Privacy Policy
Last updated: 10 September 2026
Loved1s Online Inc., a Delaware corporation doing business as Loved1s.Online,
c/o Firstbase Agent LLC, 1007 N Orange St, 4th Floor, Ste 1382, Wilmington, DE 19801, USA,
represented by Marie Melecia Grobe (CEO).
Privacy: legal@loved1s.online
The short version
- We're a US company; most processing happens in the US. Your files are stored encrypted in Germany; the servers that read them are in Virginia.
- We never sell your data and never advertise to you.
- Your uploads are not used to train any AI model — ours or our vendors'. That's contractual.
- Face recognition is off until you turn it on, per profile, and only searches your own profiles.
- Voice cloning only happens when you start it, and only when you confirm you have the right.
- We keep your content as long as you want it kept. Nothing expires, nothing gets cleaned up, nothing disappears because you didn't log in.
- You can export everything and delete everything. Deletion includes the voice model and face data.
What we collect
Account and billing. Email, name, hashed password, plan, language. Paid plans: billing name, address, country, card brand, last four digits. Card numbers go to Stripe, never to us.
Profile content. Photos, videos, audio, stories, timeline entries, documents, and whatever contributors add.
Face templates (Amazon Rekognition). Turn it on for a profile and we send that profile's images to Rekognition, which builds a numeric description of facial geometry so you can find every photo someone appears in without tagging by hand.
That's biometric data. It has its own switch for that reason. The collection is per-profile and never compared against other profiles, other customers, or any public database. Age, gender, emotion and ethnicity inference are disabled. Switch it off and every template is deleted immediately; your photos stay.
Voice models (ElevenLabs). Built from recordings you choose, used only on that profile. Before we build one you confirm on the record that you have the right — see Section 4 of the Terms. Every clip is watermarked and labelled synthetic.
Embeddings and conversation (Google Gemini, OpenAI). We turn stories, transcripts and documents into embeddings — numbers capturing meaning — so a profile can answer questions. Neither vendor trains on your content or reviews it for product improvement, and our OpenAI account runs under zero data retention. Embeddings can be partly inverted back to text, so we protect them like the source. Transcripts are kept so profiles stay coherent; you can delete them.
Analytics. PostHog and Google Analytics: pages viewed, clicks, device type, coarse location from IP, a random identifier. Off unless you accept analytics in the cookie banner. No session recording on profile pages, vault pages, or any page showing media.
Vault. Encrypted at rest with keys we control. It is not end-to-end encrypted — we could technically decrypt it, and a lawful order could compel us to. Don't store anything you couldn't tolerate that.
Logs and support. IP, timestamp, URL, user agent, response code, kept 30 days. Support emails kept 24 months.
Cookies
Necessary: account_session, csrf_token, loved1s-cookie-consent, l1s_ui_language, l1s_visitor, Stripe's__stripe_mid / __stripe_sid at checkout.
Analytics: ph_phc_nHsDWGaRuCgEbEPfpdn6hKEnUYQPlBH5uauaGrWEjrc_posthog (12 months), _ga / _ga_VKLN9EVBSZ (24 months).
We honour Global Privacy Control signals.
Who touches your data
| Vendor | What they do | Where |
|---|---|---|
| Hetzner (Nuremberg) | Your files and backups | Germany |
| Hetzner (Ashburn VA) | App servers, database | US |
| Amazon Web Services | Rekognition face matching | US |
| ElevenLabs | Voice models and speech | US |
| OpenAI | Embeddings, generation, zero retention | US |
| Gemini; Analytics; Fonts | US | |
| PostHog | Analytics | US |
| Stripe | Payments, invoicing, tax | US |
| [[Email provider / error tracking / support desk — add yours]] | [[…]] | [[…]] |
AES-256 at rest, TLS 1.2+ in transit. No advertising networks, no data brokers, no vendor permitted to train on your content. We disclose to authorities where legally required, and we report suspected crimes and abuse to them ourselves, every time, whether or not anyone asks us to (Section 5 of the Terms). We tell you unless the law or an investigation forbids it. If the company is acquired or wound up, data may pass to a successor bound by this policy; if there's no successor you get notice and an export window first.
Data about other people
Living people. Your uploads usually include people who never asked to be here. You're responsible for having a basis to share their material. Don't run face recognition on someone who told you not to. Any living person can write to legal@loved1s.online and ask us to remove their images, face data or voice, and we will.
People who have died. We treat their material with the same care and give close family a route to object even if they aren't our customer — /legal/report. Closer relatives win.
Contributors. People you invite become users in their own right, with rights over what they added.
How long we keep things
Your content is yours to keep or delete — we never delete it on a timer. The rows below that do have a limit are the ones we can't leave to you: logs, analytics, and records we're legally required to hold or to destroy.
| Data | Retention |
|---|---|
| Account and profile content | As long as you want it. No expiry, no automatic clean-up, no deletion for inactivity. It stays until you delete it. |
| After you delete something | 30-day recovery window, then permanent |
| Backups | Overwritten within 35 days |
| Face templates | Deleted the moment you switch face recognition off |
| Voice models | Until you delete the voice, profile or account |
| Transcripts | Until you delete them, or the profile |
| Invoices | 7 years |
| Logs | 30 days · Analytics: 12 months |
| Consent records | 3 years after the consent ends |
| Abuse and enforcement records (removed content, identifiers, reports) | As long as needed to enforce the Terms, protect others and meet legal duties, see Section 5 of the Terms |
Your rights
Access, correction, deletion, export. Self-service at Account → Privacy → Export / Delete; otherwise legal@loved1s.online. We reply within 30 days.
California. You have CCPA rights to know, delete, correct, and opt out of sale or sharing. We don't sell or share personal information as defined, and we won't discriminate against you for asking.
Illinois, Texas, Washington. We collect biometric identifiers — face templates and voiceprints — only with your written consent, never sell or lease them, and destroy them when consent is withdrawn or the purpose ends, and no later than 3 years after your last interaction with us.
Children, and changes
For people 18 and over. Photos of children are a normal part of family memory; creating an account isn't something a child does. Tell us if one has and we'll close it.
We post updates here with a new date. If a change materially affects biometric processing we email you first and ask again rather than assume.
European Union, EEA, UK and Switzerland
Loved1s Online Inc. has no establishment in the EU. GDPR applies to us through Art. 3(2).
Art. 27 representative: [[NAME]], [[ADDRESS IN AN EU MEMBER STATE]], [[EMAIL]] — contact them in
your own language.
Data Protection Officer: [[NAME]], legal@loved1s.online
Legal bases. Account and service: Art. 6(1)(b). Invoices: Art. 6(1)(c). Face templates and voice models: explicit consent, Art. 9(2)(a), withdrawable any time. Analytics and non-essential cookies: consent, Art. 6(1)(a) and § 25(1) TDDDG. Security and abuse prevention: Art. 6(1)(f).
Transfers. Almost everything happens in the US, which is an international transfer, and US authorities have powers over US companies with no exact European equivalent. We rely on the EU–US Data Privacy Framework where the recipient is certified (AWS, Google, Stripe, OpenAI) and on Standard Contractual Clauses plus a transfer impact assessment otherwise (ElevenLabs, PostHog, Hetzner US). Copies on request.
Your additional rights. Restriction, portability, objection, and withdrawal of consent at any time — withdrawal doesn't undo what happened before. You can complain to your national supervisory authority; UK users, to the ICO.
Deceased persons. GDPR doesn't itself protect the deceased, but other law does. German law protects personality rights after death, including a portrait for ten years under § 22 KUG with close relatives' consent. Keep memorials private or invite-only unless the family agreed to a public page.
Automated decisions. We make none with legal or similarly significant effects about you.
Consumer protections. EU, EEA, UK and Swiss consumers keep every mandatory protection of their home country, including the right to sue locally. The arbitration clause in Section 12 of the Terms does not apply to them.