Privacy at Lovvur
Last updated: 14 August 2026
Lovvur is a place for things that are personal by nature — a shared diary
between two people, and keepsake pages made for someone you love. This
policy explains what we collect, why, and what we never do with it. It
covers both lovvur.com
and the Lovvur iOS
app.
What we collect
- Your email address — it's how you sign in (we email
you a code; there are no passwords) and how we reach you about your
account. With Sign in with Apple, we receive the email your Apple
account shares (which may be a private relay address).
- What you create — the photos, videos, voice notes,
quotes and words you add to a story, and the pages you build on
lovvur.com. This content is yours. It is visible only to you and the
one person you've shared a story with (or, for keepsake pages, the
people you give the link to).
- A device token, if you turn notifications on, so
Apple can deliver the little 💗 when your partner adds something.
- Payment details for web purchases are handled
entirely by Stripe; card numbers never touch our servers.
- Basic technical logs (IP addresses, request
timestamps) kept briefly for security and abuse prevention.
What we don't do
- No ads, no ad tracking, no selling or sharing data with data
brokers — ever.
- No third-party analytics SDKs in the app.
- We don't read your stories. Content is accessed by systems only to
store and serve it to the two of you.
Who helps us run Lovvur
A small set of processors, used only to provide the service:
Fly.io
(hosting), Resend
(sign-in and account email), Stripe
(payments on lovvur.com), and
Apple (push notifications and Sign in with Apple).
Deleting your data
In the app: Settings → Delete my account. This permanently removes your
account, every memory you added (photos, videos, voice notes, words),
your devices and sign-in tokens. If your story was shared, your partner
keeps only what they themselves added. Web accounts can be deleted from
account settings or by emailing us.
Where your data lives
On servers in the United Kingdom (London), encrypted in transit
everywhere. Sign-in codes are stored hashed and expire in minutes;
bearer tokens expire after 90 days.
Questions
Email hello@lovvur.com — a person
reads it.