Privacy

Katarzyna Ludwig is responsible for Love, Spoken.

The provider's postal address will be added to the legal information before a public, commercial App Store launch. This beta notice is not a substitute for legal review.

• Account: stable Apple/Supabase user identifier, plus name and email if Apple provides them.
• Couple connection: display names, invitation, pair membership, language, time zone, and settings.
• Content: audio recordings, written answers, confirmed transcripts, private AI drafts, approvals, memories, and weekly letters.
• Device and operation: push token, app/device identifier, job status, and necessary security and error data. Push tokens are processed only when notifications are enabled.
• Support: information you voluntarily include in a support request.

We do not use advertising trackers or sell personal content.

Core data is used to provide sign-in, the private couple connection, answers, playback, the timeline, and weekly letters. Security and operational data is used for abuse prevention, error analysis, and reliable delivery.

The intended legal basis for the core service is performance of the service or operation of the closed beta. Optional AI processing takes place only with explicit consent. Necessary security processing relies on the legitimate interest in operating a safe service. This allocation will be legally reviewed before public launch.

Supabase is the operational backend for authentication, the PostgreSQL database, private object storage, server-side functions, and real-time updates. The project is hosted in the Frankfurt region.

Audio is stored in a private bucket. The app receives short-lived signed URLs for playback. Row Level Security and server-side authorization further restrict access.

Before personal audio or text is sent to OpenAI for the first time, the app presents a separate disclosure and requests explicit consent.

• The selected audio recording is sent to create a transcript.
• The original text, language, and length limit are sent to suggest more considerate wording.
• Only expressly confirmed source text, language, week context, and required display names are sent to create a weekly letter.

Text requests use the OpenAI Responses API with store: false and a pseudonymous safety identifier. According to OpenAI's current documentation, API data is not used to train models by default; default abuse-monitoring logs may be retained for up to 30 days. Any different contractual retention and transfer terms will be reviewed before public launch.

Raw transcripts, private AI drafts, and unconfirmed weekly letters are not visible to your partner. Your partner receives only content released under the delivery mode for that question.

A weekly letter is never shared automatically. You confirm the wording and decide whether to share it. After separation, a former partner loses access to content no longer shared with them; the partner's own content remains theirs.

Sign in with Apple is used for authentication. Apple processes subscription and payment data once in-app purchases are made public; Love, Spoken does not receive full payment details.

Notifications use Apple Push Notification Service. Push payloads do not contain audio, transcripts, or intimate statements. Device tokens are removed on sign-out or account deletion when the server can be reached.

The current beta does not enforce automatic content deletion after three months or one year. Account and relationship content generally remains until you remove it using an available deletion feature, withdraw consent and delete the affected AI data, or delete the entire account.

Temporary playback links expire after a few minutes. Technical job and security data is retained only while necessary for operation, evidence, abuse prevention, and legal duties. Binding retention periods and an external encrypted backup/restore process still need to be defined and verified before a paid public launch.

You may request access, correction, export, restriction, objection, and deletion. The structured in-app export currently does not include raw audio files.

Full account deletion is initiated in the app through Profile → Delete account and all data. End-to-end server release, including backup verification, remains a launch gate during beta. See the account deletion page for details.

Send privacy requests to support@lovespoken.app. You may also lodge a complaint with a competent data protection authority.

This website is delivered through Vercel. Technically necessary connection data, such as IP address, timestamp, URL, and browser information, may be processed in security and delivery logs. The website does not use advertising or analytics cookies.