Privacy Policy
We take your privacy seriously. This document explains what data we collect, why, and how we protect it.
Overview
LoveNest ("we", "us", or "our") is committed to protecting the personal information you share with us. This Privacy Policy applies to your use of the LoveNest platform and all related services offered by Helyonex.
By using LoveNest, you acknowledge that you have read and understood this Privacy Policy. We follow these core principles:
- ✓We only collect what we truly need
- ✓We never sell your personal data
- ✓All content data is encrypted at rest
- ✓You can delete your account and data at any time
Data We Collect
We collect the minimum data required to provide and improve the LoveNest experience:
| Data Type | Examples | Encrypted? |
|---|---|---|
| Account Info | Name, email, password hash | ✓ Yes |
| Profile | Profile photo, display name | ✓ Yes |
| Content | Memories, notes, dates, rules | ✓ Yes |
| Usage Data | Feature interactions, error logs | — |
| Device Info | Browser type, timezone | — |
How We Use Your Data
We use your information solely to deliver, maintain, and improve LoveNest:
- Authenticate and secure your account
- Sync content between you and your partner
- Send service notifications (password resets, security alerts)
- Debug issues and analyze aggregate product usage
- Comply with legal obligations
We do NOT use your data for advertising or sell it to third parties. Ever.
Security
We implement industry-standard security measures to protect your data:
AES-256 Encryption
All sensitive content encrypted at rest
TLS in Transit
All data encrypted during transfer
Bcrypt Hashing
Passwords are never stored in plain text
Token Auth
Short-lived auth tokens with secure refresh
Access Controls
Strict role-based data access internally
Regular Audits
Periodic security reviews and dependency updates
Your Rights
Depending on your location, you have the following rights regarding your personal data:
To exercise any of these rights, email us at privacy@lovenest.app. We respond within 30 days.
Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account:
- All personal content (memories, notes, dates) is permanently deleted within 30 days
- Backups are purged within 90 days
- Anonymized usage statistics may be retained indefinitely
- Legal records may be retained as required by applicable law
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please reach out:
