Privacy Policy & Data Safety Disclosures — Lovio

Executive Privacy Commitment

Our Core Privacy Principles

Zero Data Selling

We NEVER sell, monetize, or lease your personal information, photos, or chat history to third-party advertisers or data brokers.

Encrypted In-Transit & At-Rest

All communications use industry-standard TLS 1.3 encryption. Profile media is protected with AES-256 cloud encryption.

24-Hour Ephemeral Stories

Moments and Stories automatically expire and are purged from storage after 24 hours via automated TTL workers.

Absolute User Control

Instant 1-click in-app account deletion, ghost mode distance toggles, and permanent data erasure are guaranteed at any time.

1. Identity of Data Controller

Who Operates Lovio?

This Privacy Policy applies to the mobile and web application LOVIO — Meet. Match. Connect. (Package Name: com.pst.lovio), developed, operated, and maintained by Pendu Soft Tech (“we”, “us”, or “our”), registered in Punjab, India (Official Website: pendu.in).

Operating Entity: Pendu Soft Tech

Application: LOVIO — Meet. Match. Connect.

Primary Contact: privacy@lovio.app | support@pendu.in

Jurisdiction: Laws of the Republic of India (DPDP Act 2023 & IT Rules 2021)

2. Google Play Data Safety Disclosures

Information We Collect & Why

In accordance with Google Play Developer Policy (User Data & Data Safety Section), the following table specifies all categories of data collected, the purpose of collection, and sharing parameters:

Data Category	Specific Data Elements	Primary Purpose	Data Sharing
Personal Info	Full Name, Email address, Mobile phone number, Date of birth (age 18+ verification), Gender, Sexual preference, Bio, Lifestyle tags.	Account creation, user authentication via Firebase Auth, profile recommendation, and age gate enforcement.	Not shared with third-party marketers.
Location	Approximate Location and Precise GPS coordinates (foreground only, with explicit device permission).	Proximity calculation to recommend nearby singles. Coordinates are NEVER shown to other users; only approximate distance radius (e.g. “4 km away”) is displayed.	Never shared or broadcast.
Photos & Videos	Profile photos, Moments/Stories, ephemeral media, Ask Me Anything (AMA) photo replies, external gallery shares.	Visual profile display, user verification, and social expression. Uploads stored securely on Cloudflare R2 with AES-256 encryption.	Only visible to authorized app users per user settings.
Messages & Social	Direct chat messages, Moments Poll sticker votes, AMA cards, 5-minute blind chat interactions, mutual likes/matches.	Core social communication. Real-time messaging routed over TLS 1.3 encrypted WebSockets.	Private between participants only.
Audio & Video Calls	Real-time WebRTC audio and video media streams (powered by Agora).	Live calling between matched users. Lovio DOES NOT record, monitor, or store audio/video call streams.	Zero retention. P2P encrypted media.
Device & Diagnostics	Firebase Cloud Messaging (FCM) push tokens, device model, OS version, IP address, Crashlytics diagnostics.	Push notification delivery (match alerts, messages), fraud prevention, anti-spam, and app stability optimization.	Processed via Google Firebase SDK.
Financial & Purchases	Lovio Coin balances, VIP/Gold subscription order IDs, transaction timestamps.	Unlocking premium perks and managing virtual coin balances via PayU and Google Play Billing. Lovio never collects or stores raw credit card/CVV numbers.	Processed securely by authorized payment gateways.

3. How Lovio Specialized Features Handle Data

Privacy in Lovio’s Interactive Experiences

Moments & Stories (Automatic 24-Hour TTL Deletion)

When you publish a Moment or Story (up to 5 per day), it remains visible to compatible matches for exactly 24 hours. Once the 24-hour window lapses, our automated TTL (Time-To-Live) background worker automatically marks the story as expired and deletes the media file from Cloudflare R2 storage.

Moments Poll Stickers & Voting

Poll stickers allow users to cast votes on story questions. Individual voting choices are only disclosed to the creator of the moment to enable conversational icebreakers and are never made public to general viewers. When the parent Moment expires after 24 hours, all associated votes and poll records are permanently erased.

5-Minute Blind Chat / Speed Dating

During 5-Minute Blind Chat sessions, profile photos and identifying handles remain obscured to facilitate personality-first conversations. If both users do not mutually agree to match before the 5-minute timer expires, the ephemeral chat session and message logs are discarded immediately.

Ask Me Anything (AMA) Prompts

AMA prompts provide questions you voluntarily answer on your profile or moments. You can edit, hide, or delete your AMA questions and answers at any time from your profile editor.

4. Third-Party Service Providers

Trusted Infrastructure Partners

We partner with verified, enterprise-grade cloud providers to operate Lovio safely. Each partner adheres to strict confidentiality and privacy agreements:

Google LLC (Firebase)

Provides secure SMS authentication, FCM push notification delivery, and Crashlytics stability reporting.

Cloudflare, Inc. (Cloudflare R2)

Encrypted object storage for user profile photos and moments with zero egress fees and automated deletion support.

Agora Inc. (Agora RTC)

Low-latency WebRTC infrastructure for audio and video calls. No call streams are recorded or stored.

MongoDB Atlas

ISO 27001 and SOC 2 Type II certified cloud database storing user profiles and match records with TLS and AES-256 encryption.

5. Children’s Privacy & 18+ Age Restriction

Strict 18+ Eligibility Gate

Lovio is exclusively intended for consenting adults aged 18 years or older. We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18.

Mandatory Date of Birth Verification: During signup, all users must input their date of birth. Any registration attempt by an individual under 18 is automatically rejected.
Immediate Data Purge for Minors: If we obtain knowledge that a user is under 18, their profile, photos, and messages are permanently purged from our servers immediately without recovery.
Parental Inquiries: Parents or legal guardians who suspect a minor has accessed Lovio can contact privacy@lovio.app for urgent profile deletion.

6. Data Retention & Right to Erasure

You Control Your Data

We store your profile data only for as long as your account remains active. You possess complete rights to access, update, download, or erase your data at any time:

In-App Instant Deletion: Tap Profile > Settings > Delete Account inside the Lovio app to immediately and permanently delete your account, photos, matches, and chats.

Online Deletion Request: If you uninstalled the app or lost device access, visit our Account Deletion Portal to request permanent data erasure without reinstalling.

Statutory Retention Exception: As permitted under Google Play policies, tax invoices and billing transaction references are retained solely for financial auditing in accordance with Indian statutory tax requirements (GST Act), completely decoupled from active social profiles.

7. Grievance Officer & Contact Information

Data Protection & Redressal

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, you may contact our designated Grievance Officer with any questions or complaints:

Designation: Data Protection & Grievance Redressal Officer

Entity: Pendu Soft Tech

Address: Punjab, India

Email: grievance@lovio.app / privacy@lovio.app

Response Timeline: Acknowledgments provided within 24 hours; grievances resolved within 15 calendar days.

Have questions about our Community Rules?

Read our Community Guidelines, CSAM Zero-Tolerance policy, and EULA.