Privacy Policy

Last updated: December 14, 2025

Our Commitment: Your privacy is fundamental to Luvvy. We use industry-standard encryption to protect your data in transit and at rest. Your messages are stored securely in our systems with strict access controls.

Introduction

This Privacy Policy describes how Z3 Systems, LLC (d/b/a Luvvy.io), a Delaware limited liability company based in Garden City, Idaho, collects, uses, and protects personal information of users of the Luvvy iOS application. It also explains users' privacy rights and how to exercise them.

The app is intended for users aged 17 and older.

1. Information We Collect

Account Information

Basic profile details and account credentials provided by you (such as username, email, age, and relationship status). We collect only what is necessary to create and maintain your account.

Private Chat Messages

Content of chat messages between you and your partner. These messages are stored securely on our servers with encryption at rest and strict access controls. We retain chat data to sync conversations between your devices and to enable AI-powered features like Perspective Check and Daily Briefings when you use them.

Photos for AI Features

Images or videos you upload to use Luvvy's AI-driven features (e.g. "Video Hugs" or "Future Face"). These media files are used to generate the feature's output and may be temporarily stored for processing.

Location Zones (GPS-Based)

If you enable location services, Luvvy collects location zone information rather than precise GPS coordinates. For example, the app may log that you are within a certain city or predefined region ("zone") for feature functionality (such as Warmth Radius), but it does not store your exact latitude/longitude.

Usage Analytics

We gather usage data and device information (such as app feature usage frequency, crash logs, device type, and OS version) to help improve Luvvy's performance and user experience.

Biometric Facial Data

When you use certain AI features, we may generate or collect data about your facial geometry (e.g. a mathematical representation of facial features from a photo) to enable features like Future Face or Video Hugs. We treat this as biometric data and handle it with special care.

2. Biometric Data Disclosure (BIPA Compliance)

Illinois Residents: These biometric data practices are aligned with protections required by Illinois' Biometric Information Privacy Act (BIPA).

Purpose of Collection

Luvvy will only collect or create biometric identifiers for the specific purposes of providing the features you have chosen to use – for example, generating a Future Face image or creating Video Hugs.

Consent Requirement

We will obtain your explicit consent before capturing or utilizing any biometric data via an in-app permission prompt.

No Sale or Sharing

Your biometric data is never sold, leased, or disclosed to third parties for profit or their independent use.

Limited Retention & Deletion

By default, Luvvy will retain biometric data only as long as needed to fulfill the purpose for which it was collected, and in no event longer than 1 year from the date of collection.

3. Third-Party Processors

We do not sell personal information to data brokers or advertisers. We use certain trusted third-party service providers:

Replicate (AI Processing)

We use Replicate's cloud API service for AI features like Future Face and Video Hugs. They act as a data processor and cannot retain or use your content except to deliver results.

OpenAI (AI Content Generation)

Luvvy uses OpenAI for features like Perspective Check and Daily Briefings. We minimize the data sent and OpenAI is contractually restricted from using your data for training.

Google Firebase (Cloud Storage & Analytics)

Our application relies on Google Firebase for backend cloud services such as database storage, user authentication, and analytics.

RevenueCat (Subscription Management)

Luvvy uses RevenueCat to manage in-app subscription purchases. RevenueCat does not receive your chat content or photos.

4. Data Retention

Location Zone Data: Kept short-term, typically discarded after 24 hours.
Biometric Data & AI Outputs: Retained up to 1 year, then deleted.
Account Information: Kept while your account is active, with a 30-day grace period after deletion.
Chat Messages: Stored while your account is active. Deleted when you delete your account.
Analytics Data: Retained for 12-18 months, then deleted or de-identified.

5. User Rights and Choices

In line with regulations like GDPR and CCPA, you have the following rights:

Access Your Data: Request a copy of your personal data.
Rectification: Correct inaccurate information.
Deletion: Delete your account via Settings → Account → Delete Account.
Data Portability: Obtain your data in a portable format.
Opt-Out: Disable analytics, location services, or avoid AI features.

To make any privacy request, contact us at support@luvvy.io with the subject line "Privacy Request". We will respond within 30 days.

6. Children's Privacy

Luvvy is not intended for children under 17 years of age. We do not knowingly collect personal information from individuals under 17.

7. Security Measures

Transport Layer Security (TLS): All communications are encrypted using HTTPS/TLS.
Encryption at Rest: Your data is encrypted when stored on our servers.
Data Storage & Access Control: Firebase Security Rules ensure your data is only accessible to you.
Incident Response: We have a data breach response plan and will notify you as required by law.

8. Contact Information

Email: support@luvvy.io
Privacy Requests: Include "Privacy" in the subject line
Mailing Address: Z3 Systems, LLC (Luvvy.io), Garden City, ID 83714, USA