Consumer Health Data Privacy Notice

Last updated: 2026-10-26

This notice is for people in the United States. It explains how The LoveLust Company SL ("we") treats consumer health data under Washington's My Health My Data Act, Nevada's consumer health data law and similar state laws. It complements our privacy policy, which describes everything we process.

What you record isn't collected

Your diary, partners, cycle, medication, tests and photos stay encrypted on your phone. We never receive them, so we don't collect, share or sell them.

The consumer health data we collect

Only what follows, and only with your consent:

• Intimate data analytics, if you turn it on separately in the app: your sex, gender, sexual orientation and age band, counts of what you record (including protection, medication doses and tests) and the games and intensity you choose. Never names, notes, results or cycle data. Off by default; never collected from anyone under 18.
• Your LoveLust account, if you create one: that you use LoveLust can itself suggest something about your sexual health. We keep your email, how you sign in, where you're signed in and the Plus and rewards on it.
• Survey answers, if you choose to answer: stored without anything that identifies you.

Sources: you, through the app and our websites. We don't buy data or collect it from anyone else.

Purposes: to provide the account you asked for and keep it secure, and, with your consent, to understand how the app is used so we can improve it.

Sharing

We don't sell consumer health data and we don't share it with third parties or affiliates. It is processed only by the providers that host and run our service on our behalf, under contract (our servers at Hetzner in Germany and our self-hosted analytics). We don't use geofencing around health care facilities.

Your rights

You can:

• confirm whether we collect, share or sell your consumer health data, and access it, including the list of every provider it has been shared with;
• delete it, including from our providers and backups;
• withdraw your consent at any time: turn intimate data analytics off in Settings → Privacy, or delete your account.

Download your account's data or delete it at account.lovelust.health, or write to [email protected]. We may need to confirm the request is yours. We reply within 45 days, and we'll never treat you differently for using these rights.

Appeals: if we decline your request, reply to our answer with "appeal". We'll respond within 45 days. If you're not satisfied, you can contact your state's attorney general (in Washington, atg.wa.gov).

Contact

The LoveLust Company SL, Calle Huesa del Común 2, 2C, 50011 Zaragoza, Spain. [email protected]