What we keep, and what we'd never do with it.
The short version
What we store
Your email address, your first name, the letters, videos, photos and files you add, the recipients and trusted contacts you name, your check-in settings, and the usual technical records (sign-in times, device type) needed to keep the account secure.
[Legal body for this section. Keep the plain-language box above as the first thing people read in every section; the legal text follows it.]
Why we store it
[Purposes and legal bases. Delivery on your instructions, security, billing via the payment partner, legal obligations.]
Who can see it
[Processors list, transfers, safeguards.]
Discretion
By design, our name doesn't appear on your bank statement, in your check-in emails, or in the browser tab unless you choose otherwise. That's a product choice, not a loophole: the data we hold is the same, and you can see all of it from Settings.
Trusted contacts and recipients
When you name someone, we store the name and contact details you give us and tell them the minimum: that you named them, and (for trusted contacts) one question if we lose touch with you. They can ask us to stop at any time.
[Their rights, how we handle their requests.]
How long we keep things
For as long as your account is open. Delivered items stay available to recipients for 12 months (or 15 if they ask for more time), then are deleted. If you close your box, we delete everything within 30 days, except what the law requires us to keep.
Your rights
[Access, portability (Export my box), correction, deletion, objection, complaints to the supervisory authority.]
Contact
Write to privacy@lovingli.com. [Controller legal name and address. DPO if appointed.]