Privacy Policy

1. Introduction and Scope

Lovables LTD ("we," "our," or "us"), a company registered in Israel, operates Better Partner at betterpartner.com (the "Service"). This Privacy Policy describes how we collect, use, share, and protect personal information in connection with the Service, and explains the rights available to you.

This Policy applies to:

• the Better Partner web application and any associated mobile applications
• our marketing website and onboarding flow
• email and other communications between you and us

It does not apply to third-party websites or services linked from our Service.

2. Information We Collect

2.1 Information you provide directly

2.2 Information collected automatically

2.3 Transaction-related information

Subscription status, billing period, price paid, refund history, and payment event records received from Dodo Payments, our Merchant of Record. We do not store full payment card numbers; payment details are held by Dodo Payments under their own privacy notice. The payment event records we receive from Dodo Payments include the billing name, email address, phone number and billing address you entered at checkout, together with the cardholder name, the card brand and type, the last four digits of the card number, and the country that issued the card.

2.4 Inferred data

Based on your usage patterns, we may infer information about your relationship preferences, engagement levels, and communication tendencies. These inferences are used only to personalize the Service.

3. Sensitive Relationship Data

The Service is designed around relationship health and communication. Some information you provide - including descriptions of relationship dynamics, intimacy topics, vibe ratings, and AI Helper inputs - may reveal or suggest information about your personal relationships, mental health, and (in some jurisdictions) may be treated as sensitive personal data.

We treat this information with heightened care:

• We do not use relationship content for advertising or sale to third parties.
• We do not expose relationship content to any user other than the account holder.
• When this content is transmitted to Anthropic for the AI Helper feature, we require Anthropic to process it under strict data-processing commitments (see Section 7).
• Where required by applicable law (including GDPR Article 9), we will seek your explicit consent before processing sensitive categories of personal data beyond what is necessary to deliver the Service.

4. How We Use Your Information

5. CCPA Categories of Personal Information

For California residents, we collect and have collected in the preceding 12 months the following categories of personal information:

We do not sell personal information. Our marketing pages at betterpartner.com load the Meta Pixel on every visit so we can measure which advertising brings people to Better Partner. This sends Meta your IP address, the Meta browser cookie identifier, and the address of the page you are on. Under the CPRA this may count as "sharing" for cross-context behavioral advertising. It happens only on our marketing pages; nothing you write inside the app - your Sparks, reflections, quiz answers, or AI Helper inputs - is ever sent to Meta or to any other advertising service. Section 8 explains what you can do about it.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share it with:

Service providers. Companies that help us operate the Service under data-processing agreements, including: database and authentication infrastructure (Supabase/Postgres), application hosting and delivery (Vercel), product analytics (PostHog), email delivery (Resend), and error monitoring (Sentry).

Sentry (Functional Software, Inc.). Application error monitoring, located in the United States. Sentry receives technical error context - such as browser/device data and error details - to help us detect and fix bugs. Session replay and personal-content capture are disabled; Sentry does not receive relationship content or other sensitive personal data.

Anthropic. See Section 7 for full disclosure of our AI Helper processing.

Merchant of Record - and an independent controller, not our service provider. Dodo Payments handles payment processing, tax, fraud prevention, billing and refunds. Unlike the service providers above, which process data only on our instructions, Dodo Payments is the seller of record and decides for itself how it uses the payment information you give it at checkout, under its own privacy notice and its own legal obligations. We receive payment records back from Dodo Payments (see Section 2.3), but we do not control what Dodo Payments does with the details you enter on its checkout page.

Product analytics (PostHog). We use PostHog to understand how the Service is used. PostHog data is not anonymous: from the moment you enter your email address on our marketing page or in the signup quiz, your analytics events are associated with you (by email address before you have an account, and by your account ID afterwards). We send PostHog metadata only - which pages and features were used and when. We do not send it Spark content, quiz free text, AI Helper inputs, partner details, or any other relationship content.

Advertising measurement (Meta). Our marketing pages load the Meta Pixel, which sends Meta your IP address, the Meta browser cookie identifier, and the page address on every visit, so that we can measure our advertising. Meta is not acting as our service provider for this. This applies only to the marketing pages at betterpartner.com; the Meta Pixel is not loaded anywhere inside the app at app.betterpartner.com, and no relationship content is sent to Meta. See Sections 5 and 8.

Legal and regulatory. We may disclose information where required by law, court order, or to protect the rights, safety, or property of the Company, our users, or the public.

Business transfers. In connection with a merger, acquisition, financing, or sale of assets, personal information may be transferred to the successor entity, subject to equivalent privacy protections. Sensitive relationship content will not be transferred without explicit user consent or re-consent.

We do not share, sell, or license your personal information or relationship content with universities, academic researchers, or other research institutions, whether anonymized or otherwise.

7. Third-Party AI Processing (AI Helper)

What is transmitted - When you submit a request to the AI Helper, the text you provide - which may include descriptions of your relationship dynamics, recent interactions, and communication patterns - is transmitted to Anthropic.

Provider - Anthropic.

Processing terms - Under Anthropic's commercial terms and Data Processing Addendum:

• Anthropic does not use content submitted through its commercial API to train its AI models.
• Anthropic may retain content for a limited period for trust, safety, and abuse-monitoring purposes, in accordance with its policies.
• Anthropic processes your content as a data processor under a Data Processing Addendum.

Saved content - Each time you use the AI Helper, we save your request (your selected obstacles and any free-text description you provide) and the response it generated, associated with your account and the day you made the request - whether or not you commit the result. If you commit the rewritten Spark, it also appears in your regular Spark history and archive, visible to you inside the app in the same way as other Sparks. This AI Helper session data is deleted when you delete your account (see Section 10, Data Retention).

We store your AI Helper inputs and the generated response in your account for as long as your account exists, regardless of whether you commit the result. Apart from the transmission to Anthropic described above, and the legal-request and business-transfer disclosures in Section 6, we do not share this content with anyone else, and we do not use it for advertising (see Section 3).

Opt-out - If you do not wish your relationship content to be processed by Anthropic, do not use the AI Helper feature. The rest of the Service is available without using the AI Helper.

8. Cookies and Tracking Technologies

PostHog and the Meta Pixel are the only non-essential trackers we run. We do not use Google Analytics, Google Tag Manager, Google Ads tags, the TikTok Pixel, Microsoft Clarity, or any session-replay tool.

What happens today. We do not currently show a cookie-preferences banner. On our marketing pages, PostHog and the Meta Pixel therefore load as soon as the page opens, rather than after a prompt. Inside the app it works differently: PostHog only starts recording your activity once you have given consent, either on our marketing page or at the email step of the signup quiz. Before that, the app sends only anonymous, page-level events with nothing in them that identifies you.

If you do not want the marketing-page trackers to run for you, your browser's tracking-protection settings, private browsing, or an ad blocker will stop them, and your Meta ad settings control how Meta uses advertising data about you. You can also write to privacy@betterpartner.com and we will treat it as a privacy request under Section 12.

Where required by applicable law, we will request your consent before setting non-essential cookies.

9. International Data Transfers

Your personal information may be processed in countries other than your own, including the United States and Israel. When we transfer data from the European Economic Area or United Kingdom to a country that has not been deemed adequate under applicable law, we apply appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

A list of the countries and safeguards applicable to our key service providers is available on request at privacy@betterpartner.com.

10. Data Retention

10.1 What deleting your account does

Deleting your account from Settings is immediate, not a scheduled request. In one step we cancel any live subscription with Dodo Payments, delete your profile, onboarding responses, Spark history, check-backs, vibe checks, streak and badge data, AI Helper sessions (including the free text you typed and the generated responses), feedback, scheduled and sent-email records, and your captured marketing-lead row, then delete your login itself. We also ask PostHog to erase the analytics profile held under your account ID and your email address.

Two things are deliberately kept, and it is worth being precise about them:

• Payment records. Your subscription and payment-event rows are unlinked from your account but not deleted, because we have to keep transaction records for tax and accounting. Those rows include the records we received from Dodo Payments at checkout, which include the billing name, email address, phone number and billing address you gave the payment processor, along with the cardholder name, the card brand and type, the last four digits of the card number, and the country that issued the card. They do not include your full card number.
• Consent and audit records. The record that you gave consent is kept as evidence that consent was given, with your email address, IP hash and browser string cleared. The audit log keeps entries showing that the deletion happened. Those entries retain the internal account identifier and a partly masked form of your email address (the first two characters plus the domain, for example ja***@example.com), so that we can answer questions about a past refund or deletion.

If you gave us an email address but never created an account, deleting that record is not something you can do in-product; write to privacy@betterpartner.com and we will remove it.

11. Data Security

We implement technical and organizational measures appropriate to the risk, including: encryption in transit (TLS) and at rest; Row-Level Security on all database tables; access controls and principle of least privilege; logging and monitoring of access to sensitive data; and regular security review.

No internet transmission is completely secure. We cannot guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and, where required, applicable regulators, in accordance with applicable law.

12. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal information. To exercise any right, contact privacy@betterpartner.com. We will respond within the timeframe required by applicable law (typically 30 days for GDPR; 45 days for CCPA).

12.1 EEA and United Kingdom (GDPR / UK GDPR)

You have the right to: access a copy of your personal data; correct inaccurate data; erasure (right to be forgotten); data portability; restrict processing in certain circumstances; object to processing based on legitimate interest or for direct marketing; withdraw consent at any time where processing is consent-based; and lodge a complaint with your local supervisory authority.

12.2 California (CCPA/CPRA)

California residents have the right to: know what personal information we collect, use, share, or sell; access a copy; delete personal information; correct inaccurate personal information; opt out of sale or sharing; limit use of sensitive personal information; non-discrimination; and appeal a denial of rights request.

We do not sell personal information. The one thing we do that may count as "sharing" is the Meta Pixel on our marketing pages, described in Sections 5 and 8. We do not operate a self-service "Do Not Sell or Share My Personal Information" link today; to opt out, email privacy@betterpartner.com and we will handle it on the timeline stated at the top of this section, or block the pixel yourself using the browser controls described in Section 8.

12.3 Other US states

We honor equivalent privacy rights for residents of Colorado, Connecticut, Virginia, Utah, Texas, and other states with comprehensive consumer privacy laws as those laws take effect.

13. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact privacy@betterpartner.com immediately and we will delete it promptly.

14. Third-Party Links

The Service may link to third-party websites (such as crisis-resource hotlines or therapist directories). We are not responsible for the privacy practices of third-party sites.

15. Changes to This Policy

We may update this Policy periodically. For material changes, we will update the effective date shown at the top of this page and provide notice through the Service or by email at least 14 days before the change takes effect. Your continued use of the Service after the effective date of an updated Policy constitutes acceptance.

16. Contact and Data Subject Requests