Legal

Privacy policy

Written to be read. Where we’re legally required to be precise, we are — but never at the expense of clarity.

01

1. At a glance

LoveSync is a home for love — a platform for learning, counselling, community, live sessions, resources, sweet-words, gifts, events, services, and everything else that surrounds the practice of loving well. This page explains what we collect and why.

We apply GDPR-level standards regardless of where you live. Where local law adds rights, those apply on top.

02

2. What we collect

Account data: name, email, phone, and where relevant identity documents for KYC. Sensitive fields (password hashes, MFA secrets, KYC document hashes) are stored encrypted and isolated.

Practice data: your rituals, prompts, shared-space content, and notes. Shared-space content is visible only to the members of that space.

Counselling data: session bookings, notes, and outcomes. Session notes have their own privacy rules — see § 6.

Payment data: invoices and ledger records. We do not store full card numbers; payment providers do.

Support and audit: security-relevant actions (logins, payouts, admin actions) are recorded in an append-only audit log.

03

3. Why we use it

To provide the platform you asked for — running your account, delivering counselling, processing payments.

To keep the platform safe — safeguarding, fraud prevention, and abuse response.

To meet legal duties — licensing, tax, KYC/AML, data-protection obligations.

To improve the product — using minimal, aggregated data. We do not sell your data.

04

4. Where your data lives

We support region-preferred storage. If your region has a residency policy, it applies; otherwise our global fallback does. You’ll be able to check where your data is stored from your account.

Some data (e.g. counselling records) is subject to jurisdiction-specific rules. Where local law requires in-country storage, we honour that first.

05

5. How long we keep it

Account data: while your account is active, plus a limited period for legal and safety obligations after closure.

Financial data: retained per tax and audit law of the relevant jurisdiction — typically 5–7 years.

Counselling data: retained per the counsellor’s regulatory obligations and applicable jurisdiction rules.

06

6. Counselling privacy

Session notes have specific rules: the counsellor sees their own notes; the client sees only what the counsellor explicitly shares; LoveSync platform staff cannot browse them.

Safeguarding may compel disclosure — e.g. if there’s a credible imminent risk of harm. Counsellors are trained to explain the limits of confidentiality up-front.

07

7. Your rights

Access — request a copy of your data.

Correction — ask us to fix inaccuracies.

Erasure — request deletion, subject to legal or safeguarding obligations.

Portability — receive your data in a machine-readable format.

Objection — object to certain processing.

To exercise any right, email [email protected]. We’ll respond within one month.

08

8. Contact

Data Protection Officer: [email protected]

General: [email protected]