Privacy Policy

Last updated: 20 July 2026

1. The short version

Your financial life is sensitive. We collect what the product needs to work, encrypt the most sensitive parts, process receipts and voice on your own phone, never sell your data, and delete it when you ask.

2. What we collect

Account data — email, name, and password hash (or your Google/Firebase identity).
Financial records you create — transactions, budgets, goals, cards (last 4 digits only, never full numbers), subscriptions, tasks, warranties, loans.
AI conversations — the messages you send Mira, and durable notes she is asked to remember (stored on your device).
Support messages — tickets you send us.

3. On-device processing

Receipt photos are read by OCR on your phone; only the extracted text is sent to our servers. Voice input is transcribed by your phone’s own speech recognition; audio never leaves the device. Mira’s tool activity (web searches, price checks) runs from your device.

4. Encryption

Sensitive fields — cardholder names, bank tokens, your AI API key — are encrypted at rest with a key unique to your couple. Traffic is encrypted in transit (TLS). Your partner sees the shared household data; nobody else’s couple can.

5. AI providers

When you talk to Mira, the text of the conversation (plus relevant financial context) is sent to an AI model provider — yours if you use your own key, ours on Premium. We send the minimum needed to answer, and we do not use your conversations to train models.

6. Analytics and ads

Our website uses Microsoft Clarity for aggregate usage analytics (session recordings, heatmaps, funnels). The Free plan of the mobile app shows ads via Google AdMob, which may process your advertising identifier subject to Google’s policies; we request non-personalized ads by default. Paid plans contain no ads.

7. Sharing

We never sell personal data. We share it only with the processors that make Luvo work — hosting, payments (Paddle), AI providers, push notifications — each bound to use it only for our instructions, and with authorities when the law requires.

8. Retention and deletion

Data is kept while your account is active. Delete your account (in-app, or by writing to us) and your household’s records are removed from production systems within 30 days, backups within 90.

9. Your rights

Depending on where you live (including GDPR and CCPA regions), you may have rights to access, correct, export, or erase your data, and to object to processing. Write to us and we will honor them.

10. Contact

Privacy questions and requests: hello@luvo.app.