Luvin Privacy Policy

This Luvin Privacy Policy ("Policy") explains how Luvin Labs, Inc. ("Luvin", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use our mobile application, website, and related services (collectively, the "Services"). By using Luvin, you consent to the practices described in this Policy, which complies with global privacy regulations including GDPR, CCPA, VCDPA (Virginia Consumer Data Protection Act), and other applicable data protection laws.

Core Privacy Principles

• Transparency: We clearly disclose what data we collect and how we use it
• Minimization: We collect only what is necessary to provide our Services
• Security: We implement robust measures to protect your personal information
• Control: You have the right to access, correct, and delete your personal data
• Accountability: We are responsible for protecting the data we process

Data Controller Identification

The data controller responsible for processing your personal information in connection with the Luvin Services is:

You may contact our Data Protection Officer at any time regarding questions, concerns, or requests related to your personal data and our privacy practices.

1. Information We Collect

We collect different types of information to provide and improve our Services to you:

1.1 Personal Information You Provide

• Account information: Name, email address, date of birth, username, and profile photo
• Contact information: Phone number (if provided for verification)
• Payment information: Billing details (processed by third-party payment providers)
• Communications: Messages, chat content, and other communications through our Services
• User-generated content: Photos, videos, live streams, and other content you share

1.2 Automatically Collected Information

• Device information: Device type, operating system, unique device identifiers (Device ID), IMEI, advertising ID, and other persistent device identifiers
• Usage data: App usage patterns, feature interactions, and session duration
• Location data: Precise and approximate location (if you enable location services)
• Log data: IP address, access times, and pages viewed
• Analytics data: Aggregated usage statistics to improve our Services
• Installed Apps data: List of applications installed on your device (for service optimization and security purposes)

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 To Provide and Operate Our Services

• Create and manage your Luvin account
• Facilitate communication and interactions with other users
• Process transactions for virtual items and premium features
• Provide customer support and respond to your inquiries
• Verify your identity and prevent fraudulent activities
• Use Device ID and device identifiers for account authentication, service delivery, and security verification

2.2 To Improve and Personalize Our Services

• Personalize your experience based on your preferences and usage
• Develop new features and improve existing functionality
• Optimize our Services for different devices and user groups
• Conduct research and analytics to understand user behavior
• Use Device ID and installed apps data to enhance app performance, compatibility, and user experience

2.3 To Ensure Safety and Security

• Detect and prevent fraud, abuse, and policy violations
• Enforce our User Agreement and Community Guidelines
• Protect users from harmful or inappropriate content and interactions
• Comply with legal obligations and respond to lawful requests
• Use Device ID to track and prevent unauthorized access, account hacking, and malicious activities

3. Right to Know About Data Sales

Right to Know Whether Your Personal Data is Sold: You have the explicit, unconditional right to know whether your personal data is sold to third parties for monetary or other valuable consideration. This right is guaranteed under applicable privacy laws including CCPA, VCDPA, and GDPR, and we fully disclose our data sale practices as follows:

3.1 Definition of "Data Sale" Under This Policy

For the purposes of this Privacy Policy, "sale" or "selling" of personal data is defined as the disclosure of personal data by Luvin to a third party in exchange for monetary or other valuable consideration, as defined by the California Consumer Privacy Act (CCPA) and the Virginia Consumer Data Protection Act (VCDPA). This includes:

• Disclosure of personal data to a third party for monetary payment
• Disclosure of personal data to a third party in exchange for other valuable consideration (e.g., services, technology, or access to data)
• Disclosure of personal data to a third party for the purpose of enabling that third party to sell the data to others

Not all data sharing constitutes a "sale" under this definition. For example, sharing data with service providers to perform essential services on our behalf is not considered a sale, provided the service provider is contractually obligated to use the data only for the specified purposes and not to sell it to others.

3.2 Luvin's Current Data Sale Practices

Current Status: Luvin does NOT sell your personal data to third parties for monetary or other valuable consideration. We do not engage in any data sale activities as defined by CCPA, VCDPA, or other applicable privacy laws.

Our data sharing practices are limited to:

• Sharing data with service providers to provide essential services (e.g., cloud hosting, payment processing, customer support)
• Sharing anonymized, non-identifiable data (including aggregated Device ID and usage data) with analytics partners to improve our Services
• Sharing data as required by law, court order, or government request
• Sharing data with your explicit consent for specific, disclosed purposes

None of these practices constitute a "sale" of personal data as defined by applicable privacy laws.

3.3 How to Exercise Your Right to Know About Data Sales

You may exercise your right to know whether your personal data has been sold by:

• Email Request: Send an email to jfgufjgf90@gmail.com with subject line "Right to Know About Data Sales" and include your registered email address and user ID
• Verified Request Portal: Submit a request through our secure privacy portal at https://luvinapp.com/privacy-request
• Mail Request: Send a written request to Luvin App Development Company, Attn: Privacy Team, 412 Candycane Lane, Los Angeles, CA 90028, USA

Upon receiving your verified request, we will provide you with a clear, written response within 15 business days, confirming whether your personal data has been sold, and if so, providing the following information:

• Categories of personal data that were sold
• Categories of third parties to whom the personal data was sold
• Purpose of the sale (if applicable)
• Timeframe during which the sale occurred
• Any other relevant details required by applicable law

We will not charge a fee for processing your "Right to Know" request unless it is excessive, repetitive, or manifestly unfounded.

3.4 Future Changes to Data Sale Practices

If Luvin ever changes its data sale practices and begins to sell personal data to third parties, we will:

• Update this Privacy Policy at least 30 days prior to the change taking effect
• Provide prominent in-app and email notifications to all users
• Establish a clear, one-click opt-out mechanism for users to opt out of the sale of their personal data
• Provide enhanced disclosures regarding the categories of data sold, the recipients, and the purpose of the sale

4. Data Sharing Disclosure and User Rights to Know

Right to Know About Data Sharing: You have the unconditional right to know whether and how your personal data is shared with third parties. We maintain full transparency regarding all data sharing activities as follows:

4.1 Types of Data We May Share

• Personal Identifiable Information (PII): Only shared with explicit user consent or as required by law
• Device ID and Device Identifiers: Shared with service providers for service operation, security, and analytics (anonymized where possible)
• Non-Identifiable/Anonymized Data: May be shared with analytics partners for service improvement
• Usage Data: May be shared with service providers to optimize platform performance
• Installed Apps Data: Shared with analytics and security partners to enhance service compatibility and safety (anonymized)
• Transaction Data: Shared with payment processors to complete financial transactions
• Location Data: Precise location data shared only with your explicit consent for service features

4.2 Categories of Third Parties With Whom We Share Data

• Service Providers: AWS, Google Cloud, payment processors (Stripe, PayPal), device analytics partners
• Analytics Partners: Google Analytics, Mixpanel (data anonymized, including Device ID and usage data)
• Legal/Regulatory Entities: As required by law, court order, or government request
• Business Partners: Only with explicit user consent and for specified purposes

4.3 Purpose of Data Sharing

• To provide and maintain the Luvin Services
• To improve service quality and user experience
• To ensure platform security and prevent fraudulent activities
• To comply with legal obligations and protect our legal rights
• To use Device ID for account verification, fraud prevention, and service optimization

4.4 How to Obtain Detailed Data Sharing Information

You may request a complete, personalized report detailing exactly what personal data of yours has been shared, with whom, for what purpose, and for how long by contacting our Data Protection Officer at jfgufjgf90@gmail.com. We will provide this report free of charge within 15 business days of receiving your verified request.

5. Opt-Out Rights for Data Sale and Targeted Advertising

Right to Opt-Out: You have the right to opt-out of the sharing or selling of your personal data for targeted advertising purposes at any time. Luvin does not sell your personal information to third parties for monetary consideration. However, we may share non-identifiable data with advertising partners to provide relevant content, and you may opt-out of this practice using the following methods:

5.1 Opt-Out of Targeted Advertising

In-App Settings:

• Open Luvin app and go to "Settings"
• Select "Privacy & Security"
• Tap "Advertising Preferences"
• Toggle off "Personalized Ads" option
• Toggle off "Share Usage Data for Ads" option
• Toggle off "Share Device ID for Ads" option (if applicable)

Mobile Device Settings:

• iOS: Settings > Privacy & Security > Apple Advertising > Toggle off "Personalized Ads"
• Android: Settings > Google > Ads > Opt out of Ads Personalization

Third-Party Ad Network Opt-Out: Visit https://optout.aboutads.info/ to opt out of participating ad networks

Email Request: Send an opt-out request to jfgufjgf90@gmail.com with subject line "Opt-Out of Targeted Advertising" and include your registered email and user ID

5.2 Opt-Out of Data Sharing with Third Parties

• Complete Data Sharing Opt-Out: Submit a verified request to jfgufjgf90@gmail.com with subject line "Opt-Out of All Non-Essential Data Sharing"
• Request Processing: All opt-out requests will be processed within 7 business days
• Confirmation: You will receive email confirmation once your opt-out has been implemented
• Reversing Opt-Out: You may reverse your opt-out at any time through the same channels

5.3 Consequences of Opting Out

Opting out of targeted advertising or data sharing may result in:

• Receiving non-personalized, generic advertising content
• Limited personalization of your Luvin experience
• No impact on core functionality of the Luvin Services
• No additional fees or charges for exercising your opt-out rights

6. Your Privacy Rights and Controls

Depending on your location, you may have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you, including Device ID, location data, and installed apps data
• Right to correction: Request correction of inaccurate or incomplete information
• Right to deletion: Request deletion of your personal information (subject to legal requirements)
• Right to portability: Request your data in a machine-readable format
• Right to object: Object to certain processing activities, including direct marketing
• Right to withdraw consent: Withdraw your consent for certain data processing activities
• Right to know: Obtain complete information about data sharing and data sale activities (Sections 3 and 4)
• Right to opt-out: Opt out of data sharing/selling for advertising purposes (Section 5)

To exercise these rights, please contact our Data Protection Officer at: jfgufjgf90@gmail.com. We will respond to valid requests within 30 days, as required by applicable law.

You can also manage certain privacy settings directly in your Luvin account:

• Control profile visibility and information sharing
• Manage location services permissions (precise/approximate)
• Manage Device ID and device data collection preferences
• Adjust notification preferences
• Request account deletion through the Settings menu
• Access advertising and data sharing preferences

7. Virginia Consumer Data Protection Act (VCDPA) Rights

VCDPA Compliance for Virginia Residents: If you are a resident of Virginia, you have additional rights under the Virginia Consumer Data Protection Act (VCDPA), effective January 1, 2023:

7.1 VCDPA-Specific Rights

• Right to confirm whether a controller is processing your personal data
• Right to access your personal data and a copy of such data, including Device ID, location data, and installed apps data
• Right to correct inaccuracies in your personal data
• Right to delete personal data provided by or obtained about you
• Right to obtain a portable copy of your personal data
• Right to opt out of: The processing of personal data for targeted advertising; The sale of personal data; Processing of personal data for profiling in furtherance of a decision that produces legal or similarly significant effects concerning you

7.2 Exercising VCDPA Rights as a Virginia Resident

To exercise your VCDPA rights:

• Submit a request through our dedicated VCDPA portal: https://luvinapp.com/vcdpa-request
• Or send an email to jfgufjgf90@gmail.com with "VCDPA Request - Virginia Resident" in the subject line
• Include your full name, registered email address, physical address in Virginia, and specific request

We will verify your identity and respond within 45 days (may extend by 15 days if necessary). We will not charge a fee for processing your VCDPA request unless it is excessive, repetitive, or manifestly unfounded.

7.3 VCDPA Exceptions and Limitations

Luvin may decline to take action on your VCDPA request if:

• The request is manifestly unfounded, excessive, or repetitive
• Compliance would interfere with our compliance with legal obligations
• Compliance would impair the ability to protect against security incidents
• Compliance would impair fraud prevention, detection, or investigation
• Compliance would violate contractual obligations to other users

We will provide a written explanation if we decline to honor your VCDPA request.

8. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption of data in transit (SSL/TLS) and at rest, including Device ID and sensitive device data
• Secure storage of sensitive information
• Access controls limiting employee access to personal data
• Regular security assessments and updates
• Incident response procedures for data breaches

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• For the duration of your account (if you create one)
• To comply with legal obligations (tax, audit, and record-keeping requirements)
• To resolve disputes and enforce our agreements
• To protect against fraud and security threats
• Device ID data is retained for account security and service operation, and deleted upon account deletion

When we no longer need your personal information, we securely delete or anonymize it in accordance with applicable laws.

10. Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information as soon as possible. Parents or guardians who believe their child has provided us with personal information may contact us at jfgufjgf90@gmail.com.

11. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure these transfers comply with applicable data protection laws through:

• Standard Contractual Clauses approved by the European Commission
• Compliance with the Privacy Shield framework (where applicable)
• Other legally recognized transfer mechanisms

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

• Posting the updated Policy on our website and in the app
• Sending in-app notifications or email notifications
• Displaying a prominent notice in our Services

Your continued use of our Services after the effective date of changes constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

We respond to all privacy-related inquiries within 48 business hours and will work to resolve any privacy concerns you may have.