This Privacy Notice describes how Loviu ("Loviu", "we"), the seller and data controller of the Service, collects, uses, shares and protects your personal data. By using the Service you agree to the practices described below. We work to comply with GDPR (where applicable) and Brazil's LGPD (Law No. 13.709/2018).

1. Data we collect

Account data: name, email, date of birth and password (stored hashed). If you sign in with Google, we receive your name, email and avatar.
Content you submit: text, screenshots and audio that you send for analysis.
Usage data: conversations, dates, preferred language, preferred voice and usage statistics, used to operate, secure and improve the product.
Payment data: processed by our Merchant of Record, Paddle. We do not store card numbers.
Technical data: IP address, device type, browser and logs, for security and diagnostics.

2. Why we use your data

To provide and operate the Service, including AI analyses;
To personalize your experience (language, voice, chat history);
To process subscriptions and payments (via Paddle);
To ensure security and prevent fraud and abuse;
Essential communications about your account and the service;
To comply with legal obligations.

3. Legal basis

We process your data based on: performance of the contract (to deliver the Service), your consent (for analyses you request), compliance with legal obligations, and legitimate interests for security and fraud prevention.

4. Who we share data with

We share only what is necessary with providers that help us operate the Service:

AI providers that process your text and audio to generate the analyses;
Infrastructure providers for hosting, database, authentication and file storage;
Paddle.com — our Merchant of Record — for the sale of subscriptions, subscription management, payments, tax compliance and invoicing;
Professional advisers (legal, accounting), and authorities when required by law or a court order.

We do not sell your data and do not use your content to train third-party AI models without authorization.

5. International transfers

Part of the processing occurs on servers outside your country. We put contractual safeguards in place with our providers (for example, standard contractual clauses) and require security standards consistent with GDPR / LGPD.

6. Retention

We keep your data while your account is active. When you delete your account, your conversations, analyses, audio and profile data are removed within a reasonable period, except where we must retain data to comply with legal obligations (e.g. tax records).

7. Your rights

You may at any time:

Access, correct and update your data in settings;
Export your conversations;
Delete your account (this removes your personal data and content);
Withdraw consent, restrict processing, object, or request portability where the law grants those rights;
File a complaint with your local supervisory authority (e.g. ANPD in Brazil, or your national DPA in the EEA/UK).

8. Security

We use technical and organizational measures to protect your data, including encryption in transit (HTTPS), access controls, per-user isolation (RLS in the database) and monitoring. No system is 100% secure — if a material incident happens, we will notify you and the authorities as required by law.

9. Children

Loviu is not intended for people under 18. If you are a guardian and believe a minor created an account, contact us to remove it.

10. Cookies

We use essential cookies to keep you signed in and improve performance. You can control cookies in your browser settings.

11. Changes

We may update this Notice. Material changes will be announced in the app or by email.

12. Contact

For privacy questions or to exercise your rights, email privacidade@loviu.app.