LoveLust Privacy Policy

Last updated: 27 October 2026

With LoveLust, what you record stays on your phone and never reaches our servers. We don't sell your data or use advertising networks. This policy explains what other data we process, why, for how long, and how to exercise your rights.

Basic information

• Controller: The LoveLust Company SL.
• Purposes: providing the service and, if you create one, your account; protecting your account; sending you marketing and measuring how the app is used, only if you agree; and keeping the app working properly.
• Legal basis: performance of the contract, your consent and our legitimate interest.
• Recipients: providers that process data on our behalf, some in the USA with appropriate safeguards. We don't sell or hand over your data.
• Rights: access, rectification, erasure, objection, restriction, portability and withdrawal of consent.
• More information: in the sections below.

1. Controller

The LoveLust Company SL, NIF B88747696, Calle Huesa del Común 2, 2C, 50011 Zaragoza (Spain). You can contact us and our data protection officer at [email protected].

2. What we don't collect

Your activity, partners, cycle, medication, tests and photos are stored encrypted on your phone and never reach our servers. They only leave it if you decide so:

• Apple Health or Health Connect, if you turn the integration on. The app reads and writes that data on your phone only: it never sends it to our servers, never uses it for advertising, and never sells it or passes it to third parties.
• Backup to your Google Drive or iCloud, encrypted on the phone. We never receive the backup or its key. Without a passphrase, its protection depends on the security of your Google or Apple account.
• Maps: if you add a place to a record, Apple or Google receive its coordinates to show it.
• Sharing or exporting, to wherever you choose.

3. What we process and why

Using the app. To send you notifications, activate Plus and not repeat rewards, we keep a random purchase identifier, your language, platform, app version, notification token, preferences, Plus status, and the rewards and codes you have redeemed. Basis: performance of the contract (GDPR art. 6.1.b).

LoveLust account (optional). Your email address, the name and avatar you choose, how you sign in (passkeys and, if you link them, your Apple or Google accounts), and the Plus and rewards on your account. Basis: performance of the contract (art. 6.1.b).

Account security. For each session we keep the device, the IP address, the approximate city and country (worked out on our server, without sending your address to anyone) and when it was last used, as well as your security activity. We use them to show you where you're signed in and to warn you about sign-ins from new devices or countries. Basis: legitimate interest in protecting your account (art. 6.1.f).

Marketing communications. We only send you promotions and news by notification or email if you consent, which we ask for expressly in the app, and you can withdraw at any time in the settings. Basis: consent (art. 6.1.a). Sign-in codes, security alerts and messages about your account are part of the service.

Analytics. We use Aptabase, hosted on our own servers, with a random session code and never your identity. Without your consent we only record that the app was opened and your answer to the analytics question (legitimate interest, art. 6.1.f). With your consent we also record how screens and features are used (art. 6.1.a). With a separate, explicit consent we record intimate data: sex, gender, sexual orientation, age band and counts of what you record, never its content (art. 9.2.a). Both are off by default. If you decline analytics, we'll ask you only once more, after at least six months.

Errors and performance. Sentry, EAS Observe (Expo) and Firebase Remote Config (Google) receive technical data about the device and the app, with installation identifiers, but not your content. Basis: legitimate interest in the app working (art. 6.1.f). You can turn this off in Settings → Privacy.

Surveys. They are voluntary. Your answers are stored without anything that identifies you. Basis: consent (art. 6.1.a).

Purchases. RevenueCat validates your purchases with its identifier and your transaction history. We never see your card details. Basis: performance of the contract (art. 6.1.b).

Websites. lovelust.health and account.lovelust.health count visits without cookies or identifiers, and you can opt out under "Privacy choices", at the foot of the lovelust.health home page. The account site only uses technical cookies: your session and your language.

We don't make automated decisions about you. Providing this data is voluntary, but without it we can't offer the features that depend on it.

4. Retention

• App record: up to 12 months without use, or 30 days after you ask us to delete it. The value that stops a code being redeemed twice on the same phone is deleted 90 days after redemption or after the promotion ends.
• Account: for as long as you keep it. If you delete it, it is paused for 30 days and then erased. If it isn't used for two years, we warn you and erase it a month later, unless it has active Plus.
• Sessions: up to 30 days after their last use.
• Security activity: 90 days.
• Analytics: 12 months.
• Encrypted backups: 35 days.

5. Recipients and transfers

We don't sell your data or use advertising networks. Only these providers access it, on our behalf and under contract:

• Hetzner (Germany): servers.
• Backblaze (EU): encrypted backups.
• Sentry (EU): errors.
• Cloudflare, Resend, RevenueCat, Expo and Google (USA): secure connection, email, purchases, notifications and technical services.

Apple and Google also process your data as controllers when you use their services (sign-in, stores, health, maps or backup). Transfers to the USA rely on the EU-US Data Privacy Framework or, otherwise, on the European Commission's standard contractual clauses.

6. Your rights

You can access, rectify and erase your data, object to or restrict its processing, and ask for it in a portable format. You can also withdraw your consent at any time without affecting earlier processing.

• On the account site you can download your data, change your email and delete your account.
• In the app you can export your records and manage your consents in Settings.
• For anything else, write to [email protected]. We reply within one month.

If you disagree with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country. If you live in the USA, you have the same rights, and our consumer health data notice supplements this policy.

7. Minors

LoveLust is for people aged 16 and over. We don't ask 16- and 17-year-olds for intimate data analytics or send them marketing, and we hide content meant for adults. If you believe someone under 16 has used the app, write to us and we will delete their data.

8. Security

Your records are encrypted on the phone with AES-256. Your account is protected with passkeys or one-time codes, with no passwords. Data is hosted in the EU, and our technical logs don't keep IP addresses or emails. If a security breach affected you, we would notify the supervisory authority and, where required, you.

9. Changes

We'll tell you about important changes in the app and, if you have an account, by email. If a change needs your consent, we'll ask for it again.

Earlier versions: 26 and 20 October 2026 and before, available on request. In case of discrepancy between translations, the Spanish version prevails.