Privacy Policy

LuvYa wellbeing app · Operated by Appex s.r.o. · Last updated 17 August 2026

1. Who we are

LuvYa is operated by Appex s.r.o., a company based in Slovakia/EU.

For privacy questions, contact: appex.slovakia@gmail.com

2. What personal information we may collect

Account information

• Email address
• Display name
• Authentication provider details (Google, Apple, email)
• User ID

Wellbeing profile and preferences

• Selected wellbeing goals
• App approach preference (gentle, balanced, active)
• Time availability and routines
• Interests, likes, dislikes, feedback
• Information about sleep, energy, mood, stress, movement, nutrition, mindfulness, confidence
• Optional notes about schedule, preferences, limitations

Plan and app usage information

• Generated daily/weekly plans
• Completed, skipped, liked, or disliked activities
• Check-in answers and reflections
• App settings and preferences
• Basic usage activity data

Technical information

• Device type and operating system
• App version
• Anonymous device identifiers
• Crash logs and diagnostics
• Approximate region, language, time zone

Purchase information

• Payment processed by Apple App Store or Google Play
• No full card details stored
• Basic subscription status information, received from our subscription management provider (RevenueCat)
• Free trial start and end dates, and whether an invitation code was applied

Abuse prevention and trial-eligibility signals

To keep the free trial fair and to protect the Service against misuse, our servers keep a pseudonymised record of which accounts and devices a trial has been granted to, and of which accounts have been used on the same device.

• Device and account identifiers used for this purpose are hashed with a secret key (a peppered SHA-256 hash) before they are stored. We do not store the underlying device identifier or a readable device fingerprint, and the hash cannot be reversed back into it.
• These records are held on our servers only. They are never shown in the app, never shared with other users, and are not used for advertising, profiling, or personalisation of content.
• They are used solely to decide whether an account is eligible for a free trial and to detect and prevent duplicate accounts, trial abuse, and other misuse of the Service.

3. Sensitive wellbeing information

Some information you choose to provide may relate to your health, mood, lifestyle, stress, sleep, body, fertility, sex wellbeing, mental wellbeing, or physical activity.

LuvYa is not a medical device and does not provide medical advice, diagnosis, treatment, or therapy.

4. How we use your personal information

• Create and personalise wellbeing plans
• Adapt suggestions to goals and preferences
• Provide reflections and insights
• Save progress and settings
• Improve app experience
• Respond to support requests
• Manage subscriptions, free trials, and invitation codes
• Protect against misuse and fraud, including detecting duplicate accounts and free-trial abuse
• Comply with legal obligations

We do not sell your personal information.

5. AI-generated content and personalisation

Parts of user-provided information may be processed by AI systems and service providers. AI-generated suggestions are for general wellbeing support only. They may not always be accurate or suitable for your personal situation.

6. Where we get your personal information from

Information collected directly when users create accounts, complete onboarding, select goals, use check-ins, enter notes, or contact support.

Technical, authentication, purchase, or diagnostic information may come from service providers including Apple, Google, Firebase, analytics, and payment platforms.

7. Legal bases for processing

For EU/EEA/UK residents:

• Performance of contract — to provide core features
• Consent — for optional information
• Legitimate interests — to maintain and improve the app, to keep it secure, and to prevent fraud and abuse of free trials (including the hashed abuse-prevention signals described in section 2)
• Legal obligation — compliance with laws

Users can withdraw consent via app settings or by contacting the company.

8. Who we share your information with

Trusted service providers including:

• Cloud hosting providers
• Authentication providers
• Database and backend services
• Analytics and crash reporting
• AI infrastructure providers
• Customer support tools
• Subscription platforms and subscription management providers (Apple App Store, Google Play, RevenueCat)

We do not share your personal information with other users.

9. International transfers

Service providers may process information outside the user's country. Appropriate safeguards like data processing agreements are used.

10. How long we keep your information

Information retained only as long as needed to provide services, maintain accounts, comply with legal obligations, and improve security.

Account data and wellbeing content are kept while your account exists and are deleted when you delete your account, except where we are required to keep certain records by law.

The hashed abuse-prevention and trial-eligibility signals described in section 2 are kept separately from your account, because deleting them together with the account would remove the very record that prevents repeated trials. They are retained on a rolling basis from the last time the signal was seen — 18 months for device-to-account records and 3 years for trial-eligibility records — and are then deleted automatically.

11. How we protect your information

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

12. Your data protection rights

Users may have rights to:

• Access personal information
• Correct inaccurate data
• Request deletion
• Restrict processing
• Withdraw consent
• Receive data in portable format
• Lodge complaints with authorities

Responses provided within the period required by law, typically one month.

Where you ask us to delete the hashed abuse-prevention and trial-eligibility signals described in section 2, we may retain them for the periods set out in section 10, because we have compelling legitimate grounds for keeping them — deleting them on request would remove the only record that prevents repeated free trials and duplicate accounts. They contain no readable identifier and are not linked to your wellbeing content.

13. Children's privacy

LuvYa is not intended for anyone under the age of 16, or under a higher minimum age where local law requires one. This matches the minimum age in our Terms of Use. We do not knowingly collect personal information from anyone below that age, and we will delete such information if we become aware of it.

14. Notifications

Users can enable/disable notifications in device or app settings.

15. Marketing communications

We will not send you marketing emails unless you have agreed to receive them or where permitted by law.

16. Changes to this Privacy Policy

Updates may be provided through the app, email, or other methods. Latest version available on the website.

17. How to complain

Contact: appex.slovakia@gmail.com

For EU/EEA residents, contact the Office for Personal Data Protection of the Slovak Republic: https://dataprotection.gov.sk

18. Contact

Email: appex.slovakia@gmail.com