Aller au contenu principal
Privacy

Privacy policy

Last updated: 16 September 2026

1. Data controller

Lovae is published by SDT (French SASU, share capital €100, RCS Toulouse 999 633 100), with registered office at 4 impasse Gabriel Laurens, 31110 Bagnères-de-Luchon, France. President: Théa Saint-Denis. For any question about your data: contact@lovaeapp.com.

2. Data collected

On this site (showcase, PDF book) and in the Lovae app (iPhone and Android), we collect:

  • PDF book purchase: your email and the data required for payment (handled by Stripe, see §4).
  • Lovae account: email, cycle data, journal and preferences you record in the app.
  • Audience measurement: website traffic statistics via Vercel Analytics, with no cookie and no profiling. An identifier derived from your IP address is computed to tell visits apart; it cannot identify you, nor follow you from one site to another.
  • Pill organizer: the supplements, vitamins, treatments and contraceptives you record there, along with your confirmed intakes. These are health data within the meaning of Article 9 GDPR.
  • Artificial intelligence features: the photo of your plate and the ingredients you enter are sent to our AI provider for analysis. Photos are not kept after the analysis.
  • Wheel of fortune: your spins and the rewards obtained.
  • Product measurement: screens viewed, features used and the steps of your subscription journey. No health data is included, and nothing is collected without your consent.
  • Sex life: the sexual intercourse you choose to record, its date, whether it was protected or not, and the contraception used that day. This is data concerning your sex life within the meaning of Article 9 GDPR.
  • Trying-to-conceive mode: your intention to become pregnant, the results of your ovulation and pregnancy tests, the date you stopped contraception and your preparation checklist. This information is only collected if you turn that mode on.
  • Apple Health: if you allow it, the app reads your basal body temperature and your menstrual flow from Apple Health, in read-only mode. Nothing is written or sent back to Apple, and you can withdraw that permission at any time in your iPhone settings.

3. Purposes & legal bases

  • Delivery of the purchased PDF book, legal basis: performance of the sales contract.
  • Operation of the Lovae app, legal basis: performance of the service contract.
  • Audience statistics, legal basis: legitimate interest, aggregated non-identifying data.
  • Cycle tracking, journal and pill organizer, legal basis: your explicit consent under Article 9.2.a, collected before any data is gathered.
  • Plate analysis and recipe suggestions, legal basis: performance of the service contract, at your explicit request.
  • Product measurement, legal basis: your consent, which you can withdraw at any time from the app settings.
  • Sex life tracking, legal basis: your explicit consent under Article 9.2.a, collected before any data is gathered and withdrawable at any time.
  • Trying-to-conceive mode, legal basis: a specific consent, separate from your other consents, requested when you turn the mode on and withdrawable at any time from the app settings. Withdrawing it turns the mode off and stops that collection.
  • Reading Apple Health, legal basis: your consent, given in Apple's permission dialog and withdrawable from your iPhone settings.

4. Subprocessors

  • Supabase (database hosting, eu-west-1 region, Ireland)
  • Vercel (site hosting, eu-fra1 region, Frankfurt)
  • Stripe (payment processing for the PDF book and for subscriptions bought on the site)
  • Resend (sending transactional emails: purchase, book link, account emails)
  • RevenueCat & Apple (iOS Premium subscription management)
  • Google Play (Android Premium subscription management)
  • Mistral AI (plate analysis and recipe suggestions, French company, data processed in the EU)
  • Sentry (detection of technical errors in the app, no health data)
  • Expo (push notification delivery)

Database hosting (Supabase, Ireland), website hosting (Vercel, eu-fra1 region, Frankfurt) and error monitoring (Sentry, Germany) are located in the European Union. Some processors are nevertheless established in the United States: RevenueCat, Expo, Resend, Stripe and Vercel Inc., the US company that operates the site hosting. Those transfers outside the European Union are covered by the European Commission's standard contractual clauses.

Audience measurement is handled by Vercel Analytics, with no cookie at all: an identifier is computed from your IP address and then used to count visits. It cannot identify you, nor follow you from one site to another.

5. Retention period

  • Book purchases: 10 years (accounting obligation), then deletion of non-accounting data.
  • Lovae account: as long as your account is active, deleted upon request.
  • Technical logs: 12 months.
  • Consent records: 5 years after your last activity, then automatic purge.
  • Deletion request records: 90 days after effective deletion, then automatic purge.
  • Product measurement: 12 months, then automatic purge.
  • Sex life data and trying-to-conceive data: as long as your account is active, deleted along with it.

6. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, portability, objection and restriction. You can exercise the rights of access and erasure yourself, without writing to us, from the "My account" page of this site or from the app settings. For anything else, write to us at contact@lovaeapp.com. You may also lodge a complaint with the CNIL (cnil.fr).

7. Cookies

This site does not use tracking or advertising cookies. Only a few strictly necessary cookies (session, security) may be set during a purchase or an admin login.