Privacy Policy

Last updated: September 9, 2026

This Privacy Policy explains how Backslash d.o.o. ("Backslash," "we," "us"), a company registered in Zagreb, Croatia, collects, uses, and protects information when you use LoveLog (the "App"). Backslash d.o.o. is the data controller under the GDPR. By using the App, you agree to the collection and use of information as described here.

Information we collect

We collect only what the App needs to work:

• Account information — your email address and display name. Sign-in is by magic link or by Google or Apple sign-in; we do not store a password.
• Relationship data — your together-since date, your chosen theme, and public profile settings if you turn that on.
• Your content — the memories, photos, daily-question answers, calendar events, and letters you create. Photos may carry the date, and the image dimensions, read from the photo itself; if you turn on the optional location setting, a photo you add can also be labelled with a rough place name.
• Push notification token — a device token used only to deliver the reminders and partner notifications you have enabled.
• Purchase information — your LoveLog Premium subscription status (for example active, trialing, or expired). Apple processes the payment; we and our subscription provider, RevenueCat, only ever receive entitlement status, never your card details.
• Usage analytics — anonymised, aggregated product analytics (which screens are opened, when the App is launched) through PostHog's EU instance, used to understand what to improve. No memory, photo, answer, or letter content is ever sent to analytics.
• Diagnostic data — if a crash-reporting tool is enabled in a future release, it is configured to capture crash and error reports only, with personal information and session capture turned off.

What we don't do

• We don't read your memories, answers, or letters.
• We don't build advertising profiles or show ads.
• We don't sell your data to anyone.
• We don't use your content to train AI models.
• We don't track you across other apps or websites.

Letters

Letters you seal are encrypted before they are stored and stay closed until the reveal date you choose. The key is issued to your signed-in devices by our backend and held only in memory while the App is running, never written to disk. This protects letter contents at rest and keeps a sealed letter unreadable before its date; it is not a zero-knowledge system, so treat it as strong protection rather than a guarantee that no one but you could ever technically access the ciphertext.

How your data is stored

Your data is stored on Cloudflare infrastructure in the European Union: a D1 database for account and relationship data and your written content, and R2 object storage for photos. Data is encrypted in transit and at rest. Access is scoped to your relationship, so no other user can see your content.

Who we share data with

We share data only with the service providers that help us run the App, each acting on our behalf:

• Cloudflare — database, file storage, and backend hosting (EU region).
• Apple / RevenueCat — subscription purchases and status. Apple processes your payment through the App Store; RevenueCat receives an anonymous app-user identifier to sync your subscription. Neither we nor RevenueCat see your card details.
• Resend — transactional email only: your magic-link sign-in, invite links to your partner, and, if you request it, a keepsake export sent to your own email address.
• PostHog (EU instance) — anonymised product analytics as described above.
• Google / Apple — if you choose Google or Apple sign-in, to authenticate you. We receive your email address and a stable identifier, nothing else from your account.

We do not otherwise share your personal data, and we do not sell it.

Your partner

LoveLog is a shared space for two people. Memories, photos, answers, calendar events, and revealed letters that either of you adds are visible to the other person in the relationship. A pairing invite is sent to an email address you enter, and only becomes a link between two accounts once the other person accepts it.

Data retention and deletion

We keep your data for as long as your account is active. You can delete your account at any time from the Account screen in the App. Deletion is immediate and irreversible, and removes your account, your login, and your personal data from our systems within 30 days. Content that belongs to the shared relationship is removed when both accounts are deleted. Apple may retain billing records as required by law, which is outside our control.

Your rights

If you are in the European Economic Area, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit your content and profile directly in the App, export a backup from Settings, and delete your account from the Account screen, or contact us at the email below. You also have the right to lodge a complaint with your local data protection authority, in Croatia the Agencija za zaštitu osobnih podataka (AZOP).

Children's privacy

The App is not directed at children under 16, and we do not knowingly collect personal data from them.

Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Last updated" date above, and for significant changes we'll notify you by email.

Contact us

Questions about this policy or your data? Email hrvoje.grdic1@gmail.com. We reply within 30 days.