Privacy Policy

Unlike most apps, we'll start with what we don't collect, because the list of what we do collect is much shorter:

• Health data: Period dates, symptoms, moods, fertility tracking, pregnancy data, BBT readings, notes - all stored only on your device
• Personal identifiers: No names, emails, phone numbers, or accounts
• Location data: Never collected
• Device identifiers: No advertising IDs, no device fingerprinting
• Usage analytics: No tracking of how you use the app

2.1 Website Analytics (This Website Only)

On this website (lova.health), we use privacy-respecting analytics:

• Page views (aggregated, not individual)
• Referral sources
• General geographic region (country level)
• Device type (mobile/desktop)

We use Plausible Analytics, which doesn't use cookies, doesn't track individuals, and is GDPR-compliant by design.

2.2 Crash Reports (Optional)

If you opt in to crash reporting:

• Technical information about the crash
• Device model and OS version
• App version

Crash reports never include health data. This feature is off by default and requires explicit opt-in.

2.3 Support Requests

If you contact us for support:

• Email address (to respond)
• Any information you choose to share

We delete support correspondence after 90 days unless you request otherwise.

2.4 Educational Content (Learn Library)

When you use the in-app Learn library, the app contacts our content service (content-api.lova.health) to download articles and run content searches. To deliver and improve that content, each request includes:

• A random, anonymous per-installation token (not linked to your name, email, or any account)
• Your app version and device platform
• The search terms you type into the Learn library

This never includes your health, cycle, symptom, or tracking data, is never linked to your identity, and is never used for advertising. If you do not use the Learn library, this data is not sent.

All health data is stored locally on your device:

• Database: Encrypted on-device database (AES-256)
• Keys: Stored in OS secure storage (Keychain, Keystore, etc.)
• Location: App's private storage container

You control all sharing:

• Partner sharing: Direct device-to-device, you control permissions
• Export to doctor: FHIR/CSV/JSON files you create and send
• Device backup: May be included in OS backups (encrypted)

We cannot share your data because we don't have it.

The Lova app does not include:

• Third-party analytics SDKs
• Advertising networks
• Social media integrations
• Any SDK that transmits health data

Subscriptions and payment processing

Lova offers an optional premium subscription. To sell and validate subscriptions, a limited amount of non-health data is processed by third parties:

• Apple In-App Purchase and Google Play Billing process the payment itself.
• RevenueCat, Inc. validates your subscription status. RevenueCat receives a randomly generated, anonymous app user ID and purchase receipt metadata (e.g., transaction ID, product ID, purchase date).

These providers never receive your health data, cycle logs, symptoms, notes, or any personal tracking information. See their policies: Apple, Google, and RevenueCat.

Your health data remains on your device until you delete it. We cannot impose retention policies on data we don't have.

For the limited data we may collect (website analytics, crash reports, support):

• Website analytics: Aggregated, no individual data retained
• Crash reports: 90 days
• Support requests: 90 days after resolution

You have complete control over your data:

• Access: All data is already on your device
• Portability: Export anytime in FHIR, CSV, or JSON
• Deletion: Delete instantly in the app
• Correction: Edit any entry directly

For GDPR, CCPA, or other privacy law requests regarding website/support data, contact us via our contact form.

Lova is not directed at children under 13. We do not knowingly collect data from children. Since we don't collect user data in general, this is inherently enforced.

Since your data stays on your device, there are no international data transfers for health information. Website analytics may be processed in the EU (Plausible is EU-based).

We may update this policy to reflect changes in our practices or for legal reasons. We will note the date of the last update at the top of this page.

For privacy questions or concerns:

• Contact us via our contact form