Privacy Policy

Last updated: 04.10.2026

This Privacy Policy explains which personal data is processed when you use the LovePin mobile app (“LovePin”, the “app”), for what purposes and on what legal grounds this data is used, with whom it is shared, how long it is retained, and what rights you have regarding your data.

LovePin is designed so that two people (a couple) who have given each other's consent can share their location, battery status and short notes only with each other. We do not sell your data, we do not use it for advertising, and we do not track you across other apps or websites.

1. Data controller

Under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, to the extent applicable, the EU General Data Protection Regulation (“GDPR”), the data controller is Samet Doğru, the developer of the LovePin app.

You can write to privacy@lovepinapp.com for all privacy-related questions and requests.

2. Data we process

We process only the data that is necessary to provide the Service:

Account information: The unique user identifier that Apple provides us during Sign in with Apple, and your name if you choose to share it. To be able to remove the Apple connection when you delete your account, the authorization information provided by Apple is securely stored.
Profile information: Your display name, the character you choose, your optional profile photo and, if you entered it, your relationship start date (so it can be restored when you sign in again).
Location information: While location sharing is on, your last location (latitude, longitude, accuracy and update time) and the approximate place name for that location. If you have granted “Always” permission, your location may also be updated while the app is closed.
Location history (optional): Only if you give separate consent, the selected location points while you are moving.
Important places and events: The name, location and radius of places you add together; your arrival and departure times at these places; low battery alerts.
Device status: Battery percentage and charging status.
Notes and statuses: The short messages you send to your partner and preset statuses.
Notification information: The notification token belonging to your device and your notification preferences, so that notifications can be sent.
Support requests: The full name, email address, subject and message you send through the “Contact us” form; so that we can respond, the app version, language and device model are added to them.
Purchases and RevenueCat: Your product, subscription, renewal, trial, refund and Apple transaction information is processed by Apple, Supabase and RevenueCat for Plus access, subscription reporting and revenue analytics. RevenueCat receives a pseudonymous LovePin account ID that we can associate with your account. Your partner sees only your Plus status. We do not receive card or bank details.
Information on your device: Your onboarding answers and widget preferences are stored locally. Your language preference is stored locally; the selected language code is also sent to Firebase for usage analytics. Onboarding answers are cleared when you sign out or delete your account.
Usage analytics: Google Analytics for Firebase measures launches, sessions, onboarding steps, location and notification permission outcomes, sign-in and pairing, core feature use (hearts, statuses, capsules and added places, without their contents), and paywall, purchase and restore outcomes. App-instance and device identifiers, app and operating-system versions, language and approximate country or region derived from IP addresses may be processed. Records may be associated with a device or installation.

We do not send your name, email address, precise coordinates, partner identity, messages, photos or saved place names to Firebase Analytics. RevenueCat does not receive precise location or private content. We do not use these services for targeted advertising or advertising-related tracking across other companies’ apps or websites.

3. Purposes for which we use data and legal grounds

To create your account, manage your session and match you with your partner (formation and performance of the contract).
To share your location, battery status, notes and important place events only with the partner you are matched with, and to send notifications about them (performance of the contract; the permission you grant on your device for location).
To show your location history (your explicit consent; you can withdraw it at any time).
To verify your LovePin Plus membership (performance of the contract).
Understanding feature use and purchase flows, improving the app and measuring subscription performance (legitimate interest). Usage analytics does not affect location sharing or subscription transactions.
Responding to support requests and contacting you about them (legitimate interest).
To keep the Service secure, prevent misuse and fix errors (legitimate interest).
To fulfil our legal obligations and respond to lawful requests from competent authorities (legal obligation).

4. Sharing of data

Your partner: Your location, battery, profile, notes, important place events, and, if you have given consent, your location history are shared only with the partner you are matched with.
Supabase: Database, authentication and file storage service. Data is stored on servers located in the European Union (Germany, Frankfurt).
Apple: Sign in with Apple, notification delivery (APNs), App Store purchases, map and place name services.
Resend: The email delivery service that forwards support requests to us by email (United States).
Google / Firebase and RevenueCat: They process the usage or subscription data described above for reporting. Processing may occur outside Türkiye.
Competent authorities: Only where legally required and to the extent necessary.

We do not sell or rent your data to third parties, and we do not share it for advertising purposes.

5. Transfers abroad

Our service providers' servers may be located outside Türkiye (in the European Union and the United States of America). These transfers are carried out based on the safeguards provided for under Article 9 of the KVKK and the relevant provisions of the GDPR (standard contractual clauses and, where necessary, your explicit consent).

6. Retention periods

Live location and battery status: Overwritten with each update; only the most recent value is kept.
Location history: A maximum of 30 days; older points are automatically deleted by the server.
Arrival, departure and low battery events: 30 days.
Matching invite codes: Valid for 15 minutes and deleted shortly afterwards.
Notes, important places and matching information: For as long as the match continues; deleted when the match ends.
Support requests: Up to 2 years, after which they are deleted automatically. When you delete your account, your request records on the server are deleted too.
Account, profile and analytics records: Deleting your account removes the associated data from LovePin’s backend. Erasing Firebase and RevenueCat records is a separate provider process and is not assumed to be immediate. Firebase event data follows the analytics property’s retention settings; aggregated reports may remain longer. For access or erasure requests, contact privacy@lovepinapp.com. Legal retention obligations are considered separately.

7. Security

Data is transmitted over encrypted connections (TLS). Row-level access rules are enforced in the database, so that only you and the partner you are matched with can see your data. Your profile photo is kept in a private storage area that is not publicly accessible. No system is completely secure; however, we take reasonable technical and administrative measures to protect your data.

8. You're in control

You can stop sharing your location from the app at any time.
You can change your location and notification permissions from iPhone Settings.
You can turn off your location history and delete your stored history.
You can end your partner connection; in this case, sharing stops for both of you.
To object to usage analytics or request deletion of previously sent analytics records, write to privacy@lovepinapp.com.
Delete your account in Settings → Account → Delete account. Deleting an account does not cancel an App Store subscription; manage it through your Apple account.

9. Your rights

Under Article 11 of the KVKK and, to the extent applicable, the GDPR, you have the following rights:

To find out whether your personal data is being processed and to request information about it,
To learn the purpose of processing and whether the data is used in accordance with that purpose,
To know the third parties to whom the data is transferred,
To request the correction and deletion of incomplete or inaccurately processed data,
To request that correction and deletion be notified to the third parties to whom the data has been transferred,
To object to a result that is to your detriment arising from analysis by automated systems,
To request that your data be provided to you in a portable format, and to withdraw your consent in consent-based processing,
To claim compensation for damage suffered due to unlawful processing.

You can send your requests to privacy@lovepinapp.com; we will respond within 30 days at the latest. You also retain the right to lodge a complaint with the Turkish Personal Data Protection Board or with the data protection authority in your country of residence.

10. Age limit

LovePin is not designed for people under 16, and we do not knowingly collect personal data from anyone under 16. If you are between 16 and 18, you may use LovePin only with the consent of your parent or legal guardian. If we learn that data belonging to someone under 16 has been processed, we will delete it.

11. Changes to the policy

We may update this policy from time to time. We will announce significant changes within the app. The current version is always available in Settings, and the publication date is stated at the top of this page.

12. Contact

If you have any concerns about this policy or your personal data, you can reach us at privacy@lovepinapp.com.