Privacy Policy

This Privacy Policy explains how Sideways Lab ("we", "us", or "our") collects, uses, shares, and protects information when you use LoveLedger, our points-and-appreciation app for couples on iOS and Android. It supplements our general Sideways Lab Privacy Policy; where the two differ, this LoveLedger policy governs the app.

1. Who We Are

Sideways Lab Ltd is the data controller for the personal data described in this policy — we decide why and how it is used. We are registered in England and Wales under company number 17139067, with a registered office at Apartment 405 Manor Apartments, 2-4 Manor Row, Bradford, BD1 4AZ.

For any privacy question or to exercise your rights, email [email protected] or write to us at the address above.

Responsibility for data protection at Sideways Lab Ltd sits with our Privacy Officer, who can be reached at [email protected] or at the registered office above. Requests and complaints reach a person, not an unmonitored inbox.

2. Information We Collect

We collect only what we need to run LoveLedger. There is no advertising in the app, no advertising identifier, and no third-party analytics.

Your account

• LoveLedger creates an anonymous account for you the first time you open the app, so you can start without signing up. That account is identified by a random identifier — we do not ask for your name, email, or phone number to create it.
• If you later choose to secure your account so you can recover it, we collect the email address you sign in with. This is optional, and your existing history carries over to the secured account.
• A display name you choose, and an optional avatar.

Your shared ledger

• Tasks and rewards you or your partner create, and their titles and descriptions.
• Task completions, approvals, redemptions, and your point balance and point history.
• Appreciation notes you send your partner, and reactions to them.
• Daily mood check-ins: one of five moods, plus an optional short note if you add one. Mood check-ins record how your day felt. They are not a health record, we do not ask about health conditions, and LoveLedger is not connected to Apple Health, Google Fit, or any similar service.
• Proof photos you attach to a completed task.

This content is shared with your partner by design — that is the point of a shared ledger. It is visible to the two of you and to no other user.

Notifications

• A push notification token for each device you sign in on, so we can tell you when your partner does something in the app.
• Your per-category notification preferences. Muting a category silences the push only — the event still appears in your in-app inbox.

Purchases

If you buy LoveLedger Plus, Apple, Google, and our payments provider RevenueCat process and validate the transaction. We store only whether your entitlement is active, whether it is a lifetime purchase, and when a subscription expires. We never receive or store your card details.

Diagnostics

When something goes wrong in the app — a crash, or an error it recovers from — we receive a report through Sentry (Functional Software, Inc.), which stores it in Germany. A report carries your random account identifier, two coarse flags (whether the account is anonymous, and whether it is paired), and the names of screens you visited with any identifiers stripped out. It never includes your tasks, rewards, appreciations, moods, notes, or photos. Reports are deleted after 30 days.

You can switch diagnostics off at Settings → Diagnostics in the app. One limit is worth stating plainly: that setting is saved on your device, so it stops the app sending reports, but the server functions that run the ledger cannot read it — if one of those fails while handling something you did, the report still records your account identifier. It records nothing you or your partner wrote, either way.

3. How We Use Your Information

• To create and maintain your account and your pairing with your partner.
• To keep your shared ledger, points, rewards, and timeline in sync between both of you.
• To send you the notifications you have not turned off.
• To unlock and maintain LoveLedger Plus if you have bought it.
• To diagnose crashes and errors, and to keep the service secure and free from abuse.
• To answer you when you contact us, and to meet our legal obligations.

We do not sell or share your personal information, we do not show you ads, and we do not use your content to build advertising profiles or to train machine-learning models.

4. Our Legal Bases for Using Your Data

If you are in the UK, data protection law requires us to have a legal basis for each purpose. Ours are:

• Performance of a contract — creating your account, pairing you with your partner, storing and syncing your shared ledger, delivering notifications, and providing LoveLedger Plus. Without this data we cannot provide the app.
• Legitimate interests — crash and error diagnostics, device attestation to block automated abuse, and keeping the service secure. We have weighed these against your rights: the data involved is limited, diagnostics exclude everything you and your partner write, and you can switch diagnostics off in the app — subject to the server-side limit described under Diagnostics above.
• Legal obligation — responding to data protection rights requests and keeping records we are required by law to keep, such as records relating to purchases.
• Consent — where we ask for it explicitly, such as permission to send push notifications. You can withdraw it at any time in your device settings or in the app.

5. Third Parties & Service Providers

We share data only with providers that help us operate LoveLedger:

• Google Firebase — authentication, database, file storage, push messaging, and app attestation. This is where your account and your shared ledger live.
• Sentry (Functional Software, Inc.) — receives crash and error reports so we can find and fix faults. Reports are stored in Germany.
• Apple App Store, Google Play, and RevenueCat — process and validate in-app purchases.
• Cloudflare — serves this website.

These providers act as our processors, handling data on our instructions under written data processing terms. We do not share your information with third parties for their own marketing.

6. Where Your Data Is Stored

Your account and your shared ledger are stored on Google Firebase infrastructure in the United States. Because we are based in the United Kingdom, this is an international transfer of your personal data.

Diagnostic reports are handled differently. Sentry stores them in Germany, so they are not sent to the United States in the ordinary course. Sentry is a US company, and where its own staff need access in order to support the service, that access relies on the safeguards described next.

Transfers are covered by appropriate safeguards: Google LLC and Functional Software, Inc. (Sentry) are both certified under the EU–US Data Privacy Framework and its UK Extension, and our agreements with providers not covered by it incorporate the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Data is encrypted in transit using TLS and encrypted at rest. Access to your shared ledger is enforced on our servers by your membership of your pair — nobody outside the two of you can read it. Proof photos are stored privately and are readable only by you and your partner. No system is completely secure, but we take reasonable technical and organisational measures to protect your information, and we will notify you and the ICO where the law requires it after a breach.

7. Children's Privacy

LoveLedger is intended for adults in a relationship, and our Terms of Service require you to be at least 18. The app is not directed at children, and we do not knowingly collect personal data from anyone under 18 — including, for users in the United States, anyone under 13 within the meaning of the Children's Online Privacy Protection Act (COPPA). We do not ask for a date of birth because the app is not designed or marketed for children.

If you are a parent or guardian and believe a child has provided us with personal data, contact us at [email protected] and we will delete it.

8. Data Retention & Deletion

You can permanently delete your account at any time from You → Settings → Delete account in the app. Deletion is immediate, not scheduled. What happens next depends on whether you are paired:

• If you are not paired, or your partner never joined, we delete everything: your profile, your ledger, your proof photos, your notification tokens, your inbox, and your sign-in account.
• If you are paired, we end the pairing and delete your profile details, your notification tokens, your inbox, and your sign-in account. The history the two of you created together — your ledger, appreciations, and mood check-ins — remains available to your partner, because it is their record as much as yours. Your display name is removed from it.
• Once both partners have deleted their accounts, the shared history is orphaned and is permanently erased, along with any proof photos, no later than 30 days after the pairing ended.

Otherwise we keep your account data for as long as your account is active, so your ledger and history are still there when you come back. Diagnostic reports are deleted after 30 days and contain none of your content. Records of purchases are kept for up to six years after the transaction where we need them for UK tax and accounting purposes, even if you delete your account.

9. Your Rights & Choices

If you are in the UK you have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to processing we carry out on the basis of legitimate interests, and to withdraw any consent you have given. Similar rights apply in many other countries — see section 10.

You can exercise several of these directly in the app:

• Change your display name in You.
• Turn notification categories on or off in Settings → Notifications.
• Turn diagnostics off in Settings → Diagnostics.
• End a pairing, or delete your account outright, in Settings.

For anything else — including a copy of your data in a portable format — email [email protected]. We will respond within one month. There is no charge, and we may ask you to verify your identity first.

Because your ledger is shared, a request to erase content you created together has to be weighed against your partner's interest in their own record. We will always explain what we can and cannot remove, and why.

If you are unhappy with how we have handled your data, you can complain to your local data protection authority. In the UK that is the Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint, helpline 0303 123 1113. We would appreciate the chance to put things right first.

10. Regional Rights

LoveLedger is offered in the United Kingdom, the United States, Canada, Australia, and New Zealand. Wherever you are, you can use the in-app controls and the email address above.

United States

We do not sell or share your personal information, and we do not process it for targeted advertising or profiling. LoveLedger contains no advertising, no advertising identifier, and no third-party analytics, so there is nothing to opt out of. Depending on your state, you may have the right to know what we hold about you, to correct or delete it, to obtain a portable copy, and not to be discriminated against for exercising those rights. Email us to exercise them.

Canada

We handle personal information in accordance with PIPEDA and, for residents of Quebec, Quebec's Law 25. You may request access to, or correction of, your personal information, and you may withdraw consent subject to legal and contractual limits. Our privacy contact is the address in section 1. As set out in section 6, your data is stored outside Canada, in the United States.

Australia

We handle personal information in accordance with the Australian Privacy Principles. You may request access to or correction of your personal information, and you may complain to us first and then to the Office of the Australian Information Commissioner. As set out in section 6, your data is stored overseas, in the United States.

New Zealand

We handle personal information in accordance with the Privacy Act 2020 and its Information Privacy Principles. You may request access to or correction of your personal information, and you may complain to us first and then to the Office of the Privacy Commissioner. As set out in section 6, your data is stored overseas, in the United States.

11. Changes to This Policy

We may update this policy as LoveLedger evolves. We will revise the "Last updated" date above and, for material changes, provide notice within the app.

12. Contact Us

Questions about this policy or your data? Email [email protected], or write to Sideways Lab Ltd, Apartment 405 Manor Apartments, 2-4 Manor Row, Bradford, BD1 4AZ.