Privacy Policy

Last Updated: September 17, 2026

Lovebae is a private space for two people. This policy explains exactly what we collect, why we collect it, who can see it, and how to get rid of it. We have tried to write it the way we would explain it to a friend.

Two things are covered here. Sections 1 to 10 describe the Lovebae mobile app. Section 11 describes the lovebae.app website — the browser games, the shop and the web account — which is a separate system with its own sign-in and its own data. Sections 12 onwards apply to both. If you only ever use the app, sections 1 to 10 are the ones that matter to you.

1. Information We Collect (Mobile App)

What you give us

• Email address: this is your login. We email you a one-time sign-in code.
• Display name and profile picture: shown to your partner.
• Date of birth: used to check you are 18 or over, and to remind your partner about your birthday.
• Gender: optional. There is a Skip button on that screen and skipping it costs you nothing.
• Relationship details: your relationship goal, your anniversary, and any special dates you add.
• Partner connection: the invite code you use to link with your partner.
• Your content: messages, love letters, doodles, whiteboard drawings, mood entries and their notes, daily check-in answers, quiz and Bae answers, gifts, saved date ideas, and your shared pet.
• Intimate preferences: if you use the spicier parts of the app, your fantasy picks and hard limits. See section 3.
• Saved places: names, emoji and coordinates for places you choose to save. See section 2.
• Settings: your notification preferences and home-screen widget configuration.

What the app collects as you use it

• Your Lovebae account ID, plus the account identifier Apple or Google gives us if you choose Sign in with Apple or Google Sign-In.
• A push notification token, so we can deliver notifications to your device. This is a delivery address, not a tracking identifier.
• Subscription status: whether you have Lovebae Pro, and your purchase history. Not your card details — see section 6.
• Your hearts balance and shared activity feed, which are features the two of you see inside the app.
• Location, but only if you turn location sharing on. See section 2.

What the app does not collect

This list matters as much as the one above. In the mobile app:

• No advertising identifier. Lovebae does not access the IDFA, the IDFV, or any device fingerprint.
• No analytics. There is no analytics SDK in the app. We do not measure which features you use, how long your sessions are, or how you move around the app.
• No crash-reporting SDK.
• No contacts. Lovebae never reads your address book.
• No photo library reading. The app can save an image you made — a wallpaper you drew — to your device. It never reads photos out of your library.
• No ads, no ad networks, no data brokers.

2. Location

If you turn on location sharing, Lovebae collects your device's location — latitude, longitude and accuracy — and shares it with your partner, and only your partner. This is what powers the live map, saved places, and "got home safely" notifications.

• It is off by default. Nothing is collected until you switch it on yourself.
• Background access. To make arrival and departure alerts work when Lovebae is closed, we ask for permission to use location in the background ("Allow all the time" on Android). On Android this runs as a foreground service with a visible notification, so you can always tell it is on. We use it only for the features described here.
• Precise or approximate. If you decline precise location, the app works with approximate location instead.
• Your partner can always tell. Whether your sharing is currently on is visible to them. You cannot be tracked silently.
• You can pause or stop it at any time, inside Lovebae or in your device settings. The rest of the app keeps working.
• Saved places are places you deliberately name and save, with an arrival or departure alert. They are kept until you delete them.

3. Sensitive and Intimate Information

Some of what you put into Lovebae is personal by nature: how you are feeling, your check-in answers, your letters, your messages, and — if you use those features — your intimate preferences. We treat all of it as sensitive.

Fantasy picks and hard limits

The spicier parts of Lovebae let you pick fantasies you are interested in and hard limits you are not. These are stored on our servers, attached to your membership of your couple.

• Your picks are private to you. Your partner is never shown your list. They only ever see what the two of you have in common — which is what makes it safe to answer honestly.
• Your hard limits are absolute. Either partner's limit removes that content for both of you. Nothing brings it back.
• They are per-relationship. Picks you made with one partner do not follow you into a different relationship.
• You can change or clear them at any time from the app, and these features are entirely optional.

If you are in the UK or EU: information about your sex life, and the gender you optionally give us, are special category data under Article 9 of the GDPR. We process them only on the basis of your explicit consent, given when you choose to fill those screens in, and only to run the features you are using. You can withdraw that consent by clearing the information or deleting your account.

We do not use any of this to profile you, to train any model, or to target advertising, and we never sell it.

4. How We Use Your Information

• To provide and maintain the Lovebae service
• To connect you with your partner and sync what you share
• To send push notifications about your partner's activity, reminders you asked for, and location alerts you set up
• To email you one-time sign-in codes
• To know whether you have an active Lovebae Pro subscription
• To check that you are old enough to use the app
• To keep accounts secure and prevent fraud and abuse
• To respond to your support requests

Legal bases, if you are in the UK or EU

• Performance of a contract: your account, your couple link, your content, and your subscription — the things the app cannot work without.
• Consent: location sharing, push notifications, gender, and intimate preferences. You can withdraw consent at any time by turning the feature off, clearing the information, or revoking the permission in your device settings.
• Legitimate interests: keeping the service secure and preventing abuse.
• Legal obligation: where we have to keep or disclose something by law.

5. Who Can See Your Information

Beyond your partner, information goes only to:

• The service providers listed in section 6, each of which receives only what it needs to do its job
• Legal requirements: when required by law, or to protect someone's rights or safety

We DO NOT:

• Sell your personal information, or share it for cross-context behavioural advertising
• Share your content with advertisers
• Use your data for targeted advertising
• Track you across other apps or websites

6. Third-Party Services (Mobile App)

These are all of the services the mobile app relies on, and exactly what each one receives:

• Apple App Store and Google Play: they process every payment. Subscriptions are bought through whichever store you installed Lovebae from. Your card details never reach us — we never see or store them.
• RevenueCat: tells us whether your subscription is active. It receives a pseudonymous customer ID and your purchase history. It does not receive your name, email, messages, or location.
• Expo push, with Apple's Push Notification service and Google's Firebase Cloud Messaging: deliver notifications to your device. They receive your push token and the notification itself. Notification text is deliberately kept thin — usually just a name and what happened ("Alice sent you a love letter"), not the contents of a message or letter.
• Sign in with Apple and Google Sign-In: only if you choose one of them to sign in. They give us an account identifier.
• Google Maps: renders map tiles while a map is on screen, on Android. Your stored location goes to our own servers, not to Google.
• Our email provider: receives your email address and the one-time sign-in code, to send you that email.
• Railway: hosts our API and our PostgreSQL database, where your account and content are stored.

Nothing else leaves your device or our app servers. We do not use Firebase for sign-in or analytics, we do not use a third-party image host or CDN, and no other company processes payments for in-app subscriptions. Images you create in Lovebae — doodles, whiteboards, profile pictures — are stored in our own database alongside the rest of your content. Each service above has its own privacy policy governing its practices.

7. Bae Is Not an AI Model

Bae's messages are written by us in advance and chosen by simple rules running on our own servers — how recently you both checked in, whether you answered the same question, and so on. Bae is not a large language model.

Your messages, letters and answers are never sent to OpenAI, Anthropic, Google, or any other AI provider, and are never used to train anything.

8. Data Security

• All traffic between the app and our servers is encrypted in transit, over HTTPS/TLS and secure WebSockets
• Secure token-based authentication, with sign-in codes that expire
• Access controls on our systems and database
• Regular security updates

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information, we will notify the relevant supervisory authority within 72 hours where the GDPR requires it, and tell affected users without undue delay.

9. How Long We Keep Things (Mobile App)

• Location points: automatically deleted after 7 days.
• Sign-in codes: single-use and expire shortly after they are sent.
• Everything else: kept for as long as your account is active, so that you and your partner can look back at it. It goes when you delete your account.

10. Deleting Your App Account

How to delete your account

Delete your account from inside the app: Settings → Delete Account. You can give a reason if you want to; it is optional, and we store it only to understand why people leave.

There is then a 48-hour grace period. Nothing is erased during that window — it exists so a deletion made in a bad moment can be undone. If you change your mind, email privacy@lovebae.app before the window closes and we will cancel the request. After the grace period, an automatic job that runs every hour carries out the deletion, so it completes within roughly 48 to 72 hours of your request.

If you can no longer sign in — for example you have lost access to the email address you registered with — write to privacy@lovebae.app from any address and we will verify your identity before acting.

What deletion removes, and what it does not

• Erased, permanently: your account, profile, sign-in codes, messages you sent, moods, hearts, widget settings, subscription record, and your entire location history and sharing state. This is a hard delete from our database — not a hidden account or a deactivated flag.
• Your location trail always goes, even if your partner's account survives. The trail belongs to the person who was walking it.
• Shared content depends on your partner. If they still have an account, the things the two of you made together stay with them. If they have already gone, the couple and everything in it — letters, doodles, whiteboards, check-ins, quizzes, gifts, saved date ideas, saved places, special dates, your pet and your Bae history — is deleted too.
• Your partner's account is never deleted by you deleting yours.
• Your subscription is not cancelled by deleting your account. Neither we nor RevenueCat can cancel an App Store or Play subscription — you have to cancel it in your device's subscription settings. Apple, Google and RevenueCat keep their own transaction records under their own policies, which we do not control.

11. The Lovebae Website

Everything above is about the mobile app. lovebae.app — the browser games, the shop, the blog and the web account — is a separate system. It has its own sign-in, its own database, and it collects some things the app does not. If you have only ever used the app, none of this applies to you.

What the website collects

• Your web account: email address, name, and one-time sign-in codes, held separately from your app account.
• Game data: the rooms you play in, your session history, and your couple's XP, streak, achievements and keepsakes.
• Product events: a short, hand-written list of named events — things like signing up or linking with a partner — recorded with the page, your email if you are signed in, and your IP address. This is a narrow funnel log we read ourselves, not an autocapture tool and not an advertising tracker.
• Age confirmation: if you open explicit game content we record that you confirmed you are 18 or over, with your IP address and browser user-agent. These records are deleted automatically after two years.
• Mailing lists: your email address, if you join the newsletter or the waitlist. Every email has an unsubscribe link.
• Shop and web billing: orders you place and your subscription status.
• Cookies: see our Cookies Policy.

Website payments

Purchases made on the website — the shop and web billing — are processed by Stripe. Stripe handles the card details; we never see or store them. This is separate from in-app subscriptions, which go through the App Store or Google Play as described in section 6.

Deleting your website account

Open your account page and choose Delete my account. This is a separate request from deleting your app account, and it is carried out by our team rather than automatically. We complete it within 30 days, and nothing is deleted while the request is still open, so you can withdraw it at any point before then. If you cannot sign in, write to privacy@lovebae.app and we will verify your identity first.

• Deleted: your web account, sign-in codes, game rooms and session history, and your newsletter and waitlist entries.
• Deleted: your private fantasy picks, including from a couple that carries on without you.
• Kept: if a partner remains, their side of the couple — the XP, streak, keepsakes and shared history you built together. Deleting your account never deletes theirs. If you were the only member left, the couple goes with you.
• Anonymised: feedback and any published success story — the content stays, your name and email are removed.
• Retained: Stripe payment records, which tax law requires us to keep. They are no longer linked to you.
• We keep a record that the request was made and honoured, so there is proof it was carried out.

12. Your Rights

You have the right to:

• Access: request a copy of your data, and know what we hold
• Correction: update anything inaccurate
• Deletion: delete your account and data — see section 10 for the app and section 11 for the website
• Portability: receive your data in a portable format
• Objection and restriction: object to or limit certain processing
• Withdraw consent: for anything we rely on consent for, such as location, push notifications, gender, or intimate preferences

If you are in California: the categories we collect are listed in sections 1 and 11. You have the right to know, delete and correct, and the right not to be discriminated against for exercising them. We do not sell your personal information and we do not share it for cross-context behavioural advertising.

To exercise any of these, contact us at privacy@lovebae.app. If you are in the UK or EU you also have the right to complain to your local data protection authority.

13. Age Requirement

Lovebae is for adults. You must be 18 or older to create an account, and we ask for your date of birth during sign-up to check. The app is rated 18+ on the App Store and Google Play.

We do not knowingly collect information from anyone under 18. If you believe someone under 18 has created an account, email privacy@lovebae.app and we will delete it.

14. International Data Transfers

Our app API and database are hosted on Railway, and the service providers named in sections 6 and 11 operate internationally. Depending on where you are, your information may be transferred to and processed in a country other than your own. Where that happens we take steps to keep it protected to the standard required by your local law.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email, and the date at the top always tells you when it last changed. Continued use after changes constitutes acceptance.

What changed on 17 September 2026: we added a full section on location sharing, explained how intimate preferences are stored and who can see them, corrected the list of third-party services the app uses, raised the stated age requirement to 18, rewrote the account deletion section to describe what the app actually does, and separated what the mobile app collects from what the website collects so it is clear which is which.

16. Ownership & Operations

The application "Lovebae" is operated and distributed by Selixa Labs LLC.

All intellectual property rights, including source code, designs, and product concepts related to the application, are owned by Aamir Jawaid. The company operates the application under a license granted by the owner.

The use of a company entity is solely for operational, publishing, and payment processing purposes.

17. Contact Us

If you have questions about this Privacy Policy:

• Email: privacy@lovebae.app
• Support: lovebae.app/support