art. 7, IX) |
| Subscription processing | Performance of a contract | Execution of a contract |
| Legal compliance, record-keeping | Legal obligation (Art. 6(1)(c)) | Compliance with legal/regulatory obligation (Art. 7, II) |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms, and you may object as described in Section 15.
LovUp is built around two people sharing a connected experience. When you pair with a Partner:
Because the Service is inherently shared between two Users, certain data cannot be made private to one partner without breaking core functionality. Please consider this before sharing sensitive content.
Location features are optional and require your explicit permission through your device's operating system.
We treat precise location as protected information and do not use it for advertising.
We share personal information only as described below:
We do not sell personal information for money, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.
We rely on the following categories of third-party providers. Each operates under its own privacy terms and, where required, a data processing agreement and appropriate transfer safeguards.
| Provider | Role / purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database, file storage, and back-end functions (core hosting/infrastructure) | Account, profile, relationship, journal, activity, photos, location, logs |
| Google LLC — Firebase Cloud Messaging | Delivery of push notifications | Device push token, notification metadata |
| Google LLC — Google Sign-In | Federated authentication | Google account identifier, email, name |
| Google LLC — Google Maps Platform / Geocoding | Maps display and reverse geocoding | Approximate/precise location, IP |
| Google LLC — Google Fonts (runtime fetch) | Loading fonts used in the UI | IP address (transient, to Google font servers) |
| Apple Inc. — Sign in with Apple | Federated authentication | Apple account identifier, optional relay email, name |
| Apple Inc. — Apple Push Notification service (APNs) | iOS push delivery | Device push token |
| Sentry | Crash, error, and performance monitoring | Device model, OS, app version, stack traces, IP, transient diagnostic data |
| RevenueCat | Subscription management and entitlement validation | Purchase receipts, subscription status, app-assigned purchaser ID |
| Apple App Store / Google Play | Payment processing and billing | Payment data handled directly by the stores (we do not receive card data) |
An up-to-date list of sub-processors is available on request at support@lovup.app.
We are established in Brazil, and our providers may process data in the United States, the European Union, and other countries. When personal data is transferred across borders, we use lawful transfer mechanisms, which may include:
You may request more information about these safeguards at support@lovup.app.
We retain personal data only for as long as necessary for the purposes described in this Policy, after which it is deleted or anonymized:
| Data category | Retention rule |
|---|---|
| Account & profile data | While your account is active; deleted within 30 days of verified account deletion request (subject to legal exceptions) |
| Journal memories, quizzes, lists, games, check-ups | While your account is active or until you delete the content |
| Precise location | Retained only as needed for the active feature; coordinates are updated/overwritten rather than accumulated as a history |
| Push device tokens | Until the token becomes invalid or you disable notifications/uninstall |
| Diagnostic/crash data | Typically up to 90 days at our diagnostics provider |
| Security/audit logs | Retained as needed for security and legal accountability |
| Consent records | Retained for the period required to demonstrate compliance |
| Subscription/transaction records | Retained as required by tax, accounting, and consumer-protection law |
Local on-device data is removed when you uninstall the App, subject to device backups you control.
We implement administrative, technical, and physical safeguards appropriate to the risk, including:
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we maintain procedures to detect, respond to, and, where legally required, notify you and the competent authority of a personal data breach without undue delay (e.g., GDPR Arts. 33–34; LGPD Art. 48).
Subject to applicable law and verification of your identity, you may exercise the following rights:
Residents of Canada (PIPEDA), Switzerland (FADP), Australia, and other regions have comparable rights, which we honor to the extent required by local law.
Email support@lovup.app, or use in-app account controls where available (including account deletion). We will respond within the timeframe required by applicable law (generally 30 days under GDPR/CCPA, extendable where permitted; LGPD requests are handled promptly). We may need to verify your identity before acting. You may use an authorized agent where the law allows.
LovUp is a mobile application and does not use browser cookies for advertising or cross-site tracking. However, the App and its providers use similar technologies and local identifiers, including:
We do not use these technologies for behavioral advertising. Any web pages we may operate (such as deep-link landing or support pages) will present a cookie notice where required by the ePrivacy Directive/PECR.
We do not use solely automated decision-making that produces legal or similarly significant effects on you, and we do not use your data for profiling for advertising. Quiz outcomes and similar in-app results are entertainment features that do not produce legal effects. If this changes, we will update this Policy and provide the disclosures required by GDPR Art. 22 and LGPD Art. 20, including the right to request human review.
LovUp is intended for adults (18 years of age or older) and is not directed to children. We do not knowingly collect personal information from children under the age of 13 (or under 16 where a higher age of digital consent applies under local law, such as in parts of the EU/EEA).
If you believe a child has provided us personal information, contact support@lovup.app and we will take steps to delete it. We comply with COPPA and the children's-data requirements of the GDPR and LGPD.
LovUp does not require you to provide special-category/sensitive data. However, because the App lets you write free-text content and upload photos, you control what you share, and such content could reveal sensitive information (for example, relationship intimacy, location patterns, or imagery). We ask that you avoid uploading sensitive data you do not wish to process. Where you voluntarily provide sensitive data, you consent to our processing it to deliver the features you use. Precise location is treated as protected information (see Sections 9 and 15.3).
With your permission, we send push notifications via Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS), such as anniversary reminders and quiz invitations. You can manage notification categories in the App's notification preferences and disable notifications entirely in your device settings. We may also send essential, non-promotional service messages (for example, security or account notices).
LovUp offers an optional paid subscription ("Pro"). Purchases are processed by the Apple App Store and Google Play, and subscription entitlements are validated through RevenueCat. As a result:
The App may contain links to third-party websites or services (for example, music or map content). We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them personal information.
The Controller is KAMPLISH – DESENVOLVIMENTO DE SISTEMAS LTDA (Section 2). For all privacy matters, including the role of Data Protection Officer (DPO) / Encarregado pelo Tratamento de Dados Pessoais (LGPD Art. 41), you may contact:
If you believe your rights have been violated, you may lodge a complaint with the competent authority, including:
We would, however, appreciate the chance to address your concerns first — please contact us at support@lovup.app.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where required by law, notify you in the App or by other appropriate means before the changes take effect. Your continued use of the App after the effective date constitutes acceptance of the updated Policy, except where additional consent is required by law.
KAMPLISH – DESENVOLVIMENTO DE SISTEMAS LTDA
Av. Marquês de São Vicente, 1619, Conj. 1510, Várzea da Barra Funda
São Paulo – SP, CEP 01.139-003, Brazil
CNPJ 35.977.805/0001-74
Email: support@lovup.app