Privacy Policy
Last Updated: January 15, 2026
LuckLoom ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").
Please read this Privacy Policy carefully. By using LuckLoom, you consent to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address, display name (optional)
- Profile Information: Avatar image (optional)
- Content: Notes, images, and other content you create and share with your partner
- Partner Connection: Your unique lucky code and connection status
1.2 Information Collected Automatically
- Device Information: Device type, operating system, unique device identifiers
- Usage Data: App features used, time spent in app, interaction patterns
- Log Data: Error logs, crash reports, diagnostic information
1.3 Information from Third Parties
- Authentication Providers: If you sign in with Apple or Google, we receive basic profile information from these services
- Payment Processors: Subscription status from Apple App Store or Google Play Store (we do not receive your payment details)
2. How We Use Your Information
We use your information to:
- Provide and maintain the App's core functionality
- Enable partner connections and shared features
- Process and manage subscriptions
- Send service-related notifications
- Improve and optimize the App
- Detect and prevent fraud or abuse
- Comply with legal obligations
3. Information Sharing
3.1 With Your Connected Partner
When you connect with a partner in LuckLoom, the following is shared:
- Your email address and display name
- Notes you write for your partner
- Daily draw results
- Connection status and history
3.2 With Service Providers
We may share information with third-party service providers who assist us in operating the App:
- Supabase: Database and authentication services
- Apple/Google: Authentication and subscription processing
- Cloud Storage: Image storage for uploaded content
3.3 Legal Requirements
We may disclose your information if required by law or in response to valid legal requests.
We DO NOT:
- Sell your personal information to third parties
- Share your notes or private content with anyone other than your connected partner
- Use your data for advertising purposes
4. Data Storage and Security
Your data is stored on secure servers provided by Supabase (located in the United States). We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Row-level security policies for database access
- Regular security audits
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
5. Data Retention
| Data Type |
Retention Period |
| Account Information |
Until account deletion + 7-day cooling period |
| Notes and Content |
Until account deletion or partner disconnection (archived) |
| Usage Analytics |
90 days |
| Error Logs |
30 days |
6. Your Rights and Choices
You have the right to:
- Access: View and export your notes through the App
- Correction: Update your profile information at any time
- Deletion: Request account deletion through App settings
- Disconnection: Disconnect from your partner at any time
- Opt-out: Disable notifications through your device settings
7. Account Deletion
When you request account deletion:
- A 7-day cooling period begins to allow cancellation
- After 7 days, all your data is permanently deleted
- Your partner will be notified and unbound
- Shared notes history remains accessible to your former partner (archived)
8. Children's Privacy
LuckLoom is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. By using the App, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy in the App
- Updating the "Last Updated" date
- Sending a notification for significant changes
11. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if your personal information is sold or disclosed
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your privacy rights
12. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have additional rights including:
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with a supervisory authority
Our legal basis for processing your data includes: contract performance, legitimate interests, and your consent.