Privacy Policy

Last Updated: October 3, 2026

lovx respects the privacy of its users and is committed to protecting the personal data processed through its application, website, and related services.

This Privacy Policy explains what data we collect, how we collect it, every purpose for which we use it, with whom we share it, how long we retain it, and what rights are available to users.

1. Who is responsible for data processing

lovx is operated by:

  • Legal name: lovx Labs Inc
  • Trade name: lovx
  • Privacy contact: dev@lovx.live

For the purposes of data protection laws, the company identified above acts as the controller of the personal data processed by lovx, determining the purposes and means of such processing.

2. Data we collect

lovx collects only the categories of data listed below. Which of them actually apply depends on the features you use, the permissions you grant, and the accounts you choose to connect.

Account data

  • Name and email address;
  • Password, stored only as a cryptographic hash — we never store or transmit the password itself;
  • The account identifier returned by Sign in with Apple or Sign in with Google, together with the name and email address those services share with us;
  • The preferences you set during setup, such as language and areas of focus.

Recordings and transcripts

  • Audio you record in the app, and the transcripts generated from that audio;
  • A voice sample you record during initial setup, used to identify who is speaking in later recordings. The sample and the mathematical voice signature derived from it are processed on lovx's own systems;
  • Summaries, titles, topics, reminders, and other content lovx generates from your recordings.

Chat content

  • Messages you write to lovx and lovx's replies;
  • Photos, images, documents, and other files you attach in the chat.

Content from connected apps

When you connect an account, lovx receives content from that account within the scope you authorize. Accounts that can be connected include:

  • Google — Gmail, Calendar, Drive, Docs, Sheets, Slides, and Tasks;
  • Microsoft — Outlook, Teams, OneDrive, and Excel;
  • Slack, Notion, and Linear;
  • WhatsApp, including messages and media;
  • Instagram and other social accounts, such as LinkedIn, YouTube, TikTok, X, and Reddit;
  • Whoop and Oura, including sleep, recovery, readiness, and activity data;
  • Work and productivity tools, such as GitHub, GitLab, Figma, Canva, ClickUp, Trello, Todoist, Calendly, Stripe, Vercel, and Grafana.

The complete, current list is shown on the Integrations screen in the app. No connection is made without your explicit authorization, and you may disconnect any of them at any time.

Data from the device, with your permission

  • Calendar events and reminders from the iPhone, when you grant calendar and reminders access;
  • Contacts, when you grant contacts access;
  • Location: points collected during recordings, places you save, and the regions lovx monitors in order to deliver location-based reminders;
  • Photos and camera images, when you choose to attach them or grant photo library access;
  • Speech you dictate into the message box, which is converted to text using the operating system's speech recognition.

Technical and subscription data

  • The device token used to deliver push notifications, including notifications about your recordings and reminders;
  • Usage data required to operate the subscription and enforce its quota, such as the number and length of recordings, number of messages, and the processing cost attributed to the account;
  • Device and diagnostic information, such as app version, operating system, language, and error reports, used to keep the service working;
  • Billing data when you subscribe, processed by our payment provider.

Health data received from Whoop, Oura, or similar sources may be considered sensitive personal data under applicable laws and is processed in accordance with that classification.

lovx does not collect anything from an app you have not connected, and does not use the microphone outside of recordings you start.

3. How we collect the data

All of the data described above reaches lovx as the direct result of an action taken by you in the app. Specifically, lovx receives data when you:

  • Create an account, or sign in with Apple or Google;
  • Start a recording;
  • Record the voice sample during initial setup;
  • Write a message, or attach a photo, document, or other file;
  • Connect an external account and authorize the scope of that connection;
  • Grant a system permission on the device;
  • Subscribe to a paid plan.

Each device permission — microphone, speech recognition, calendar, reminders, contacts, location, notifications, camera, and photo library — is requested separately and granted explicitly by you through iOS. lovx cannot access any of them until iOS records that permission, and you may revoke any of them at any time in the iOS Settings app. Revoking a permission stops the corresponding collection, and features that depend on it stop working.

lovx does not buy personal data from third parties and does not collect data about people who are not users, except for information contained in content you yourself record, write, attach, or import from an account you connected.

4. How we use the data

lovx uses the data collected for the following purposes, and no others:

  • Transcribing the audio you record;
  • Identifying who is speaking in your recordings;
  • Answering you in the chat, including answers based on attached files;
  • Generating summaries, titles, topics, reminders, and suggestions from your content;
  • Executing routines and actions you request, including actions in the accounts you connected;
  • Personalizing the assistant, so that it takes into account what you have previously recorded, written, saved, and set as a preference;
  • Organizing and retrieving the information you have stored in lovx;
  • Delivering notifications and location-based reminders you asked for;
  • Creating and maintaining the account, and authenticating the user;
  • Operating the subscription, including billing and quota control;
  • Keeping the service secure, stable, and working, including diagnosing errors and preventing abuse;
  • Providing support and responding to user requests;
  • Complying with legal and regulatory obligations.

lovx does not sell personal data, does not use user content for advertising, and does not use user content to train artificial intelligence models — neither its own nor those of third parties.

5. Third-party AI providers

To operate lovx, we share user content with artificial intelligence providers that process it on our behalf: Anthropic, Google, and OpenAI. We route each task to the model that handles it best, so the specific models change over time; the companies listed above are the only AI companies whose models process user content.

Each of these providers processes the data under a data processing agreement that requires protection equal or equivalent to the protection we provide under this Policy, exclusively for the purpose of operating lovx, and that does not permit the use of the data to train their own models.

The content sent to them is limited to what is necessary to perform the requested feature: the audio and transcripts of your recordings, the messages and files sent in the chat, content from the accounts you connected, places you saved or shared when location is enabled, and your name and setup preferences. The user's password is never sent, and neither is anything from an app the user has not connected.

6. Other providers that process data for us

Besides the AI providers named in section 5, the following providers process personal data on lovx's behalf, each under a contract that requires protection equal or equivalent to the protection we provide under this Policy, limited to the purpose described:

  • Amazon Web Services (AWS) — hosting of our servers and databases, and storage of recordings and attached files;
  • Composio — technical connection to the external accounts you connect, which transmits the content exchanged with those accounts;
  • Expo and Apple (Apple Push Notification service) — delivery of push notifications to your device;
  • Stripe — payment and subscription processing. lovx does not receive or store full card numbers;
  • Sentry — error and diagnostic reporting, used to detect and fix failures;
  • Vercel — hosting and audience measurement for the website.

7. Accounts the user connects

When you connect an external account, lovx accesses it only within the scope authorized and only to perform the features you request. Each of those platforms is an independent controller of the data it holds and has its own terms and privacy policy, which lovx does not control.

8. Storage and retention

Recordings, transcripts, chat content, imported content, and other data associated with the account remain stored while the account is active, so that you can access your history and so that lovx's memory and personalization features can work.

Data is deleted:

  • When you delete the account;
  • Upon your request;
  • When it is no longer necessary for the purposes described in section 4;
  • When its storage is no longer permitted by applicable law.

9. Deleting your data and withdrawing consent

Deleting your data. You may delete your account directly in the app, under Settings, using the "Delete account" option. Deleting the account removes your data from lovx — including recordings, transcripts, the voice sample and the voice signature derived from it, chat content, attached files, saved places, imported content, and preferences. Deletion is irreversible.

You may also request deletion by email at dev@lovx.live.

Withdrawing consent. You may withdraw consent at any time, by any of the following means:

  • Revoking a specific device permission in the iOS Settings app;
  • Disconnecting an integration in the app;
  • Deleting the account in Settings;
  • Writing to dev@lovx.live.

10. International data transfers

The providers named in sections 5 and 6 may store or process information outside your country, including in the United States. In those cases, lovx adopts the mechanisms and safeguards required by applicable regulations.

11. Security

lovx adopts technical, administrative, and organizational measures intended to protect personal data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure, or improper processing.

12. User rights

Under applicable data protection laws, you may request, when applicable:

  • Confirmation of the existence of processing;
  • Access to personal data;
  • Correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion of unnecessary or excessive data;
  • Data portability;
  • Information about the entities with which the data has been shared;
  • Revocation of consent;
  • Deletion of data processed based on consent.

Requests may be sent to dev@lovx.live.

13. Children and adolescents

The processing of personal data of children and adolescents is carried out in accordance with their best interests and the protections provided by applicable law. Parents and legal guardians may contact dev@lovx.live to request access, correction, or deletion of data related to children under their responsibility.

14. Changes to this Policy

This Policy may be updated to reflect changes in lovx's services, operations, or applicable law. When relevant changes occur, lovx may notify users through the application, by email, or by another appropriate means. The date of the most recent version is indicated at the beginning of the document.

15. Contact

For questions, requests, or complaints related to this Policy or to the processing of personal data: