Security and privacy

All communication between the Loveton app and our servers is encrypted using TLS (Transport Layer Security).

Authentication tokens are stored securely on your device using platform-provided secure storage (Android Keystore / iOS Keychain).

Passwords are hashed using industry-standard algorithms and are never stored in plain text.

Media files (photos, profile pictures) are stored on encrypted cloud storage (AWS S3) with access controls.

Your couple data (messages, photos, kiss history, canvas drawings, question answers) is only accessible to you and your paired partner.

We do not sell, rent, or trade your personal data to third parties for advertising or marketing purposes.

Location data is only collected when you explicitly enable the distance feature and is used solely to show approximate distance between you and your partner.

We do not perform background location tracking. Location is only accessed when the app is in the foreground and the feature is enabled.

We use Firebase Cloud Messaging (FCM) by Google to deliver push notifications. Firebase processes device tokens necessary for notification delivery.

We use RevenueCat to manage in-app subscriptions. RevenueCat processes purchase receipts to verify subscription status.

We use Google Sign-In and Apple Sign-In as optional authentication providers. These services provide only your name and email address during sign-in.

We use AWS S3 for secure media storage. Media files are stored in a private bucket with access controls.