Privacy Policy

1. Who We Are and Scope

Lovia is operated by Vallenova Industries Sdn Bhd (Registration No. 202501047502), a company incorporated in Malaysia ("Vallenova", "Lovia", "we", "us"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Lovia mobile application on Android (Google Play) and iOS (Apple App Store), our website, and related services (together, the "Service").

This policy applies to both versions of the app:

• Android: Lovia on Google Play (package name com.lovia.app)
• iOS: Lovia on the Apple App Store (bundle identifier com.vallenova.lovia)

By using Lovia, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Lovia is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18.

2. Information We Collect

2.1 Information you give us

• Account details: full name, email address, and password.
• Profile information: date of birth, gender, bio, interests, and city.
• Photos and media you upload, including profile photos and Moments.
• Messages and communications with other users, including text, images, and voice notes.
• Reports and feedback you send us.
• Optional profile content. Anything you choose to write in your bio or share on your profile (for example, religion or other personal beliefs) is visible to other users. By adding it, you consent to us processing it to display your profile.

2.2 Information collected automatically

• Device information: device type, operating system and version, app version, and device identifiers.
• Usage data: features used and actions taken in the App, such as likes, passes, and purchases.
• Log data: IP address, access times, crashes, and performance data.
• Push notification tokens used to deliver notifications.
• Advertising identifiers: the Android advertising ID, or the iOS identifier for advertisers (IDFA) where you have given permission (see Section 6).

2.3 Location information

You choose your city when you set up your profile, and we use it to show you nearby matches. We do not read your device's GPS location, and we do not track your location in the background. Our servers and our advertising partners can also work out a general location from your IP address.

2.4 Camera, microphone, photos, and notifications

We ask for permission to use your camera, microphone, photo library, and notifications only when you use a feature that needs them (for example, taking a profile photo, voice and video calls, voice notes, live streaming, and match alerts). You can change these permissions at any time in your device settings.

2.5 Live streams, calls, and chat

• Live streams and their associated chat may be recorded, stored, and reviewed for safety, legal compliance, and enforcement.
• Voice and video calls are carried over third-party real-time infrastructure (currently Agora) so that participants can connect.
• Voice notes, images, and videos you send in chat are stored on our infrastructure so they can be delivered, and may be reviewed following a report.

2.6 Purchase and payment information

When you buy a subscription or Coins, we receive confirmation details from Google Play or Apple, such as the product purchased, the purchase status, the amount and currency, the date, and a transaction or receipt reference. We do not receive or store your full card number or other payment credentials. See Section 5.

2.7 Creator Program and verification information

If you apply for the Creator Program, ask to withdraw Earnings, or are asked to verify your age or identity, we may collect additional information, such as identity verification details, bank account details for payouts (bank name, account holder name, and account number, which we store encrypted), and records of Gifts, Earnings, and withdrawals. We collect this only where it applies to you.

3. How We Use Your Information

We use your information to:

• create and manage your account;
• show your profile to potential matches and enable connections;
• deliver real-time messaging, calls, Moments, and live streams;
• send push notifications about matches, messages, and activity;
• send transactional emails, such as OTP codes and account verification;
• process purchases, subscriptions, Gifts, and Creator Earnings and withdrawals;
• show advertising to free-tier users and measure how ads perform;
• enforce our Terms of Service and Community Guidelines;
• improve and personalise the Service through analytics;
• prevent fraud, abuse, and child exploitation, and keep the platform safe; and
• comply with legal obligations.

We do not sell your personal data.

4. How We Share Your Information

We do not sell, trade, or rent your personal information. We share information only in these situations:

• With other users. Your profile information (name, photos, bio, age, and interests) is visible to other users as part of the core function of the App. Live streams and public content can be seen by others.
• With service providers who help us run the Service (see the table below).
• With app stores. Apple and Google process your in-app purchases (see Section 5).
• For legal reasons. We may disclose information if required by law, court order, or a government authority, including to report child exploitation to the Royal Malaysia Police (PDRM), the Malaysian Communications and Multimedia Commission (MCMC), and other competent authorities.
• For safety. We may share information to protect the rights, property, or safety of Lovia, our users, or the public.
• In a business transfer. If there is a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We do not share your private messages, photos, or profile content with advertising networks.

Service providers

Each provider has its own privacy policy, and we encourage you to read them. We are not responsible for the privacy practices of third-party services.

5. Payments and Subscriptions

In-app purchases of subscriptions (Connect and Infinity) and Coins are handled by the store you buy through:

• Android: payments are processed by Google Play under Google's terms and privacy policy.
• iOS: payments are processed by Apple, which acts as the payment processor for App Store purchases, under Apple's terms and privacy policy.

Apple and Google collect and process your payment details themselves. We only receive the purchase confirmation information described in Section 2.6, which we use to unlock what you bought, prevent fraud, handle support requests, and keep financial records.

Subscriptions are managed, cancelled, and refunded through the store where you purchased them. Deleting your Lovia account does not cancel a subscription (see Section 9).

Creator payouts, where available, are currently made by manual bank transfer from Vallenova, using the payout details you give us. If we add a payment partner for payouts later, we will update this policy and tell you.

6. Advertising and Tracking (Android and iOS)

6.1 Advertising on the free tier

Free-tier (Spark) users see ads served by third-party networks, including Google AdMob. These networks may use device identifiers, IP address, approximate location, and information about how you interact with ads to select and measure ads, including personalised ads where permitted and where you have given any consent required. Paid tiers (Connect and Infinity) are ad-free.

6.2 iOS: App Tracking Transparency

On iOS, Apple requires apps to ask your permission before they "track" you, meaning linking data collected from the App with data from other companies' apps or websites for advertising, or sharing it with data brokers.

• Where this applies, Lovia shows Apple's App Tracking Transparency prompt before any tracking takes place.
• If you choose Ask App Not to Track, we do not access your IDFA, we do not track you across other companies' apps and websites, and the ads you see are not personalised using cross-app data.
• You can change your choice at any time under Settings → Privacy & Security → Tracking, and turn tracking on or off for Lovia.

6.3 Android: advertising ID

On Android, you can reset your advertising ID, delete it, or opt out of ad personalisation in your device settings. The exact path depends on your device and Android version, and is usually under Settings → Google → Ads or Settings → Privacy → Ads.

6.4 What we do not do

We do not sell your personal data, and we do not use your private messages or the content of your calls to target advertising.

7. Data Storage, Transfers, and Security

Where your data is processed. Our API servers and cache are hosted in Singapore. Your data is also stored and processed by other service providers, which may be located outside Malaysia, Indonesia, and Thailand. When we transfer personal data across borders, we take reasonable steps to make sure it continues to be protected in line with applicable data protection laws.

How we protect it. We use industry-standard safeguards, including HTTPS/TLS encryption for connections between the App and our servers, encryption at rest for our database, bcrypt password hashing, JWT authentication with refresh token rotation, and rate limiting to prevent abuse.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects you, we will notify you and the relevant authorities as the law requires.

8. Data Retention

We keep your personal data for as long as your account is active or as needed to provide the Service.

• When you delete your account, your profile is removed from discovery immediately, and your personal data is permanently deleted within 30 days, except for the items described in this section and where we are legally required to keep it longer.
• Messages. The messages you sent are replaced with "This message was deleted." The placeholders, and the messages other users sent to you, remain in those users' own chat history.
• Matches and likes. Matches are deactivated rather than erased, and likes are not erased. Swipe passes expire automatically.
• Live streams and live chat. Live chat messages are stored in our database and are not deleted on a fixed schedule. If a live stream is recorded for safety review, the recording is kept only as long as needed for safety review, enforcement, and legal compliance, and may be kept longer where needed as evidence in an investigation or where the law requires it.
• Transaction, payout, and financial records may be kept for the period required by Malaysian accounting and tax law, which is generally up to seven years.
• Safety and legal records, including evidence relating to child safety violations, may be kept for as long as the law requires or as needed to deal with a legal claim or investigation.

9. Your Rights and Choices

You have the following rights over your personal information:

• Access: you can view your profile and account information in the App at any time, and you may ask us for a copy of the personal data we hold about you.
• Correction: you can update your profile information in the App settings, or ask us to correct it.
• Deletion: you can delete your account in the App under Profile → Settings → Delete Account, or through https://loviapp.live/api/delete-account. Deleting your account does not cancel any Google Play or Apple App Store subscription, so please cancel it in the relevant store first.
• Withdraw consent and object: you can withdraw consent or object to certain processing (for example, by turning off push notifications, or camera, microphone, and photo access, in your device settings), though some features may then stop working.
• Data portability: you may request a copy of your personal data in a commonly used format.
• Advertising controls: see Section 6 for iOS tracking controls and Android advertising ID settings.
• Complaints: if you are not satisfied with how we handle your data, you may contact us, and you may also complain to the data protection authority in your country.

To exercise any of these rights, email officiallovia1@gmail.com. We will respond within 30 days. We may need to verify your identity before acting on a request.

10. Children's Privacy

Lovia is strictly for users aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we find that a minor has created an account, we will immediately terminate it and delete the associated data, except for information we must preserve as evidence or are required by law to keep.

If you believe a minor is using Lovia, please contact us immediately at officiallovia1@gmail.com. See also our Child Safety Policy at https://loviapp.live/api/child-safety.

11. Regional Notes (Malaysia, Indonesia, Thailand)

We process personal data in line with the Personal Data Protection Act 2010 (Malaysia) and, where they apply to you, Indonesia's Personal Data Protection Law (PDP Law) and Thailand's Personal Data Protection Act (PDPA). Depending on where you live, you may have additional rights under those laws, including rights to access, correct, delete, restrict, or object to the processing of your data, and to withdraw your consent. We will honour those rights as the law requires.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last Updated" date at the top of this page and, where appropriate (and always for material changes), notify you in the App or by email before the changes take effect. If you keep using Lovia after the changes take effect, you accept the updated policy.

13. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or your personal data, please contact our Privacy team:

Vallenova Industries Sdn Bhd
Registration No. 202501047502
Sungai Petani, Kedah, Malaysia
Email: officiallovia1@gmail.com

We will respond within 30 days.