Privacy Policy

Summary

• We collect what we need to run a dating and social app: your profile, your content, your device and usage data, and — where you use them — payment and creator payout records.
• We do not sell your personal data.
• We do show advertising. Free-tier users see ads served by Google AdMob, which uses your device advertising identifier. Paid tiers are ad-free. You can limit this in your device settings.
• We store data in Singapore, the United States, and other locations used by our providers.
• You can access, correct, or delete your data, and delete your account entirely, from within the App.

1. Scope

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use the Lovia mobile application, the website at loviapp.live, and related services (the "Service"). It applies to all users.

We process personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and, where applicable to users in those countries, Indonesia's Personal Data Protection Law (UU PDP) and Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

Lovia is for users aged 18 and above. We do not knowingly collect personal data from anyone under 18.

2. Information We Collect

2.1 Information you provide

Account and profile - Name, email address, password (stored hashed), phone number where provided - Date of birth, gender, bio, interests, photos and profile media - Preferences you set (discovery settings, notification settings)

Content you create - Chat messages, images, and voice notes - Moments posts and media - Live stream broadcasts and live chat - Voice and video call participation

Verification and identity (only where you use features that require it, such as creator payouts or age verification) - Government-issued identity document images - Selfie or liveness check images - Proof of address where required

Payment and payouts - Records of Coin purchases, Gifts sent and received, and subscription status - For approved creators: bank or DuitNow account details, payout history, tax-relevant records

We do not receive or store your full credit or debit card number. Purchases are processed by Google Play Billing.

Support and reports - Reports you submit about other users, appeals, and correspondence with our team

2.2 Information collected automatically

• Device information — device model, operating system, app version, unique device identifiers, language, time zone
• Usage data — features used, screens viewed, swipes, matches, session length, in-app actions
• Log data — IP address, access times, crash reports, performance diagnostics
• Advertising identifier — your Google Advertising ID (GAID), used for advertising as described in Section 5
• Push tokens — for delivering notifications
• Connection and call metadata — call start and end times, duration, participants, and quality diagnostics (see Section 2.4)

2.3 Location

We request access to your location to show you nearby users and to power the Nearby feature. Depending on your device permission, this may be approximate or precise. We use it to calculate distance and to power discovery; we do not track your location continuously in the background. You can revoke location permission at any time in your device settings, which will limit distance-based features.

2.4 Voice and video calls

Voice and video calls are carried over third-party real-time infrastructure (currently Agora). Call media is transmitted through Agora's network to connect you. We store call metadata (who called whom, when, duration, quality). We do not routinely record call content. We may capture or retain call or stream content where necessary to investigate a report, comply with a legal obligation, or protect user safety.

2.5 Live streams

Live streams and their associated chat may be recorded, stored, and reviewed for safety, moderation, and legal compliance. Anything you broadcast may also be recorded or screen-captured by viewers, which we cannot prevent.

2.6 Information from others

• Other users — reports, blocks, and messages about you
• Google Play — purchase and subscription status, purchase tokens, and real-time developer notifications
• Payment and payout providers — verification outcomes and payment status
• Advertising partners — aggregated delivery and measurement data

3. How We Use Your Information

Legal basis. Under the PDPA we process your data with your consent, given when you create an account and when you grant device permissions, and where processing is necessary for the performance of our contract with you, for compliance with a legal obligation, or for our legitimate interests in operating a safe service.

4. Information Sharing

We do not sell, trade, or rent your personal data.

We share data only as follows:

• With other users — your profile (name, photos, age, bio, interests, approximate distance) is visible to other users. Anything you post publicly or broadcast live is visible to those who can see it.
• Service providers — the providers listed in Section 7, who process data on our behalf under contract.
• Advertising partners — as described in Section 5.
• Legal requirements — where required by law, court order, regulator, or a lawful request from an authority such as PDRM or MCMC.
• Safety and child protection — to protect the rights, property, or safety of Lovia, our users, or the public; and to report child sexual exploitation and abuse material to the police and competent authorities.
• Business transfer — in a merger, acquisition, financing, or sale of assets, subject to this Policy continuing to apply.

5. Advertising

This section replaces the previous statement that we do not use data for advertising.

The free tier (Spark) of Lovia is supported by advertising. Ads are served by Google AdMob.

• AdMob may access your device advertising identifier and limited device and app signals to select, deliver, cap, and measure ads, and may serve personalised ads based on that identifier.
• We do not share your name, email, photos, messages, or profile content with advertising networks.
• Paid tiers (Connect and Infinity) are ad-free.

Your controls: on Android, go to Settings → Google → Ads to reset or delete your advertising ID and to opt out of ad personalisation. You may also subscribe to a paid tier to remove ads.

Google's advertising practices are described at policies.google.com/technologies/ads.

6. Data Storage, Security and Location

Your data is stored and processed using:

Security measures include HTTPS/TLS in transit, encryption at rest for our database and media storage, bcrypt password hashing, JWT authentication with refresh token rotation, role-based access control on administrative systems, an append-only audit log for administrative and financial actions, and rate limiting.

No system is completely secure. We cannot guarantee absolute security, and you share content at your own risk.

International transfers. Your data may be transferred to and processed in countries outside Malaysia, including Singapore and the United States. Where we transfer data outside Malaysia we take reasonable steps to ensure a comparable level of protection, in line with the PDPA.

7. Third-Party Services

Each of the following providers has its own privacy policy, which we encourage you to review. We are not responsible for the privacy practices of third parties.

• MongoDB, Inc. — database hosting
• DigitalOcean, LLC — application hosting
• Cloudflare, Inc. — media storage and network services
• Agora, Inc. — real-time voice, video, and live streaming
• Google LLC — Firebase Cloud Messaging, Google Play Billing, Google AdMob
• Twilio SendGrid — transactional email delivery
• Expo, Inc. — app build and update distribution
• Razorpay / Curlec — creator payout processing

8. Data Retention

When you delete your account, your profile is removed from discovery immediately and your personal data is permanently deleted within 30 days, except where retention is required above or by law.

9. Your Rights and Choices

Under the PDPA and equivalent laws you may:

• Access — view your profile in-App, or request a copy of your personal data
• Correct — update your information in App settings
• Withdraw consent — revoke device permissions (location, camera, microphone, notifications) at any time; some features will stop working
• Limit processing — object to certain processing, including direct marketing
• Delete — permanently delete your account via Settings → Delete Account or at https://loviapp.live/api/delete-account
• Data portability — request a machine-readable copy of the data you provided

To exercise these rights, email officiallovia1@gmail.com. We may ask you to verify your identity. We aim to respond within 21 days and in any event within 30 days.

Before deleting your account, note that unused Coins and any Earnings not yet withdrawn are forfeited. See the Terms of Service.

10. Children's Privacy

Lovia is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that a person under 18 has created an account, we will terminate the account immediately and delete the associated data, other than records we must preserve for legal or safety reasons.

We maintain a zero-tolerance policy on child sexual exploitation and abuse. Confirmed material is preserved and reported to the Royal Malaysia Police (PDRM) and other competent authorities.

Report concerns to officiallovia1@gmail.com — see https://loviapp.live/api/child-safety

11. Users in Indonesia and Thailand

If you use Lovia in Indonesia or Thailand, you have rights under your local data protection law that are broadly equivalent to those in Section 9, including rights of access, correction, deletion, objection, and withdrawal of consent. Your data will be transferred to and processed in Malaysia and Singapore. To exercise these rights, contact officiallovia1@gmail.com.

12. Changes to This Policy

We may update this Policy. We will revise the "Last Updated" date and, for material changes, notify you in-App or by email at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

13. Contact Us

Vallenova Industries Sdn Bhd Registration No: 202501047502 Sungai Petani, Kedah, Malaysia Email: officiallovia1@gmail.com

We aim to respond to privacy enquiries within 21 days.