We only process the data needed to run Lovencor and to protect its users. We do not advertise and we never sell your data.
1. Data controller
, , , company number . For any question or to exercise your rights: contact@lovencor.com.
2. What data, why and for how long
| Data | What it is used for | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Account: first name, last name, email, password (hashed, never readable), language | Creating and managing your account, sending you service emails (confirmation, forgotten password) | Performance of the contract (Art. 6.1.b) | Until the account is deleted |
| Date of birth | Checking the minimum age and applying age-related protection rules, including through an automated decision (section 7) | Performance of the contract (Art. 6.1.b) and protection of minors (legitimate interest, Art. 6.1.f) | Until the account is deleted |
| Relationships: partners, invitations (including the invited person's email), relationship profile, crush, blocks | Running your relationships, preventing unwanted contact | Performance of the contract (Art. 6.1.b) | Until the relationship ends or the account is deleted |
| Messages: chosen catalogue message, sender, recipient, date, read status, reaction; scheduled messages | Delivering messages and showing the history | Performance of the contract (Art. 6.1.b) | 30 days without Lovencor+, 1 year with Lovencor+, then automatic deletion |
| Data about intimate life: turning on adult content, intimate profiles (for example "Intimate relationship") and messages from adult-only categories | Only to run these profiles and categories | Explicit consent (Art. 9.2.a), given once by each partner, with a separate box that is unticked by default, in My account or the first time they suggest or accept an intimate profile | Same as messages; the date of your consent is kept as long as your account exists. You can withdraw your consent at any time, on your own and without your partners' agreement, in My account: adult-only categories, intimate profiles and the adult messages already exchanged then disappear from all your relationships, and we stop this processing |
| Important dates, notification preferences, time zone | Reminders and notifications at the right time | Performance of the contract (Art. 6.1.b) | Until the account is deleted |
| Device: notification token, operating system (Android, iOS), language | Sending notifications | Performance of the contract (Art. 6.1.b) | Until you sign out or the account is deleted |
| Purchases: product, store transaction ID, dates | Activating Lovencor+ and packs, avoiding duplicate purchases | Performance of the contract (Art. 6.1.b) | Until the account is deleted |
| Reports: reason, comment, names, emails and ages of the people involved, relationship profile, last 20 messages exchanged | Moderation, safety, protection of minors, compliance with our legal obligations | Legitimate interest (Art. 6.1.f) and legal obligation (Art. 6.1.c; Digital Services Act, Art. 16 to 18) | 12 months after the report is handled, longer if proceedings require it |
| Signs of abnormal use: sending volumes, declined invitations, blocks and reports received, relationships between an adult and minors | Detecting abuse and protecting minors. Each case is reviewed by a person; no decision is taken automatically. This is profiling, which you can object to (section 7) | Legitimate interest (Art. 6.1.f) | Not stored: calculated when the moderation team looks at them |
| Internal statistics: dates of sign-up, first relationship and first message, usage volumes | Measuring and improving the use of Lovencor, only as overall figures | Legitimate interest (Art. 6.1.f) | Until the account is deleted; the anonymous overall figures are kept |
| Encrypted fingerprint (hashing with a secret key) of the email address of a deleted account that had been blocked | Keeping the block active if an account is created again with the same address | Legitimate interest (Art. 6.1.f) | As long as the block exists; deleted as soon as the block is lifted or the account of the person who blocked is deleted |
| Server technical logs (including IP address) and the app's error log (including the identifier of the account concerned) | Security and troubleshooting | Legitimate interest (Art. 6.1.f) | 30 days maximum |
Account data and date of birth are needed to conclude the contract: without them, signing up is not possible. Other data is optional or results from your use of Lovencor.
3. What we don't do
- No advertising, no selling or renting of your data.
- No profiling for commercial purposes. The lovencor.com website sets no cookies and uses no audience measurement tools.
- We don't read your conversations: we only look at a relationship's messages to handle a report, or at the request of an authority empowered by law.
4. Who receives your data
- Your partners see what the relationship needs: your first name, your messages, your reactions and the chosen profile. Never your date of birth.
- Our processors, bound by a contract that complies with Article 28 of the GDPR, and only for the service: the hosting provider SmarterASP.NET (servers located in the Netherlands); Google Firebase Cloud Messaging, which delivers notifications; Brevo (France, data hosted in the European Union), which sends service emails. Brevo adds a small invisible image that shows whether an email was opened; we do not use this information.
- Google Play and the App Store process your payments as independent controllers, under their own policies.
- Authorities, only when the law requires us to.
The text of a notification passes through Google and, on iPhone, through Apple's notification service. You can hide notification content in My account; for adult-only messages it is always hidden.
5. Transfers outside the European Union
Google and Apple may process some data in the United States. For Firebase Cloud Messaging, these transfers rely on the European Commission's adequacy decision of 10 July 2023 on the EU–US Data Privacy Framework, which the recipient has joined, or, failing that, on the European Commission's standard contractual clauses, a copy of which you can obtain at contact@lovencor.com. Transfers made by Apple and Google for payments are governed by their own policies.
6. Security
Connections to our servers are encrypted (HTTPS), passwords are hashed, access to data is restricted and data is backed up. In the event of a personal data breach, we notify the Belgian Data Protection Authority within 72 hours, unless it poses no risk to you, and we inform you directly if it poses a high risk.
7. Your rights
You can ask to access your data, correct it, erase it, restrict its processing or receive it in a portable format, object to processing based on our legitimate interest, not be subject to a decision based solely on automated processing, except in the cases provided for by law, and withdraw any consent at any time. Write to contact@lovencor.com: we reply within one month, which may be extended by two months if the request is complex.
Refusing sign-ups under 16 and the age-related rules are applied automatically based on the date of birth you entered, because this is necessary to conclude and perform the contract (GDPR, Art. 22.2.a). If you think there is a mistake, write to us: a person will review your request. You can express your point of view and contest the decision.
You can also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels (dataprotectionauthority.be).
8. Users aged 16 and 17
In the European Union, the age from which people can consent on their own to the processing of their data by an online service ranges from 13 to 16 depending on the country (13 in Belgium); Lovencor does not accept anyone under 16, whatever the country. Adult content is never offered to users who are minors, and their relationships with adults are limited by the rules set out in the terms of use.
9. Deleting your account
You can delete your account at any time, in the app or at lovencor.com/delete-account. Your account, relationships, messages, dates, preferences, devices and purchase history are deleted immediately. Only reports remain, for the period stated above, backups, which are erased within 30 days, and, if another user had blocked you, the encrypted fingerprint of your email address described above, for as long as that block exists. We also keep an anonymous statistical record of the deletion (date, age of the account, origin of the request), which cannot be used to identify you.
10. Changes
We may update this policy. The version and its date appear at the top of this page; in case of an important change, we will notify you in the app.