Four promises
Trust is built in, not bolted on.
It takes two to open
Your space exists only once you invite someone and they choose to join. Invite codes are single use, expire after fourteen days, and can be revoked. Before joining, a code reveals your first name and nothing else.
Mutual consent · Exactly two
Every permission waits to be asked
Location, camera, microphone, health and the rest are off until a feature needs them, and asked for at that moment. Nothing is switched on because you connected, and anything can be switched off again.
Asked when needed · Revocable
Your data has one purpose
What you share is there to reach your partner. It is not sold, not used for advertising, not sent to an AI model, and not used to train one.
No ads · No trackers · No AI
Leaving always works
Either of you can end the shared space, and it closes for both phones at once. Deleting your account destroys your couple's encryption key, so what you wrote cannot be read again.
One step · Real deletion
How LoveDose protects what you share.
Different features need different things. Here is what each one uses, what it never does, and how to turn it off.
Location
Where you are, on your terms.
Turn location on and your partner sees roughly how far apart you are, never your exact position. Trail, a record of where you have been, is a separate choice, and it lets go of each place after thirty days.
Place names come from your phone’s own geocoding service. Switch location off and only the features that need it stop; everything else carries on.
Off by defaultApproximate distance30-day Trail
Words, photos and voice
Written for one person, read by one person.
Answers, notes, messages, voice notes, photos and memories are encrypted with your couple’s own key. A daily answer stays sealed until you have both written, so neither of you answers to the other’s words.
Photos and voice notes in chat leave our servers once they reach your partner’s phone, and within a day at most. The location hidden inside a photo is removed before it is uploaded, and notifications never carry what was written.
Per-couple encryptionSealed answersChat media gone in 24h
Health and presence
Small signals, each one a choice.
If you connect Apple Health or Health Connect, LoveDose reads daily totals such as steps and sleep to share with your partner. It never writes to them, and health data is never used for advertising or given to anyone else.
Battery, charging, Wi-Fi and Focus are separate switches, so your partner knows why you might be quiet only if you want them to.
Read onlyOne switch per signal
Advertising
No ads. Not now, not later.
There is no advertising in LoveDose, and no advertising, analytics or tracking code in the app. We do not use your phone’s advertising identifier. LoveDose is paid for by an optional subscription, handled entirely by the App Store or Google Play, so we never see your card.
No ad SDKsNo ad identifierNothing sold
Security
Locked the way a diary should be.
One
Encrypted, couple by couple
Everything travels over TLS. Your content, name, email and avatar are encrypted at rest with a key that belongs to your couple alone, held by a managed key service. One couple's key can never open another's.
Two
No password to steal
You sign in with a one-time email code, or with Apple or Google. The credential that keeps you signed in lives in your phone's secure storage, the iOS Keychain or Android Keystore.
Three
Access kept small
Only the few people who run the service can reach its systems. Logs are built so they cannot contain what you wrote, and photos are served only through short-lived signed links.
No system is perfectly secure. If a breach ever affects your information, we will tell you, and the authorities the law requires us to tell.
Your choices
Change your mind whenever you like.
All of these are yours, at any time, without asking us or your partner. The last one is an email to privacy@lovedose.app.
- Turn any permission or shared signal on or off
- Stop sharing your distance, or your Trail
- Choose your notifications and set quiet hours
- Edit your name, email, avatar and optional details
- Delete memories and anything else you created
- Separate, which closes your space for both of you
- Delete your account and its data
- Ask us to access, correct, export or delete your information
If you don’t feel safe
Sharing should never be something you owe.
LoveDose is built for two people who both want to be close. If that stops being true, you can switch off your location, your Trail and every other signal from your own phone, without your partner’s permission. They may notice that it has stopped.
Separating ends the shared space for both of you at once: from that moment neither phone can open it, and any invite code it had stops working.
If you are in danger, contact your local emergency services, or a domestic abuse support service where you live.
Stay close, without giving yourself away.
Questions, worries, or a security problem you have found? Write to privacy@lovedose.app. Every message reaches a person, not a ticket queue.