Privacy Policy
Last updated 2026-10-12
Who is responsible
Lovna is a free, non-commercial project run by a private individual, who decides how your data is used. Contact: hello@lovna.day.
What we collect
- Your email address, from signing in with Google or with an email link. Google also passes on your name and profile photo to the sign-in system; Lovna never reads or uses them.
- What you enter at signup: your last injection date, your weight before the medication, your weight now, the weight you want to hold, your timezone and your units.
- Your daily check-ins: weight, hunger from 1 to 5, whether you hit your protein target, and whether you trained.
- What Lovna works out from them: your typical range, alerts and wins, and your weekly summaries.
- Optional answers to the short feedback questions sent on days 14, 30 and 45.
- Simple usage records, such as "a check-in was logged" or "an email was sent", tied to a random account number, and a daily count of homepage visits made from a scrambled, daily-changing code of the visitor's IP address. No IP address is stored. When you ask for an email sign-in link, a scrambled code of your address is kept for one hour, so nobody can flood an inbox with links.
We never ask which drug you took or what dose. Because your numbers come from someone stopping a GLP-1 medication, we treat all of it as health data. Your health data sums this up in a few lines.
Why, and on what basis
We use your data only to run your program: to work out your range, send your daily link, alerts and Sunday summary, and keep your history. The legal basis is your explicit consent, given at signup (GDPR Articles 6(1)(a) and 9(2)(a)). Keeping the service secure and counting usage in the simple way described above relies on our legitimate interest (Article 6(1)(f)); you can object to that at any time by writing to us. Nothing is sold, shared for advertising or used to train AI models.
Where it is stored and who processes it
- Google Firebase: the database and the app's server code run in Frankfurt, Germany. Sign-in runs on Google's servers in the United States. The website is served from Google's worldwide network. The fonts on these pages also load from Google, which sees your IP address when they do.
- Google Workspace (Gmail) sends Lovna's emails from hello@lovna.day and receives what you write to that address. Copies of the emails Lovna sends you stay in that mailbox until they are cleared out.
- Anthropic (United States) drafts the Sunday summary. Once a week it receives that week's numbers, never your name or email. Anthropic deletes them within 30 days (up to 2 years if its safety systems flag them) and does not train on them.
Transfers to the United States are covered by the EU-US Data Privacy Framework (Google) and by the European Commission's Standard Contractual Clauses (Anthropic). Write to us for a copy.
How long we keep it
Everything is deleted 30 days after your 90-day program ends, whether you finished, paused or stopped the emails, unless you tick "keep my data" in Settings; then it stays until you delete it. Deleting your account from Settings or from the link in any email deletes your account, check-ins, summaries and answers straight away. The usage records then stay only with a random number that no longer points to you. If the first group is full, your email stays on the waitlist until a place opens or you ask us to remove it. Google removes deleted sign-in records from its backups within 180 days.
Your rights
You can ask to see, copy or correct your data, delete it (or use the delete button yourself), restrict or object to its use, and withdraw your consent at any time; withdrawing means deleting your account. Write to hello@lovna.day and you get an answer within a month. You can also complain to the data protection authority in your country.
Cookies and storage on your device
Lovna uses no cookies and no analytics or advertising trackers. The homepage stores nothing on your device. When you sign in, the sign-in system keeps your session in your browser, and while an email sign-in link is pending your email address is kept there too. Both are needed for signing in.
Age
Lovna is for adults 18 and over. If we learn that a user is younger, we delete the account.
Changes
If this policy changes in a way that matters, you get an email before the change applies.
Nothing here is medical advice, diagnosis, treatment, or medication dosing guidance. Consult your doctor before starting, adjusting or stopping any medication.