Lovaia.app
Your data, your rights

Privacy Policy

We treat your personal data the way we'd want ours treated. Here's exactly what we collect, why, and what you can do about it.

Last updated · April 2026

1

1. What we collect

When you use Lovaia.app we collect:

  • Account data — name, age, gender, phone number, email.
  • Profile content — photos, bio, prompts, lifestyle fields.
  • Verification data — KYC documents (PAN, Aadhaar) for female withdrawals only, processed via an RBI-authorised KYC provider.
  • Usage data — calls, messages, likes, app interactions (for safety + matching).
  • Device data — device type, OS, IP, and approximate (city-level) location.
2

2. How we use it

  • To match you with compatible profiles.
  • To process coin top-ups and withdrawals.
  • To detect and remove fake accounts, scams, and harassment.
  • To send you product updates (you can opt out anytime).
  • To comply with Indian law — the IT Act 2000, IT Rules 2021, DPDP Act 2023, RBI KYC norms, and Income Tax Act.
3

3. What we never do

  • We never sell your data to third parties. Ever.
  • We never show female users' rewards to males or the public.
  • We never read or store the content of your encrypted calls.
  • We never share your phone number with matches.
  • We never use your data for targeted advertising.
4

4. Third-party processors

We share only the minimum data required, with these vetted processors:

  • PayU — payment processing for web/Android top-ups (RBI-licensed PA).
  • Apple In-App Purchase — payment processing for iOS top-ups.
  • VideoSDK — real-time audio & video infrastructure (end-to-end encrypted).
  • Supabase — authenticated database and storage (data hosted in India / Asia region).
  • SMS / OTP gateway — phone-number verification.
5

5. Protection of minors

Lovaia.app is strictly for users aged 18 and above. We do not knowingly collect data from minors. If we discover an account belongs to a minor, it is deleted immediately, all data is purged, and the matter is reported where required by law. If you believe a minor is using the platform, please report it to safety@lovaia.app.

6

6. Your rights

Under the DPDP Act, 2023 you can at any time:

  • Access a copy of all your data.
  • Correct or update inaccurate data.
  • Permanently delete your account (Settings → Delete Account).
  • Withdraw consent for marketing emails.
  • Nominate a person to exercise your rights in case of death or incapacity.
  • Lodge a complaint with the Data Protection Board of India.
7

7. Data retention

Active account data is retained while your account is open. After deletion, data is purged within 30 days, except: transaction records (kept 7 years for RBI / Income Tax compliance), KYC records (kept as required under the PML Act), and safety records of banned accounts (to prevent rejoining).

8

8. Security & breach notification

We use TLS in transit, encryption at rest, role-based access controls, and Supabase Row-Level Security on every table. In the unlikely event of a personal-data breach, we will notify the Data Protection Board of India and affected users without undue delay, as required under the DPDP Act, 2023.

9

9. Grievance Officer & DPO

In line with the IT Rules, 2021 and DPDP Act, 2023, complaints are acknowledged within 24 hours and resolved within 15 days.

Questions? Email hello@lovaia.app — we reply within 24 hours.