Privacy policy

Draft: this describes how ALLVRA works today, but it hasn't been legally reviewed yet.

ALLVRA is operated by its owner (legal operator name to be confirmed).

What you give us

Account: your email address, a password (stored only as a secure hash by our sign-in service), your name and username.
Optional profile details: photo, cover, bio, date of birth, gender, relationship status, hometown, current city, work and education.
Your profile photo, name and username can be seen by any signed-in member you haven't blocked. Your cover photo, location and website are visible to friends only. Bio, date of birth, gender, relationship status, hometown, current city, work and education each have their own setting (All members, Friends or Only me); date of birth defaults to Only me and is also used to check minimum age.
Content you create: posts, photos, videos, stories, comments, reactions, communities, plans, listings, check-ins and messages.
Connections and safety: friend requests and friendships, blocks, and reports you submit.
Settings: notification, privacy and messaging preferences.

We use your data only to run ALLVRA's features. There are no ads and we don't sell personal data.
Profiles are visible to accepted friends. People who aren't your friends see only your photo, name, username and a short public bio preview.
Profile posts, stories and check-ins are shown to friends or only you, depending on what you choose. Community posts are seen by that community's members. Check-in photos are re-encoded to remove embedded location data before upload.
Messages are stored on our servers and are visible to the people in the conversation. They are not end-to-end encrypted, so people operating the service could technically access them.
Calls connect directly between devices where the network allows. Call audio and video aren't recorded. The connection setup messages for each call are stored and kept until your account is deleted.
Moderators can see the reports you submit (reason, details and which item was reported) and any beta feedback you send. The moderation tools don't open the reported content itself; moderators can only see it where it's otherwise visible to them. We can't promise a response time.

Assistant (off until you turn it on): only the text you submit for each request is sent to an AI model provider through the Lovable AI Gateway.
Place search: your search text, and your approximate area only if you allow it for that search, are sent to Google Maps Platform. We don't store your coordinates.

Lovable Cloud hosts the website, database, sign-in and file storage, and sends account emails.
The iPhone app keeps your sign-in session in the iOS Keychain on your device.

You can change audiences, profile details and message preferences in Settings and Privacy at any time.
Delete your account in Settings. This removes your live profile, content, messages, check-ins, listings and uploaded media, then your sign-in. Copies other people have already saved can't be recalled, and we don't currently promise immediate erasure from backups.

Questions? See Support.