Luvlog Privacy Policy Effective date: August 21, 2026 Last updated: August 21, 2026 This Privacy Policy explains how Beivors Bilişim Yazılım Teknolojileri San. Tic. Ltd. Şti. ("Beivors," "we," "us," or "our") processes information when you use the Luvlog mobile application ("Luvlog" or the "App"). 1. Summary Luvlog is a family organization and wellbeing application. You may sign in using a phone-number verification code, create a family profile, record manual status updates, create plans and reminders, review history, and use subscription features. In the backend-free version covered by this Policy: - phone-number verification is provided by Firebase Authentication; - family profile information and manually entered family activity remain on your device; - Luvlog does not operate a separate custom backend that receives or stores your phone number or local family content; and - selected service providers process limited identifiers, diagnostics, analytics, attribution, paywall, and purchase information as described below. Luvlog does not request precise location access and does not access your payment-card details. 2. Information We Process A. Phone number and authentication information When you sign in with a phone number, the number is sent directly to Firebase Authentication, a Google service, so that it can send and verify the one-time SMS code, prevent abuse, and maintain your authenticated account. Firebase may also process IP address, user-agent, device, and security information for these purposes. We do not use your phone number for advertising and, in the backend-free version, we do not send it to a developer-operated server. B. Information stored locally on your device Depending on the features you use, Luvlog may store the following information on your device: - your chosen display name; - family name and locally generated invite code; - manually selected family statuses and status history; - plans, reminder settings, and notification preferences; - locally calculated summaries, insights, and generated PDF or CSV reports; and - app preferences and premium-interface state. This content is not uploaded to a developer-operated backend in the version covered by this Policy. Anyone who can access your unlocked device may be able to access locally stored content, so you should secure your device. C. Firebase service data We use the following Firebase services: - Firebase Authentication: phone number, authentication identifiers, IP address, user-agent, and anti-abuse/security information. - Firebase Analytics: app-instance identifiers, app interactions, screens, events, device and operating-system information, app version, approximate country derived from IP address, language, and purchase-related events. - Firebase Cloud Messaging: Firebase installation identifier, messaging token, notification-delivery information, and notification interactions. - Firebase Remote Config: Firebase installation identifier, app/configuration information, and configuration assignments. D. Attribution and analytics providers Luvlog uses the following services to understand installation sources, app performance, feature usage, and subscription conversion: - Adjust: advertising or device identifiers where permitted, Adjust device identifier, IP address, device/app information, session and attribution data, campaign information, and selected app or purchase events. - Meta App Events: pseudonymous app/device identifiers where permitted, device/app information, and selected app, subscription, or purchase events. We do not intentionally send your phone number or local family content to Meta App Events. - Adapty: an app-user/profile identifier, device/app information, paywall and product views, selected product, purchase and subscription status, access-level information, and attribution identifiers received from attribution services. These providers process information under their own terms and privacy notices. Availability of advertising identifiers may depend on your device settings, consent choices, and applicable law. E. Purchases and subscriptions Subscriptions are purchased through Google Play. Google processes your payment method, billing address, transaction, tax, and account information under Google's terms and privacy policy. Luvlog receives limited purchase information such as product identifier, price/offer information, purchase status, subscription status, renewal or expiration status, and a transaction or purchase token needed to provide premium access and restore purchases. We do not receive your full payment-card number. F. Advertising, where enabled If an available app mode displays ads, Google Mobile Ads may process advertising identifiers where permitted, IP address, device/app information, ad interactions, consent signals, and diagnostic information to select, deliver, measure, and prevent fraud in advertising. Privacy choices are shown where required by applicable law. G. Information you send to support If you contact us, we process your email address, the content of your message, and any information you choose to provide so that we can respond and maintain support records. 3. Why We Process Information We process information to: - authenticate users and protect accounts from abuse; - provide local family profiles, status history, plans, reminders, insights, and reports; - send requested notifications; - retrieve feature configuration and operate the App; - provide, verify, restore, and manage premium access; - understand installation attribution and aggregated feature performance; - measure app and subscription events; - provide advertising where enabled and permitted; - troubleshoot, secure, and improve Luvlog; - respond to support and privacy requests; and - comply with legal obligations and enforce our Terms of Use. Depending on your location and the processing activity, our legal basis may be performance of our contract with you, your consent, our legitimate interests in operating and improving the App, or compliance with legal obligations. Where processing relies on consent, you may withdraw consent through the available device or in-app settings, without affecting earlier lawful processing. 4. How We Share Information We do not sell your phone number or local family content. We share limited information only as needed with service providers described in this Policy, including: - Google/Firebase for authentication, analytics, messaging, remote configuration, Google Play purchases, and—where enabled—mobile advertising; - Adjust for attribution and measurement; - Meta for App Events measurement; and - Adapty for paywalls, subscription analytics, purchase status, and premium access. We may also disclose information when required by law, to protect users or the App, in connection with a corporate transaction, or with your direction or consent. Service providers may process information in countries other than your own. 5. Data Retention - Local family content remains on your device until you delete it, delete your account through the App, clear the App's storage, or uninstall the App. - Firebase Authentication information is retained while your account is active. When the Firebase user is deleted, Google begins deleting associated authentication information subject to its documented live-system and backup retention periods. - Firebase Analytics, Cloud Messaging, Remote Config, Adjust, Meta, Adapty, Google Play, and Google Mobile Ads retain data according to their applicable settings, contracts, and privacy policies. - Support correspondence may be retained as reasonably necessary to answer requests, maintain records, prevent abuse, and comply with law. - Some information may be retained longer when required for legal compliance, fraud prevention, dispute resolution, or enforcement. We aim to keep personal information only for as long as reasonably necessary for the purposes described in this Policy. 6. Account and Data Deletion You can request deletion inside Luvlog: 1. Open Settings. 2. Select Delete Account. 3. Review the warning and confirm deletion. In the backend-free version, this process is intended to delete your Firebase Authentication account and Luvlog's locally stored family profile, status history, plans, reminders, and related app data on that device. You may also request deletion or assistance by emailing info@beivorstech.com with the subject Luvlog Account Deletion and the phone number, including country code, associated with the account. Do not send an SMS verification code or payment-card information by email. We may need to verify that the request concerns your account. Where provider-associated profile data cannot be deleted directly in the App, we will process or forward a verified deletion request to the relevant provider as applicable. Data already aggregated or de-identified so that it no longer identifies you may be retained. Deleting Luvlog or your Luvlog account does not automatically cancel a Google Play subscription. To stop future renewal, cancel separately in Google Play's subscription settings. Google may retain transaction information as required by law and its own policies. For Google Play's account-deletion web requirement, publish these same instructions at a stable public URL such as `https://beivorstech.com/luvlog-delete-account` before release. 7. Your Choices and Rights Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to complain to a data-protection authority. You can also: - change notification permission in Android settings; - reset or limit the advertising identifier through Android/Google settings; - use the in-app privacy choices entry where advertising consent settings are required; - delete local family content and the account using the steps above; and - contact us at info@beivorstech.com for a privacy request. We may ask for reasonable verification before completing a request. 8. Security We use reasonable technical and organizational measures designed to protect information. Data sent to Firebase and other providers is transmitted using encrypted network connections supported by those services. Local data is protected by your device's security controls. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. 9. International Processing Firebase and the other providers listed above operate internationally and may process information in the United States or other countries. Those countries may have data-protection laws different from the laws where you live. Where required, we and our providers rely on appropriate safeguards for international transfers. 10. Children Luvlog accounts are intended for adults or persons legally authorized to manage a household. Luvlog is not directed to children under 13, and a child under 13 should not create an account or provide a phone number. Parents and guardians should avoid entering unnecessary sensitive information about children into local family fields. If you believe a child provided personal information improperly, contact us so that we can investigate and delete it where applicable. 11. Third-Party Privacy Information - Google/Firebase: https://firebase.google.com/support/privacy and https://policies.google.com/privacy - Adjust: https://www.adjust.com/terms/privacy-policy/ - Meta: https://www.facebook.com/privacy/policy/ - Adapty: https://adapty.io/privacy/ - Google Play: https://policies.google.com/privacy 12. Changes to This Policy We may update this Privacy Policy when Luvlog, our providers, or legal requirements change. We will update the effective date and provide additional notice when required. Material changes apply prospectively unless applicable law permits otherwise. 13. Contact Beivors Bilişim Yazılım Teknolojileri San. Tic. Ltd. Şti. Email: info@beivorstech.com Website: https://beivorstech.com