Privacy policy

1. Information we collect

• Account data. Name, email address, and authentication details from our auth provider (e.g. Supabase).
• Gift and message data. Recipient name, phone number and/or email, timezone and delivery preferences, message text, scheduling data, and optional media or links you attach.
• Payment data. Payments are processed by our payment processor (e.g. Stripe). We receive limited payment metadata (such as confirmation of a successful charge) but not your full card number.
• Support and contact. Information you send through forms or email.
• Technical data. IP address, device/browser type, and similar logs from hosting and analytics providers, used for security and to understand how the product is used.

2. How we use information

We use personal information to provide and improve the service (including scheduling and delivering messages), process payments, authenticate users, respond to support requests, secure our systems, comply with law, and understand aggregate usage. We do not sell your personal information.

3. How we share information

We share data with service providers who help us run Alwaysloved, such as cloud hosting, database and authentication, email and SMS delivery, payment processing, and analytics. They may process data only on our instructions and subject to appropriate safeguards. Carriers and email systems receive message content and recipient identifiers as needed to complete delivery. We may disclose information if required by law or to protect rights, safety, and security.

4. SMS, email, and mobile information

When you choose SMS or email delivery, message content and recipient contact details are transmitted through providers (for example, Twilio for SMS and standard email infrastructure). Recipients may incur carrier message or data charges. You are responsible for obtaining any consent or permissions required before we contact a recipient on your behalf.

We do not share, sell, or provide mobile phone numbers or any mobile-derived information to third parties or affiliates for marketing or promotional purposes. Mobile information collected through the SMS program is used solely to deliver messages you have opted in to and to administer the 365 Days of Love service.

5. Retention

We retain information for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data where applicable law allows; some records may be retained where we have a legitimate need (e.g. fraud prevention, legal holds).

6. Security

We use reasonable administrative, technical, and organizational measures to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. Contact us to make a request. We may need to verify your identity before responding. You may also have the right to lodge a complaint with a supervisory authority.

8. Children

Alwaysloved is not directed to children under 13, and we do not knowingly collect their personal information. If you believe we have, contact us and we will take appropriate steps to delete it.

9. International users

If you access the service from outside the United States, you understand that your information may be processed in the United States or other countries where we or our vendors operate, which may have different data protection rules than your country.

10. Changes

We may update this policy from time to time. We will post the revised version with a new “Last updated” date. For material changes, we will provide additional notice where required by law.

11. Contact

For privacy questions or requests, reach us through the contact section of our site.