Privacy Policy

lovnote is operated by ⟨⟨PREENCHER: razão social ou nome completo do controlador⟩⟩, registered under ⟨⟨PREENCHER: CNPJ ou CPF⟩⟩, acting as the controller of the personal data processed in the service.

For any request about your data, write to hello@lovnote.app. We reply within 15 days.

Account data: your display name, email and preferred language.

What you write: diary entries, photos, places and dates, answers to the daily question, letters kept in the time capsule, important dates and savings goals.

Payment data: only the customer identifier and the subscription status. Card details stay with Stripe and never reach us.

Usage data: which screens are opened and which actions are completed, so we can understand what works.

Notifications: if you turn them on, we store the technical endpoint your browser generates to receive them.

To run the diary: store what you write, show it back, remind you of dates and bring old memories back.

To charge the subscription and keep access active.

To send the only three emails the product sends: sign-up confirmation, password recovery and partner invitation. We send no marketing email.

To improve the product, from aggregated usage data.

We do not sell your data, do not share it for advertising, and do not use your diary content to train any model.

Only the providers needed for the service to work:

Supabase — database, authentication and photo storage. Servers in the United States (us-east-1).

Vercel — hosting and application runtime. Servers in the United States.

Stripe — payment processing. Your card details are collected and stored by Stripe; we never receive or store them.

PostHog — product usage measurement (which screens are opened, which actions are completed).

Resend — delivery of sign-up confirmation, password recovery and invitation emails.

Language and image model providers, accessed through the Vercel AI Gateway — they receive text or a photo only at the moment you request a creation in the AI Lab.

The servers holding your data are in the United States. If you are in the European Economic Area or the United Kingdom, this means your data is transferred outside that area.

The transfer relies on the contractual safeguards offered by each provider listed above, including the European Commission's Standard Contractual Clauses where applicable.

No AI creation happens on its own. It runs only when someone asks for it, and only after both people in the diary have authorised it, separately.

When a creation is requested, the necessary text is sent to the provider at that moment and only for that purpose. The provider does not retain the content or use it to train models.

Photos are never sent in bulk: only the one you choose, one at a time, and only for the requested creation.

Until both people authorise, nothing is sent.

Nothing in the diary is public by default. There is no feed, no followers, no likes.

Couples ranking: off by default. If you turn it on, it shows each first name, the day count together and the streak of consecutive days writing. Never the content. You can leave at any time.

Year in review: the cards you can download and share show numbers only. Nothing you wrote appears on them.

Public link to the review: off by default. If you create one, whoever has the address sees each first name and the same numbers as the cards. Turning it off stops access immediately, and creating it again gives a different address — the old one never works again.

Photos are kept in private storage and delivered through signed links that expire. There is no open address for a photo of yours.

Isolation between diaries is enforced by the database, not by the application screen — which means it holds even for someone trying to reach the data outside the interface.

The answer to the daily question is only revealed after you write your own, and that rule is enforced by the database too.

No system is immune to incidents. If one occurs that may create a relevant risk to you, we will notify you and the competent authority.

You may confirm processing, access, correct, delete, port your data and withdraw consent.

Two of these are already built into the app, with nothing to request: Settings → Your data downloads everything you wrote in a single file, and Settings lets you leave or permanently delete the diary.

For the rest, write to hello@lovnote.app.

For as long as the account exists. Deleting the diary removes the content and the photos.

Records required by law — billing records, for instance — are kept for the corresponding legal periods.

We use strictly necessary cookies to keep you signed in. Without them the app does not work.

We also measure product usage (PostHog). We use no advertising cookies and do no cross-site tracking.

lovnote is for people aged 18 or over. We do not knowingly collect data from children. If we learn of such an account, it will be removed.

If we change something relevant, we will tell you in the app or by email before it takes effect. The date of the last revision is at the top of this page.