Legal notice and privacy
Practices, rights and limits — GDPR / nLPD
Data controller
Adrien Gisclon is the sole founder of LoveQR Simply You, with no employees, and performs every function. Address: Chemin des Valentines 11, 1880 Bex, Switzerland. Privacy, rights and reports: info@loveqr.net. This contact is not an independent data protection officer. No EU representative is currently appointed; the need under GDPR Article 27 requires legal assessment.
Our policy: only what is needed
No ads, advertising tracking or data resale. We favour on-device storage, collection limited to the requested feature and retention limited to its need. This is not certification of above-baseline compliance. Public information is available without an account. Do not add unnecessary sensitive information: profiles may include orientation or intimate information you choose to provide. Public and Intime spaces remain separate.
Purposes and grounds
Accounts, login, social sync, messages and Pro management: performance of the requested service (GDPR 6(1)(b)). Optional profile publication and sensitive data: explicit choice and explicit consent when required (6(1)(a), 9(2)(a)); browser permission is not permission to publish. Payments/accounts: contract and legal duties (6(1)(b)/(c)). Security, abuse prevention and reports: proportionate legitimate interest in protecting the service (6(1)(f)). Optional LoveQR audience measurement: revocable consent. Swiss LPD/nLPD requires transparency, proportionality and security; consent is not the sole ground for every operation.
Data and recipients
Depending on use: email, first name, chosen profile fields, contacts/shared profile copies, messages/media, games, posts/comments, reactions, notifications, blocks, avatar, claimed places, events, search/publication location and check-ins. Recipients include people receiving your profile and the public for published content. Networks necessarily receive your IP; derivatives may support security. Hashed data is not necessarily anonymous. Optional LoveQR measurement uses deduplicated visit/action signals without message text, GPS or raw IP in those observations.
Location and presence
No continuous GPS tracking of movements or background application tracking. Location is acquired for the AR session; acquisition pauses when the page is hidden and stops when closed. One-off location requests also serve searches, widgets and proximity checks you open. Revoke browser permission at any time. Blurred publication shifts the point by 1 to 2 km, not guaranteed anonymisation. Check-in is voluntary; checked-out presence is visible for up to 48 h after the recorded checkout, not detected physical departure. Visibility is not technical deletion.
On-device encryption and security
Messaging is encrypted but NOT end-to-end. Local profiles and the local text archive use AES-256; network communication uses HTTPS/TLS. Social sync processes content on the server. Some local caches, preferences, copies and audio blobs are not encrypted by this layer. Protect local keys and your device: encryption does not secure a compromised unlocked device. Access controls, login verification, blocking and abuse limits add protection, not absolute security.
Providers and transfers
Lovable Cloud supplies application infrastructure; application data is hosted in Germany, in the EU, not Switzerland. Cloudflare handles delivery/security. Stripe handles payments; Google and Lovable handle login if chosen. Requested features may involve OpenStreetMap/Overpass, Geoapify, public GeoFun content, Holo articles, media/AI services and Gelato printing, receiving necessary data. External links send data to the opened site. Database region does not establish every provider/log/backup location. Countries, processing agreements and effective transfer safeguards still require documentation: applicable adequacy or appropriate contractual safeguards, including standard clauses, after verification. Contractual verification is not complete.
Other feature-dependent services: Nominatim (OpenStreetMap), Photon (Komoot), Open-Meteo weather, Wikipedia/Wikidata and GDELT public content. Admin production tools may call Pexels and ElevenLabs, not trackers on every page. Email suppression references Mailgun; actual delivery provider and retention still need confirmation.
Retention and deletion
Accounts/content: while used until deletion, subject to legal obligations or documented security/dispute needs. Messages: local archiving and cloud cleanup after both confirmations, retaining a buffer of 5 messages; not a backup purge guarantee. LoveQR traffic observations: 30 days. Presence display: up to 48 h after checkout, not universal retention. Provisional GPS: session only; legacy persistent GPS cache removed when AR opens. Local audio: until deletion/eviction, max 200 entries; account deletion also requests audio database and pending share deletion. Public cache validity varies by source, up to 60 days, without guaranteed physical purge. Local preferences until cleared; measurement choice 180 days. Provider logs, backups, accounting records and historic measurement deadlines remain unverified. Clearing browser site data does not delete the server account.
Cookies and storage
localStorage holds sessions, AES profiles/archives, local keys, preferences/caches; sessionStorage holds navigation/auth context and, only after agreement, LoveQR measurement ID. IndexedDB loveqr_audio_cache holds audio not encrypted by this layer, max 200 entries. CacheStorage loveqr-share-inbox holds requested incoming shares. Non-cookie storage is not automatically exempt from tracking law. Observed hosting cookies: __cf_bm (security, 30 minutes), __dpl (7 days, purpose to confirm), session-id (hosting measurement, 30 minutes). External payment/login cookies depend on the flow. Your choice controls LoveQR-written measurement, not hosting-injected scripts whose control remains unresolved. Refusing does not prevent use; storage necessary for requested features stays active.
Rights and complaints
Email info@loveqr.net for access, rectification, erasure, restriction, portability where applicable, objection and consent withdrawal. Withdrawal does not invalidate prior lawful processing; delete posts, check out, revoke permissions or change measurement choice. Proportionate identity evidence may be requested, not routine identity-document copies. Normally a response within one month, with a reasoned extension where permitted. Switzerland: Federal Data Protection and Information Commissioner (PFPDT/FDPIC), https://www.edoeb.admin.ch/fr. EU: competent supervisory authority, including where you usually reside.
Automation, age and responsibility
No personalised advertising or advertising profiling. Geographic ranking, content rules and abuse controls are automated; no decision system with GDPR Article 22 effects is claimed, subject to review. Accounts are for ages 18+; parental permission does not open this service to minors. Report a minor account for review and appropriate restriction/erasure. Age control is not certified identity verification. Illegal, discriminatory and non-consensual sexual content is forbidden. Users are responsible for posts without excluding publisher liability or mandatory rights. Swiss law subject to applicable mandatory protections.
Accessibility, ownership and review
Legal information is accessible without an account on computers/phones, with or without JavaScript. Contact us for accessibility difficulties; no WCAG certification is claimed. Datasure prior-art certificate n° 9810, 9 September 2024, Adrien Gisclon is not a patent or registered trademark. Updated 28 October 2026. This notice describes practices and identified limits, not GDPR/nLPD certification; legal and contractual review is still required.
Legal notice and privacy
The French version prevails in case of divergence, subject to mandatory rights.