Nigelware ("we," "our," or "us") operates the LoveLine iPhone app (the "App"). LoveLine is used by two people in a relationship, so this policy is unusually specific about what your partner can see and what they cannot.
When you sign in with Apple we receive an Apple-issued user identifier and, if you allow it, your name. We never receive your Apple Account password. If you use Apple's Hide My Email, we never see your real address.
These are stored so your partner can see them and so you can both read them back later.
The daily "how full is your tank" reading is stored against your account. Your partner never sees the number. This is enforced by our database rules, not only by the app — your partner's device is refused the data. They see only whether it moved up, down, or stayed level.
If you allow notifications, we store a push token so we can tell you when your partner has answered.
Subscriptions are handled entirely by Apple. LoveLine never sees your card, your billing address, or your Apple Account. What we store is the result: whether your couple has an active subscription, when the current period ends, which of you is paying, and Apple's anonymous identifier for the subscription so renewals can be matched to the right couple. That record lives on your shared pair, because one subscription covers both people.
No advertising identifiers. No location. No contacts. No photos. No microphone or camera access. No analytics or crash-reporting SDK. No browsing or usage tracking. We do not build a profile of you, and we do not sell or share data with third parties.
LoveLine's central promise is that neither partner sees the other's answer until both have replied. That rule is enforced in the database: your answer is stored as a separate record that your partner's device is not permitted to read until their own exists. It is not a display trick — the data is genuinely withheld.
Only you and the partner you have paired with. Not other users. Not us, in the ordinary course of running the service — access is limited to what is needed to operate and support the App.
Data is stored with Google Firebase (Authentication, Cloud Firestore, Cloud Messaging), operating as our data processor, on servers in the United States. Firebase's own privacy terms are at firebase.google.com/support/privacy.
Data is encrypted in transit and at rest by Firebase. Access from the App is additionally attested using Apple's App Attest, which verifies that requests come from a genuine copy of LoveLine rather than from an impostor.
Until you delete it. Deleting your account removes your profile, your answers, your picks, your check-ins, and your notes. Your partner keeps what they wrote — it is theirs. If you were the last person in a pair, the whole pair and everything in it is removed.
Settings → Delete my account, inside the App. It deletes rather than deactivates, and it cannot be undone. Two lesser options sit beside it: Sign out ends the session and changes nothing, and Leave this pair keeps your account but ends your access to what you wrote together.
LoveLine is intended for adults in relationships and is not directed at children under 13. We do not knowingly collect personal information from children under 13.
Depending on where you live, you may have rights to access, correct, export, or erase your data. Account deletion is available in the App; for anything else, contact us.
If this policy changes materially we will update the date above and note the change in the App before it takes effect.