Privacy Policy of lovuapp.ai
This is an English translation for convenience. The Polish version (Polityka prywatności) is the binding one.
1. Data controller
The controller of personal data processed on lovuapp.ai and its subdomains (app.lovuapp.ai, robots.lovuapp.ai) is:
Oleksandr Symchak, sole trader (jednoosobowa działalność gospodarcza),
NIP: 6762536765, REGON: 368397558.
Contact on personal data matters: [email protected].
2. What data we process
- Home page (lovuapp.ai): we do not collect personal data that identifies you. We use Cloudflare Web Analytics, an anonymous visit statistics tool that does not use cookies and does not build user profiles.
- Sign-in (app.lovuapp.ai): e-mail address, one-time sign-in codes (stored only as a hash, deleted after use or after 10 minutes), two-factor authentication data (encrypted), sign-in log (user ID, date, result, IP address).
- Family accounts (robots.lovuapp.ai): content saved by family members (project log, shopping list, robot cards, colour designs).
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Enabling sign-in and use of the account | Art. 6(1)(b) |
| Service security (sign-in log, abuse prevention) | Art. 6(1)(f) — legitimate interest of the controller |
| Storing family content | Art. 6(1)(a) and (b) |
4. Children's data
Children's accounts are created only by a parent or legal guardian, who consents to the processing of the child's data (Art. 8 GDPR). We process the minimum of data, we do not publish photos or images of children in the public part of the service, and access to children's accounts is limited to the home network.
5. Cookies
We use only one technical session cookie (lovuapp_sid), necessary for sign-in. It expires after 12 hours at the latest or when you sign out. We do not use analytics or marketing cookies, so we do not display a consent banner.
6. Recipients of data
Data may be entrusted to providers of technical services to the controller:
- Cloudflare, Inc. — traffic delivery, service protection and anonymous visit statistics (Cloudflare Web Analytics, without cookies);
- Google Ireland Ltd. (Google Workspace) — sending e-mails with sign-in codes.
Service data is stored on the controller's server in Poland. Data may be transferred outside the EEA as part of the services of the above providers, on the basis of standard contractual clauses or an adequacy decision.
7. Retention periods
- sign-in codes — until used or max. 10 minutes;
- sessions — max. 12 hours;
- sign-in log — 90 days;
- account data and family content — until the account is deleted.
8. Your rights
You have the right to access your data, to rectify, erase and restrict its processing, to data portability, to object, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). Please send requests to [email protected].
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.
9. Changes to this policy
We will announce material changes on this page. Last updated: 28.10.2026.