Privacy Policy

• Service delivery — to generate your personalised song, store it, and deliver it to you and your recipient.
• Account management — to authenticate you, manage your purchase history, and maintain your entitlements.
• Push notifications — to notify you when your song is ready. You can opt out in iOS Settings at any time.
• Service improvement — aggregated, anonymised usage data helps us understand how to make LoveTune better. We do not sell personal data.
• Legal compliance and fraud prevention — to meet our legal obligations, detect abuse, and protect our users.

LoveTune uses automated systems, including large language models and music-generation models, to produce your lyrics and audio. Under Article 22 of the UK/EU GDPR you have the right to information about automated processing that significantly affects you.

• What is automated — lyric drafting, audio composition, quality scoring (profanity filter, sentiment check), and content-moderation decisions that block explicit or abusive inputs.
• Human oversight — our support team may listen to, review, and read the lyrics of songs you generate (including preview and full audio) for moderation, trust-and-safety, abuse investigation, and customer-support purposes. Reviewer access is restricted to authorised staff and logged in an internal audit trail. We handle any appeal you raise by email. We do not use automated decision-making for anything that produces legal or similarly significant effects on you.
• Your rights — you may request a regeneration, contest an outcome, or ask a human to review a moderation decision by emailing support@lovetune.app.
• AI limitations — generative AI can produce unexpected, inaccurate, or stylised output even when inputs are correct. You are responsible for the accuracy of the information you submit — see our Terms of Service for details.

We use the following third-party processors to deliver the service. Each is bound by a data processing agreement and subject to appropriate safeguards.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

The LoveTune iOS app does not use browser cookies. On our website we use a minimal set of cookies and local-storage keys:

• Strictly necessary — session cookies that keep you signed in and protect against CSRF attacks. These are required for the site to function and do not require consent.
• Analytics — PostHog sets a first-party cookie and a locally stored identifier to deduplicate visits. The identifier is pseudonymous and is not linked to your email or name. We process analytics on the basis of legitimate interests.
• Error monitoring — Sentry stores a short-lived session identifier to group crash reports. No personal data is transmitted in these reports.

We do not use advertising cookies, cross-site trackers, or third-party marketing pixels. You can clear cookies at any time in your browser settings; doing so may sign you out of your account.

• Active accounts — data is retained for as long as your account is active.
• Deleted accounts — we soft-delete your account on request. Personal data is permanently purged within 30 days. Song audio files are deleted from storage at the same time.
• Order records — purchase records are retained for 7 years to comply with UK financial and tax regulations. These records contain only transaction identifiers and amounts, not payment card details.
• Analytics data — anonymised analytics are retained indefinitely as they cannot be linked back to an individual.

Under UK and EU GDPR you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your account and personal data (“right to be forgotten”).
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to restrict processing while a dispute is resolved.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at support@lovetune.app. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

All data is encrypted in transit using TLS 1.2 or higher. Data stored in Supabase is encrypted at rest. Audio files are served via time-limited signed URLs — direct public access to storage is disabled. We follow industry-standard security practices and conduct regular reviews of our access controls.

LoveTune is operated from the United Kingdom. Some of our third-party providers process data in the United States. Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place — including Standard Contractual Clauses or the UK International Data Transfer Agreement — in line with ICO guidance.

LoveTune is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at support@lovetune.app.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you via the app or email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please get in touch:

You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk or with your local EU data-protection authority.