Privacy Policy

Effective date: 18 October 2026.

LOOOVE is operated by Looove, Inc. (“LOOOVE”, “we”, “us”). This policy explains how we handle personal information when you visit looovehealth.com, use our Daylight web experience or HBTI questionnaire, sign in, request a report, or subscribe to updates.

Contact us about privacy at [email protected]. This policy covers these web services. A mobile app or a new feature involving additional data will need an appropriate notice before you use it.

1. Information we handle

Account and sign-in information. If you sign in by email, we process your email address, verification information, account identifier, and sign-in records. Where Google sign-in is available, Google provides an identity credential containing your Google account identifier and verified email address; it may also contain basic profile information, such as your name or picture. We use the information needed to authenticate you and connect you to your LOOOVE account. We do not receive your Google password, and Google sign-in does not give us access to your Gmail messages, contacts, calendar, or Google Drive files. Linking Google to an existing account may require an additional email verification.

Email updates and requests. When you join a mailing list, request a report, or contact us, we process your email address, the preferences you select, relevant dates, delivery information, and the content of your message. Signing in does not by itself subscribe you to marketing emails.

HBTI answers and reports. Your questionnaire progress may be saved in your browser. When you ask us to email your report, your email address, answers, and any text you entered are sent to our service to generate and deliver it. Report content is processed by our email provider and becomes part of the email you receive. Our signup database stores your email address, consent preferences, and delivery records, rather than your questionnaire answers or report text. This does not mean your report disappears from email systems after delivery. Avoid entering sensitive details that you do not want included in an email.

Daylight preferences and activity. The web experience uses information you enter, such as age, gender preference, wellness goals, outdoor-session records, and check-ins about how you feel or sleep. Some of this information can reveal health or wellbeing details. The current web experience stores these records in browser storage; signing in alone does not mean every record is backed up or available on another device. Location requests, account information, and analytics are handled separately as described below. If cloud synchronisation is introduced or offered for your account, we will explain the additional processing before enabling it.

Location and place searches. If you allow your browser to share your location, we use your coordinates to provide local conditions and nearby places. Coordinates or place-search text are sent to our service and relevant mapping, geocoding, weather, or air-quality providers to fulfil your request. Depending on availability and region, these may include Google and QWeather. You may decline location permission or revoke it in browser or device settings; location-dependent features may then be unavailable. Saving a location on your device does not mean that location is never transmitted when you request local information.

Technical and usage information. Hosting, security, and delivery providers process connection information such as IP address, browser information, request times, and errors. We also use limited analytics to understand page visits, performance, interactions, and whether sign-in or signup flows work. Analytics use a random browser-session identifier rather than your email address. Our configured analytics events exclude your email address, questionnaire answers, report type, personal free text, health values, and precise location. An identifier that does not contain your name is not a guarantee that all processing is anonymous.

2. Why we use information

We use information to provide the features you request; create and secure accounts; produce and deliver requested reports; remember your preferences; respond to support and privacy requests; prevent misuse; diagnose problems; and understand and improve the service. We send optional product or early-access updates according to the choices you make, and keep records needed to respect those choices.

Where data-protection law requires a legal basis, we rely on the basis appropriate to the activity: providing a service you request, your consent, our legitimate interests in securing and improving the service where those interests do not override your rights, or a legal obligation. Where the law requires explicit consent for health-related information or other sensitive data, we must obtain it before that processing. Agreement to the Terms of Service is not blanket consent to every use of personal information.

3. Cookies and browser storage

We use essential session cookies to keep you signed in and protect authentication. Browser storage also holds preferences, saved progress, local Daylight records, and analytics choices or identifiers. Signing out is not the same as erasing all locally saved information.

We use PostHog for limited analytics. Our analytics respect supported Do Not Track and Global Privacy Control signals and the site's analytics opt-out. On the homepage, you can open “How we use your email” and select “Turn off anonymous analytics”. The preference applies to that browser; clearing storage or using another browser may require you to set it again. Where required by law, optional analytics need your consent before they run.

Third-party features, including Google sign-in, fonts, and security checks, may establish their own connections and use cookies or similar technology. Loading these features can disclose standard connection information to their providers. Browser controls may restrict them, but doing so may affect the relevant feature.

4. Who receives information

We use service providers for website hosting, security, email delivery, authentication, analytics, maps, weather, and restricted-access administration. These include Cloudflare, Google, PostHog, and, where used for local conditions, QWeather. We share information needed for the relevant task. Contact and consent records may also be kept in access-restricted administrative tools. Provider privacy policies explain processing they perform for their own services.

We may disclose information when reasonably necessary to comply with law or a valid legal request, protect people's safety, investigate misuse, or establish or defend legal claims. If the business is reorganised or transferred, relevant information may be transferred with appropriate protections and notice where required.

We do not sell your personal information or share it for cross-context behavioural advertising. We do not use your HBTI answers or Daylight health-related entries for targeted advertising. People who help operate the service should access personal information only as needed for their work.

5. International processing

Our service providers may process information outside your country, including in the United States. Data-protection rules can differ between countries. Where applicable law requires safeguards for an international transfer, those safeguards must be in place, such as recognised contractual protections or another permitted transfer mechanism. Contact us for information about safeguards applicable to your information.

6. Retention and security

We retain information for the purposes described in this policy, taking account of the service you use, account status, delivery and support needs, consent records, security, and legal requirements. We aim to delete or de-identify information when it is no longer needed. Limited records may need to remain to honour an unsubscribe request, comply with law, resolve a dispute, or prevent misuse. Deletion from backups and provider systems may follow their retention cycles rather than happening immediately.

Verification codes and authentication challenges expire after a short period; account records are separate from those temporary credentials. Records saved only in your browser remain until removed by the app, by you, or by your browser. Clearing site data may permanently remove those local records. We cannot recall reports already delivered to your inbox.

We use reasonable technical and organisational measures to protect information. No website, device, transmission, or storage method can be guaranteed completely secure. Protect access to your email, Google account, and device, particularly when using a shared device.

7. Your choices and rights

You can stop optional marketing emails by following any unsubscribe instructions provided or emailing [email protected]. You may still receive messages needed for a service you request, such as a sign-in code or requested report.

You can ask us to access, correct, or delete personal information we hold, close your account, or withdraw consent where processing relies on consent. Depending on your location and the applicable law, you may also have rights to obtain a portable copy, object to or restrict processing, appeal a decision about a request, or complain to a data-protection authority. These rights are subject to applicable limits and exceptions. Withdrawing consent does not affect processing that was lawful before withdrawal.

Send requests to [email protected], preferably from the address associated with your account or report. We may need to verify your identity before acting. Do not send passwords, sign-in codes, or unnecessary sensitive information. We will respond within the time required by applicable law.

For browser-only records, use any available clear-progress control or your browser's site-data settings. Deleting an account does not remotely erase every copy on your devices or emails already delivered. Removing LOOOVE from your Google account's connections stops that connection; it does not automatically delete your LOOOVE account. Contact us if you also want your LOOOVE information deleted.

8. Age and future features

Our web wellness experiences are intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can review it and take appropriate action.

Google sign-in does not authorise access to wearable data, Apple Health, Health Connect, microphone recordings, or other health platforms. Features requiring additional permissions will have their own permission requests and relevant privacy information. Announcing or describing a future feature does not mean it is currently collecting that data.

9. Changes and contact

We may update this policy as the service or legal requirements change. We will update the effective date and provide additional notice or seek consent where required for a material change. Changes do not retrospectively authorise a new use that requires your consent.

Privacy contact: [email protected].