Privacy Policy

Effective date: September 25, 2026

Operated by Maiti LLC

1. Who we are

LOVN is a caregiving coordination application operated by Maiti LLC ("we", "us", "our"). We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including the Personal Health Information Protection Act (PHIPA) for users in Ontario.

2. Information we collect

We collect two types of information: Information you provide directly: your name, email address, role (caregiver type), profile photo, and care circle data you choose to enter — including patient names, dates of birth, medical conditions, allergies, medications, appointments, and care notes. Usage data: anonymized analytics about how you use the app (screens visited, features used). We do not sell this data. Website beta waitlist: if you join the LOVN beta on our website, we collect your first name, email address, and — only if you choose to answer — who you are caring for (for example, a parent or partner). We use this only to send you updates about the LOVN beta and to understand our early audience.

3. How we use your information

We use the information we collect to:

Provide, operate, and maintain the LOVN service
Enable care circle collaboration with caregivers you invite
Send you notifications you have opted into
Respond to your support requests
Send beta invitations and updates to people who joined the waitlist (you can unsubscribe at any time)
Improve the app based on aggregated, anonymized usage patterns

We do not use your data for advertising, and we do not sell your personal information to any third party.

4. Health information

LOVN is a caregiving coordination tool, not a regulated health information custodian or electronic medical record system. Health information you enter (conditions, medications, vitals) is stored to facilitate care coordination among your circle and is not used for clinical decision-making. We recommend you do not enter information you would not share with all members of your care circle.

5. Data storage and security

Your data is stored on Supabase infrastructure, which is hosted on Amazon Web Services (AWS). We implement industry-standard security controls including encryption in transit (TLS 1.2+), encryption at rest (AES-256), and row-level security policies that restrict data access to authorized members of your care circle. No method of electronic storage is 100% secure. We encourage you to use a strong, unique password and enable multi-factor authentication when available.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the service. When you delete your account, we permanently delete your personal data and care circle data (if you are the sole member) within 30 days, except where we are required to retain it by law. If you joined the beta waitlist on our website, we keep your details until you unsubscribe or ask us to delete them by emailing hello@lovn.app.

7. Sharing with third parties

We share your information only with:

Supabase (database and authentication infrastructure)
Firebase / Google (push notifications)
Apple (Apple Sign In, push notifications on iOS)
MailerLite (email list management and delivery for the beta waitlist)

All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

8. Your rights

Under PIPEDA and applicable provincial law, you have the right to:

Access the personal information we hold about you
Correct inaccurate information
Withdraw consent and request deletion of your data
Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, email hello@lovn.app or use the Delete Account option in the app (More → Delete Account).

9. Children

LOVN is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact hello@lovn.app.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes through an in-app notice or email at least 14 days before the change takes effect. Continued use of LOVN after the effective date constitutes acceptance of the updated policy.

11. GDPR — Rights for users in the European Economic Area

If you are located in the European Economic Area (EEA), the following applies to you in addition to the rights described above. Lawful basis for processing: We process your personal data on the following legal bases:

Performance of a contract — to provide you the LOVN service
Legitimate interests — to improve the app and prevent fraud
Explicit consent — for health and sensitive personal data

Your rights under the GDPR:

Right of access — request a copy of your personal data (use "Export My Data" in More → Account)
Right to rectification — correct inaccurate data (use Edit Profile)
Right to erasure — request deletion of your data (use Delete Account or email hello@lovn.app)
Right to data portability — receive your data in a machine-readable format (use "Export My Data")
Right to restriction — request we limit processing of your data
Right to object — object to processing based on legitimate interests
Right to withdraw consent — withdraw consent for health data processing at any time

International data transfers: Your data is stored on servers located in the United States (AWS us-west-2, Oregon) operated by Supabase. Transfers from the EEA to the US are made under appropriate safeguards in accordance with GDPR Article 46. Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority. Privacy Officer: Jazmin Gedikian — hello@lovn.app