Privacy Policy

1. Who We Are

LoveSpot ("we", "us", "our") operates the LoveSpot dating application and website at lovespotapp.com. For privacy questions, contact us at support@lovespotapp.com.

2. Information We Collect

Information you provide

• Account information: Name, date of birth, email address, and password (hashed).
• Profile information: Photos, videos, voice clips, bio, gender, location (city-level), preferences, and interests.
• Verification data: Selfie photo for face verification; optional government ID for verified badge. This data is processed securely and not stored beyond verification.
• Communications: Messages, voice notes, and call metadata you send through the app.
• Payment information: Processed securely by Stripe or Paystack — we never see or store raw card numbers.

Information collected automatically

• Usage data: Profiles viewed, swipes, matches, app activity, and feature usage.
• Device data: Device type, OS version, app version, and crash reports.
• Location: Approximate location (city/region-level) for matching. Exact GPS coordinates are never stored.
• Log data: IP address, timestamps, and error logs for security and debugging.

3. How We Use Your Information

• Matching: To surface compatible profiles based on your preferences and location.
• Safety: To detect fake profiles, spam, harassment, and scam behaviour.
• Service delivery: To process subscriptions, activate boosts, and manage your account.
• Improvement: To understand how features are used and improve the product.
• Communications: To send transactional emails (payment receipts, match notifications). Marketing emails require your explicit opt-in.
• Legal compliance: To comply with applicable laws and cooperate with law enforcement when legally required.

4. How We Share Your Information

We never sell your personal data. We share it only as follows:

• Other users: Your public profile (photos, name, age, bio) is visible to other LoveSpot users. Messages are visible only to the recipient.
• Service providers: Supabase (database/auth), Stripe and Paystack (payments), Agora (video calls), Sentry (error monitoring), RevenueCat (subscriptions). All are bound by data processing agreements.
• Legal requirements: When required by law, court order, or to protect the rights and safety of users or the public.
• Business transfers: If LoveSpot is acquired or merged, user data may be transferred. We will notify you in advance.

5. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the data we hold about you.
• Correction: Update incorrect information via your profile settings.
• Deletion: Delete your account and all associated data via Settings → Account → Delete Account, or by emailing us.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing, including direct marketing.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any right, email support@lovespotapp.com. We respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

• Your profile, matches, and messages are deleted immediately.
• Aggregated, anonymised analytics data may be retained indefinitely.
• Payment records are retained for 7 years as required by financial regulations.
• Safety records (e.g., ban logs) may be retained to prevent re-registration by bad actors.

7. Security

We use industry-standard security practices: TLS encryption in transit, hashed passwords, Row Level Security (RLS) on our database, and regular security audits. No system is 100% secure — if you suspect a breach, contact us immediately at support@lovespotapp.com.

8. Children's Privacy

LoveSpot is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover an account belonging to a minor, we will delete it immediately.

9. International Data Transfers

Our servers are hosted via Supabase (EU region). If you are based outside the EU, your data may be transferred internationally. We rely on Standard Contractual Clauses (SCCs) and other appropriate mechanisms for such transfers.

10. Cookies

Our website uses strictly necessary cookies for session management. We do not use advertising or tracking cookies without your explicit consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email or an in-app notification at least 14 days before the change takes effect. Continued use of LoveSpot after that date constitutes acceptance.

12. Contact

For privacy concerns, data requests, or complaints: