Lovumi Privacy Policy

Microstone Inc. ("we") sets out in this Privacy Policy (the "Policy") how we handle personal information in the Lovumi app and related services (the "Service"). This Policy takes into account Japan's Act on the Protection of Personal Information (the "APPI"), the EU/EEA General Data Protection Regulation (GDPR), the UK GDPR and the California Consumer Privacy Act (CCPA/CPRA).

1. Information we collect and why

We collect the following information to the extent needed to provide the Service. Information on our servers is stored in Japan.

We do not collect location, contacts (address book), phone number, date of birth or payment details (such as card numbers). Payments are processed by Apple or Google.

2. Messages, photos and sharing with your partner

• Your chat history and photos are stored on your two devices. Our server holds messages and photos only until they reach your partner's device, then deletes them. If they cannot be delivered, messages are deleted after 30 days and photos after 7 days.
• You can unsend a message within 5 minutes of sending it. Content your partner has already read cannot be taken back.
• What you send, the pet, game results, birthdays and anniversaries, and your display name and avatar are shown to your partner. Game answers are not shown to your partner until both of you have answered.
• Notifications do not include message content, except that if the recipient turns on "Show message text in notifications", the beginning of a text message is included.
• History and photos saved on your device are excluded from device backups. They cannot be recovered if you lose the device or delete the app.
• When a pair ends, sharing stops immediately, that pair's information is deleted from the devices and is deleted from our server after 29 days. If you pair with someone new, your previous history and pet do not carry over.

3. Retention

If there is a safety dispute or a legal request, we may keep information longer to the extent necessary.

4. Deleting your account

• In the app: open "Settings" → "Delete account".
• On the web: if you cannot use the app, contact us at 【アカウント削除ページURL】 or 【お問い合わせ先メール】.
• Deleting your account ends your pair, and your account information is deleted from our server after 29 days. Including backups, it is gone within about 44 days. Information with its own period in Section 3, such as purchase records, is kept for that period.
• Deleting your account does not cancel a store subscription. Cancel it in the App Store or Google Play.
• We may delete accounts of users under 18 or accounts that violate the Terms of Use.

5. Disclosure to third parties

We do not advertise, track you or sell data. We may entrust handling to providers of server operation, email delivery, notification delivery, sign-in, billing and similar services, to the extent needed to provide the Service. We do not provide personal information to third parties without your consent, except:

• where required by law
• where necessary to protect a person's life, body or property and it is difficult to obtain your consent
• when we entrust handling to the extent needed to provide the Service
• in connection with a business succession

6. Handling outside Japan

• Provision outside Japan: we entrust Google LLC and Apple Inc., which are in the United States, with handling for notifications, sign-in and billing. The United States has no comprehensive federal law equivalent to the APPI; it has state laws and sector-specific laws.【Confirm the APPI Art. 28 basis (consent, or a system meeting the standards) and the measures taken by the recipients】
• For users in the EU/EEA and UK: personal data is transferred to Japan on the basis of the European Commission's adequacy decision (for the UK, the adequacy regulations).【Confirm application of the Supplementary Rules】 Transfers to Google and Apple are made under 【confirm the safeguard recognized by the GDPR and UK GDPR, such as the EU-U.S. Data Privacy Framework (including the UK extension) or Standard Contractual Clauses (SCCs)】.

7. Security

We use measures such as encryption in transit and at rest, restricted and logged access to servers and admin tools, and multi-factor authentication for administrators. Our servers and data are in Japan; for notifications, sign-in and billing, providers in the United States handle data (Section 6).【Confirm organizational and personnel measures (a responsible person, staff training, etc.)】

8. Your rights

• You can change your display name, avatar and settings in the app, and delete your account in the app or on the web (Section 4).
• Under the APPI, you may request notification of purposes of use, disclosure (including records of provision to third parties), correction, addition or deletion, suspension of use or erasure, and suspension of provision to third parties. The fee is 【開示請求の手数料】.
• Users in the EU/EEA and UK have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and may lodge a complaint with their local supervisory authority.
• We accept requests in the app under "Settings" → "Contact us" or at 【お問い合わせ先メール】, and may ask you to verify your identity. If you are not satisfied with our response, you may also consult Japan's Personal Information Protection Commission.

9. For users in the EU/EEA and UK: legal bases

We do not make decisions with significant effects based solely on automated processing.

10. Other

• Age: the Service is for people 18 or older. If we learn an account belongs to someone under 18, we suspend or delete it.
• California residents: we do not sell personal information or share it for cross-context behavioral advertising. You may exercise your rights to know, delete and correct as described in Section 8, and we will not discriminate against you for doing so.
• Changes: we may change this Policy. We will announce important changes in the Service before they take effect.
• Language: the Japanese version is authoritative. If a translation differs from the Japanese version, the Japanese version prevails.

---

Established: October 29, 2026