Privacy Policy

Last updated: December 5, 2025

This Privacy Policy is provided for general information only and does not constitute legal advice. Because privacy laws can be complex and change over time, you should have a qualified lawyer review and adapt this policy for your specific situation before publishing it.

Laavy ("Laavy", "we", "us") is a private shared space for couples, friends, and family members to stay emotionally and practically connected. This Privacy Policy explains how we collect, use, and share information when you use our mobile app and related services (collectively, the "Service"), and the choices you have.

If you do not agree with this Policy, please do not use Laavy.

You can contact us at support@laavy.com about any questions or privacy requests.

1. Information We Collect

We collect information in three main ways: (a) information you provide directly, (b) information about how you use Laavy, and (c) information from the device and services you use to access Laavy.

1.1 Information You Provide

  • Account and profile information. When you create an account, you provide an email address, password (handled by our authentication provider), and may add a display name and optional avatar. We also store identifiers created by our authentication and database providers.
  • Relationship spaces ("nests"). When you create or join a shared space with a partner, friends, or family members, we store the name of the space and which accounts belong to it.
  • Check-ins and board content. Within a shared space you can add content such as: energy and mood check-ins, "One thing I need today" and "What I can offer" notes, practical checklists and logistics for the day, tonight plans, sensitivities and things you are tender about, appreciations and small thank-you notes, repair flow entries describing how you felt, what you needed, and what you still appreciate, and shared notes and similar cards on the board. This content can be deeply personal. It is visible only to you and the other members of that specific relationship space.
  • Memories and media. You may upload photos or other media to save shared memories. We store these files in our storage provider and link them to your relationship space.
  • Support and communication. If you contact us (for example at support@laavy.com), we collect the information you provide in that communication.

1.2 Information We Collect Automatically

  • Device and usage information. When you use Laavy, we may collect technical information such as device type and operating system, app version, and log information about how you interact with the app (for example, when you sign in, update a card, or add a memory), mainly to keep your shared board and timeline in sync and to debug problems.
  • Push notification tokens. If you enable push notifications, we collect a device-specific push token and basic device details (platform such as iOS or Android). We store this token so we can send you notifications when there are important updates in your shared space.
  • Local storage on your device. To let you see your board and timeline quickly and offline, we cache some data securely on your device. Removing the app or clearing app data on your device will normally delete this local cache.

1.3 Information From Third Parties

  • Sign-in providers (if you choose to use them). If we offer and you use sign-in with Apple, Google, or similar providers, they may send us basic account information such as your name, email, and a unique identifier. What we receive depends on the provider and your settings with them.

We do not buy data about you from data brokers, and we do not use third-party advertising networks inside the app.

2. How We Use Your Information

We use the information we collect for the following purposes:

  1. To provide and maintain the Service. For example: creating and securing your account, pairing you with your partner, friends, or family in a private space, storing and syncing your board content, memories, and timeline entries between members of a space, and handling offline access and resynchronization when you come back online.
  2. To communicate with you. For example: sending transactional emails (such as account-related messages) and in-app messages, and sending push notifications when there are updates in your shared space, if you enable them.
  3. To improve Laavy. For example: understanding which features people use so we can make them better, monitoring performance, debugging problems, and keeping the app reliable, and developing new features and tools for relationships, friends, and family.
  4. To keep Laavy safe and secure. For example: detecting, investigating, and preventing fraud, abuse, or violations of our Terms of Service, and protecting our rights, property, and the rights and safety of our users.
  5. To comply with legal obligations. For example: responding to valid legal requests or law enforcement where required, and meeting record-keeping and other obligations under applicable law.

We do not sell your personal information and we do not use third-party advertising networks inside Laavy.

3. Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area (EEA), the United Kingdom, or a similar jurisdiction, we rely on one or more of the following legal bases to process your personal data:

  • Contract. We process your information as necessary to provide you with Laavy under the contract you accept when you create an account and use the Service.
  • Legitimate interests. We process information to improve Laavy, keep it secure, prevent abuse, and understand how it is used—while respecting your rights and expectations.
  • Consent. We rely on your consent for certain processing, such as sending push notifications, using optional sign-in providers, or processing certain media. You can withdraw consent at any time (for example, by changing your notification settings or uninstalling the app), but this will not affect processing that has already occurred.

You may have rights to object to or restrict certain processing based on these legal bases; see Section 8 below for more information.

4. How We Share Information

We share information in limited ways and only as needed to operate Laavy, comply with the law, or with your direction.

4.1 With Other People in Your Relationship Spaces

Laavy is designed for shared spaces. The content you add to a relationship space (such as your check-ins, appreciations, repair flow entries, and memories) is visible to the other member(s) of that specific space. Be thoughtful about what you share.

4.2 Service Providers and Infrastructure

We use carefully selected third parties to help us operate Laavy. These providers act as our processors and may process personal information on our behalf:

  • Supabase. We use Supabase for authentication, database, realtime updates, and file storage. Your account information, relationship space data, and media may be stored on Supabase-managed infrastructure.
  • Expo and push notification providers. We use Expo and related services to manage push notifications, which rely on platform providers such as Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM). These services process your device's push token and basic information needed to deliver notifications.
  • Cloud and technical infrastructure providers. Like most apps, we may rely on hosting, storage, logging, and monitoring providers to run Laavy securely and reliably.
  • Sentry. We use Sentry for error monitoring and crash reporting. When the app encounters an error or crash, Sentry may receive technical information such as device type, operating system, app version, and error details. This helps us identify and fix problems quickly. Sentry does not receive your personal content (such as check-ins, appreciations, or memories).
  • PostHog. We use PostHog for product analytics to understand how features are used and to improve the app experience. PostHog receives anonymized usage data such as screen views, feature interactions, and general app usage patterns. PostHog does not receive your personal content or messages.

These providers are allowed to process your information only to provide services to us and are bound by appropriate contractual and security obligations.

4.3 Optional Sign-In Providers

If we offer and you choose to use sign-in with Apple, Google, or similar providers, those companies will process your information independently of us in line with their own privacy policies. They may also share limited information (such as your email and display name) back with Laavy to create or update your account.

4.4 For Legal, Safety, and Business Reasons

We may disclose information if we reasonably believe it is necessary to:

  • Comply with applicable law, legal process, or valid governmental requests.
  • Enforce our Terms of Service or other agreements.
  • Protect the rights, property, or safety of Laavy, our users, or the public.

If we are involved in a merger, acquisition, financing, or sale of all or part of our business, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections and, where required, further notice to you.

4.5 What We Do Not Do

  • We do not sell your personal information.
  • We do not share your content with advertisers.
  • We do not run third-party advertising SDKs or social media trackers inside Laavy. The analytics tools we use (Sentry and PostHog) are for improving app quality and user experience, not for advertising purposes.

5. Data Retention

We keep your information only for as long as it is reasonably necessary for the purposes described in this Policy or as required by law.

  • Account and relationship space data. We retain your account information and the content in your relationship spaces while your account is active and the space remains active. When you delete your account or leave a space, we may retain some information so that the remaining member(s) can continue to access their shared history, or until the space is archived.
  • Memories and media. Media you upload is retained while the associated relationship space is active, unless you delete it from within the app or request deletion.
  • Push notification tokens. Device tokens are kept while you use the app on that device and may be removed when they expire, we detect that they are no longer valid, or you disable notifications.
  • Logs and technical data. We may keep logs and diagnostics for a limited period to protect security, troubleshoot issues, and meet legal obligations. These are typically retained for shorter periods unless needed for an active issue.

We may anonymize or aggregate information so that it can no longer identify you. We may use that information indefinitely without further notice.

6. International Data Transfers

Laavy is operated from the United States, and our service providers may process information in the United States and other countries. These countries may have different data protection laws than your home country.

Where required by law, we rely on appropriate safeguards for international data transfers, such as standard contractual clauses approved by regulators. Regardless of where your data is processed, we take steps to protect it in line with this Policy.

7. Security

We take security seriously and use technical and organizational measures designed to protect your information, including:

  • Access controls and authentication for your account.
  • Row-level security rules and permission checks in our database to ensure only authorized users can access their relationship spaces.
  • Encryption in transit (HTTPS/TLS) and at rest provided by our infrastructure providers.
  • Secure storage of sensitive tokens (such as session information) using platform-provided secure storage on your device where available.

However, no online service or data transmission can be guaranteed 100% secure. We cannot promise that information will always remain secure, and you share information at your own risk. You can help by keeping your account secure (for example, using a strong password and not sharing it with others).

8. Your Rights and Choices

8.1 Managing Your Information

  • Access and updates. You can access and update certain account information directly in the app. If you need help accessing, correcting, or deleting other information, contact us at support@laavy.com.
  • Delete your account. You may be able to delete your account from within the app. We may retain certain information after account deletion where permitted or required by law, including to respect the shared nature of relationship spaces.
  • Notifications. You can control push notifications through your device settings and within the app. If you disable notifications, we will stop sending them, but we may still send important service-related messages by email.

8.2 Rights in Certain Regions

If you are in the EEA, UK, or a similar jurisdiction, you may have additional rights, including to:

  • Request access to your personal data.
  • Request correction or deletion of your data.
  • Object to certain processing or ask us to restrict it.
  • Request a portable copy of your data.
  • Withdraw consent where we rely on consent.

You can exercise these rights by contacting us at support@laavy.com. We may ask you to verify your identity before responding.

Depending on your location, you may also have the right to lodge a complaint with your local data protection authority.

9. Children and Minors

Laavy is not directed to children under 13, and they are not allowed to create an account.

If you are between 13 and 17, you should only use Laavy with the permission of a parent or legal guardian and in accordance with the laws of your country.

If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete it. If you believe this has happened, please contact us at support@laavy.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will revise the "Last updated" date at the top of the Policy. For significant changes, we may also provide additional notice (for example, in-app or by email).

Your continued use of Laavy after we publish or communicate a change means that you accept the updated Policy. If you do not agree, you should stop using the Service and, if applicable, delete your account.

11. Contact Us

If you have questions about this Policy, our data practices, or your rights, you can reach us at:

  • Email: support@laavy.com

If required by law in your region, you may also have the right to contact your local data protection authority.