Privacy Policy

1. Introduction and Scope

Lovables LTD ("we," "our," or "us"), a company registered in Israel, operates Better Partner at betterpartner.com (the "Service"). This Privacy Policy describes how we collect, use, share, and protect personal information in connection with the Service, and explains the rights available to you.

This Policy applies to:

• the Better Partner web application and any associated mobile applications
• our marketing website and onboarding flow
• email and other communications between you and us

It does not apply to third-party websites or services linked from our Service.

2. Information We Collect

2.1 Information you provide directly

2.2 Information collected automatically

2.3 Transaction-related information

Subscription status, billing period, price variant, refund history, and payment event records received from Dodo Payments, our Merchant of Record. We do not store full payment card numbers; payment details are held by Dodo Payments under their own privacy notice.

2.4 Inferred data

Based on your usage patterns, we may infer information about your relationship preferences, engagement levels, and communication tendencies. These inferences are used only to personalize the Service.

3. Sensitive Relationship Data

The Service is designed around relationship health and communication. Some information you provide - including descriptions of relationship dynamics, intimacy topics, vibe ratings, and AI Helper inputs - may reveal or suggest information about your personal relationships, mental health, and (in some jurisdictions) may be treated as sensitive personal data.

We treat this information with heightened care:

• We do not use relationship content for advertising or sale to third parties.
• We do not expose relationship content to any user other than the account holder.
• When this content is transmitted to Anthropic for the AI Helper feature, we require Anthropic to process it under strict data-processing commitments (see Section 7).
• Where required by applicable law (including GDPR Article 9), we will seek your explicit consent before processing sensitive categories of personal data beyond what is necessary to deliver the Service.

4. How We Use Your Information

5. CCPA Categories of Personal Information

For California residents, we collect and have collected in the preceding 12 months the following categories of personal information:

We do not sell personal information and do not share it for cross-context behavioral advertising as defined under the CPRA.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share it with:

Service providers. Companies that help us operate the Service under data-processing agreements, including: hosting infrastructure (Supabase/Postgres), analytics (PostHog), email delivery (Resend), security monitoring, and customer support tooling.

Anthropic. See Section 7 for full disclosure of our AI Helper processing.

Merchant of Record. Dodo Payments, for payment processing, tax, fraud prevention, billing, and refunds.

Analytics. Aggregate and anonymized usage data may be shared with analytics services (PostHog, Google Analytics/GTM) for product improvement and marketing measurement. We do not share identified personal data for targeted advertising.

Legal and regulatory. We may disclose information where required by law, court order, or to protect the rights, safety, or property of the Company, our users, or the public.

Business transfers. In connection with a merger, acquisition, financing, or sale of assets, personal information may be transferred to the successor entity, subject to equivalent privacy protections. Sensitive relationship content will not be transferred without explicit user consent or re-consent.

We do not share, sell, or license your personal information or relationship content with universities, academic researchers, or other research institutions, whether anonymized or otherwise.

7. Third-Party AI Processing (AI Helper)

What is transmitted - When you submit a request to the AI Helper, the text you provide - which may include descriptions of your relationship dynamics, recent interactions, and communication patterns - is transmitted to Anthropic.

Provider - Anthropic.

Processing terms - Under Anthropic's commercial terms and Data Processing Addendum:

• Anthropic does not use content submitted through its commercial API to train its AI models.
• Anthropic may retain content for a limited period for trust, safety, and abuse-monitoring purposes, in accordance with its policies.
• Anthropic processes your content as a data processor under a Data Processing Addendum.

Saved content - The AI Helper dialogue or conversation itself is not retained. Only the final rewritten Spark is saved, and only if you commit to it. Once saved, it becomes part of your regular Spark history and is visible to you inside the app, in the same way as other Sparks (see Section 10, Data Retention).

We do not store your AI Helper inputs or the generated dialogue in your account; only the final rewritten Spark you choose to commit is saved. Uncommitted inputs and outputs are not retained by us after the request is processed.

Cached responses - To improve performance, the Service may separately store AI-generated responses in an anonymized cache keyed by a pattern hash (not raw text and not linked to your user account) for up to 30 days. This technical cache is distinct from your saved, user-visible Spark history.

Opt-out - If you do not wish your relationship content to be processed by Anthropic, do not use the AI Helper feature. The rest of the Service is available without using the AI Helper.

8. Cookies and Tracking Technologies

Where required by applicable law, we will request your consent before setting non-essential cookies.

9. International Data Transfers

Your personal information may be processed in countries other than your own, including the United States and Israel. When we transfer data from the European Economic Area or United Kingdom to a country that has not been deemed adequate under applicable law, we apply appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

A list of the countries and safeguards applicable to our key service providers is available on request at privacy@betterpartner.com.

10. Data Retention

11. Data Security

We implement technical and organizational measures appropriate to the risk, including: encryption in transit (TLS) and at rest; Row-Level Security on all database tables; access controls and principle of least privilege; logging and monitoring of access to sensitive data; and regular security review.

No internet transmission is completely secure. We cannot guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and, where required, applicable regulators, in accordance with applicable law.

12. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information. To exercise any right, contact privacy@betterpartner.com. We will respond within the timeframe required by applicable law (typically 30 days for GDPR; 45 days for CCPA).

12.1 EEA and United Kingdom (GDPR / UK GDPR)

You have the right to: access a copy of your personal data; correct inaccurate data; erasure (right to be forgotten); data portability; restrict processing in certain circumstances; object to processing based on legitimate interest or for direct marketing; withdraw consent at any time where processing is consent-based; and lodge a complaint with your local supervisory authority.

12.2 California (CCPA/CPRA)

California residents have the right to: know what personal information we collect, use, share, or sell; access a copy; delete personal information; correct inaccurate personal information; opt out of sale or sharing (we do not sell or share); limit use of sensitive personal information; non-discrimination; and appeal a denial of rights request.

12.3 Other US states

We honor equivalent privacy rights for residents of Colorado, Connecticut, Virginia, Utah, Texas, and other states with comprehensive consumer privacy laws as those laws take effect.

13. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact privacy@betterpartner.com immediately and we will delete it promptly.

14. Third-Party Links

The Service may link to third-party websites (such as crisis-resource hotlines or therapist directories). We are not responsible for the privacy practices of third-party sites.

15. Changes to This Policy

We may update this Policy periodically. For material changes, we will update the 'Last updated' date and provide notice through the Service or by email at least 14 days before the change takes effect. Your continued use of the Service after the effective date of an updated Policy constitutes acceptance.

16. Contact and Data Subject Requests