Privacy Policy — LoveUSS

This Privacy Policy explains how Pensy Group LLC, an Oklahoma limited liability company located in Oklahoma City, Oklahoma (“Pensy Group,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you use LoveUSS (the “Service”). It applies to our website, web application, and mobile applications.

LoveUSS is about intimate parts of your life — the people you love and the situations you are working through. We take that seriously. We do not sell your information, and we never use your relationship content to target advertising. The Inner Circle is ad-free; we may show advertising to visitors and free accounts, and Section 9 sets out exactly what that can and cannot involve. The Service is for adults 18 and over. This policy is meant to be read alongside our Terms of Service.

1. Information We Collect

Information you provide.

Account details. When you create an account, your email address and a password. We store passwords only as a salted cryptographic hash — we never store your password in readable form.
Your relationship content. What you tell the Perspectives: an alias or name for the person, how they relate to you, the situation you describe, the messages you exchange in follow-up threads, and any notes. If you are a paying subscriber, this includes commitments (“check-ins”) you choose to track.
Corner connections (witnesses). If you invite someone to your corner, we store the private label you give them (for example, “my wife”), the name you introduce yourself with on the invite, and the connection once they accept. Invite links carry a random token; we store only a cryptographic hash of it, plus whether the link was opened — a number we use to understand the feature and never show to the inviter. If you respond to a read someone shared with you, we store your response and any optional note you add.
Age band. On the intake step we ask your age so the Perspectives speak appropriately. We convert your entry into an age band (for example, 18–24) and use only the band — we do not store your exact age.
Voice input. If you use the microphone to speak instead of type, your speech is transcribed to text by your browser or device’s speech-recognition service (see Section 4). Only the resulting text is sent to and stored by us as part of your content. We do not record or store the audio.
Communications. If you email us, we keep your message and contact details to respond.

Information we generate.

Perspective answers produced for your situations, and, on the paid plan and only after you explicitly consent, a “balance” (how each Perspective reads, given and received) and an “Inner Circle Status” profile computed from your own patterns. You can withdraw consent and delete these at any time.
Billing identifiers. If you subscribe on the website, our payment processor (Stripe) assigns customer and subscription identifiers that we store to manage your subscription. If you subscribe in the iOS app, the purchase is billed by Apple and we store the Apple subscription identifiers needed to manage it — the subscription’s original transaction identifier, its expiry, and which provider billed you. We never receive or store your full payment-card number.
Notification data. If you enable push notifications, the subscription details or device token needed to deliver them.

Information collected automatically.

Device and log data such as your IP address, browser or device type, and basic usage events, used to operate and secure the Service. We use your IP address as a lightweight signal to apply anonymous usage limits and to protect against abuse; it is not used to build an advertising profile.
Local storage and cookies. We use a secure, httpOnly session cookie (or an equivalent token on mobile) to keep you signed in, and your device’s local storage to remember your in-progress session and preferences. If you open a referral link (loveuss.com/r/…), we set one additional first-party cookie recording which referral handle you arrived through; it lasts 60 days, exists only to credit that referrer if you sign up, and is set only when you click such a link. We do not use cross-site tracking cookies, and we do not currently use advertising cookies (see Section 9).
Referral program data. If you sign up through a referral link, we permanently record which referrer’s account invited you, and we keep the signup’s IP address and a hashed browser signature for 90 days solely to detect referral fraud. If you then subscribe on the web, our payment processor’s card fingerprint (an opaque identifier — never a card number) is kept with your account for the same fraud checks, for as long as the account exists, and a copy persists in commission records where the law requires financial records to be retained. The referrer only ever sees aggregate counts — never your identity, your email, whether you specifically subscribed, or anything you do inside LoveUSS. If you join the referral program yourself, we additionally store your chosen handle, your acceptance of the Affiliate Terms, card fingerprints from referred payments (a fraud signal from our payment processor — never a card number), and — once you set up payouts — the Stripe identifiers for your payout account. Commission and payout records are financial records and are retained as required by law even after account deletion; they contain no relationship content of any kind.

2. How We Use Information

To provide the Service and generate the Perspectives’ guidance;
to tailor the register of the guidance to your age band and, for subscribers, to your saved history;
to create your account, save your people and situations, and sync your session across your devices;
to process subscriptions and payments, and to send account, transactional, and (if enabled) check-in reminder emails and notifications;
to run automated safety checks that scan text for signs of crisis so the Service can surface help resources (see Section 8);
to secure the Service, prevent abuse, debug problems, and comply with law;
with your explicit consent, to compute your Inner Circle Status from your patterns.

We do not use your relationship content to serve or target advertising, and we do not sell it.

3. How Artificial Intelligence Processes Your Content

The Perspectives’ answers are generated by Pensy AI, our AI infrastructure, which formulates each answer using leading third-party large language models — currently OpenAI’s, accessed through its API — instructed with our framework and safety rules. That means the relevant parts of your intake and conversation are sent to the model provider to produce a response. Under OpenAI’s API terms, content sent through the API is not used to train its models by default. We send only what is needed to produce the guidance, and if the models behind Pensy AI change, this policy will be updated to name the providers involved.

4. Voice Input and Speech Recognition

The microphone feature uses speech-recognition technology built into your browser or device to convert your speech to text. Depending on your browser, operating system, and settings, that transcription may be performed on your device or by the platform provider’s servers (for example, the maker of your browser or mobile operating system), subject to their privacy practices. LoveUSS receives only the transcribed text, which then becomes part of your content as described above. If you prefer not to use voice input, simply type instead.

5. When We Share Information

We do not sell your personal information. We share it only as needed to run the Service:

People you choose (your corner). This is the one case where your relationship content is shown to another person, and it happens only when you explicitly choose it. If you share a read with someone you invited to your corner, that person sees exactly that read: the situation you wrote, the three Perspectives’ answers, and the alias and relation of the person it is about — nothing else. They never see your other reads, your conversations, your promises, your balance or your Inner Circle Status, or how many reads exist. You can revoke a shared read, or remove the connection entirely, at any time; either removes their access. Their responses to a shared read are shown to you. We never tell an inviter whether their invite was opened or declined.
Our own team. Authorised Pensy Group staff can see an internal dashboard of account-level information — the email address on an account, when it was created, its plan, its age band, its notification settings, and counts of sign-ins, saved relationships, readings and promises. We use it to understand how the Service is used and decide what to build. It does not show your relationship content: not the situations you write, the Perspectives’ answers, your follow-up conversations, your promises, your Inner Circle Status, or even the alias you gave a person. Access is limited to staff who need it to operate the Service.
Service providers (sub-processors) who process data on our behalf under contract, including: OpenAI (language-model processing behind Pensy AI), Stripe (payment processing for website subscriptions), Apple (App Store billing for purchases made in the iOS app), Resend (transactional and reminder email), push- notification services operated by Apple, Google, and Mozilla, your device or browser’s speech-recognition provider, and our hosting and infrastructure provider.
Legal and safety. When we reasonably believe it is required by law or legal process, or necessary to protect the rights, safety, or property of you, others, or Pensy Group.
Business transfers. If Pensy Group is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.

6. Your Choices and Rights

Delete your data. You can delete an individual read (one situation together with its perspective answers, its conversation, and the promises made from it), an individual person (and everything tied to them), or your entire account at any time from within the Service. Deleting a read also deletes your computed Inner Circle Status, because its conclusions may draw on that read; it is recomputed from what remains. Deleting your account removes your saved people, situations, Perspective answers, threads, commitments, computed insights, and profile from our active systems. Deleting a read, a person, or your account also removes any copies shared with your corner — the read disappears for them too — and deleting your account removes your corner connections in both directions, including responses you left on reads others shared with you.
Consent for your profile. Your Inner Circle Status is computed only after you opt in, and you can withdraw consent and delete it at any time.
Notifications. You can turn check-in emails and push notifications on or off in Settings.
Access and correction. You can view and update your account information in the Service, or contact us for help.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or comparable state laws (for example, to know, access, delete, or correct your personal information, and not to be discriminated against for exercising these rights), or under the GDPR/UK GDPR (for example, access, rectification, erasure, restriction, portability, and objection). We do not sell or “share” personal information for cross-context behavioral advertising (see Section 9). To exercise any right, contact us at Contact@pensygroup.com; we will respond as required by applicable law and may need to verify your identity.

7. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete a read, a person, or your account, we remove the associated content from our active systems; residual copies may persist briefly in encrypted backups before being overwritten in the ordinary course. We may retain limited information as required to comply with legal obligations, resolve disputes, and enforce our agreements. In particular, if you participated in the referral program, records of commissions and payouts (amounts, dates, payment identifiers — never relationship content) are retained after deletion because tax law requires it.

8. Automated Safety and Crisis Detection

To help keep people safe, the Service automatically scans the text you submit for words and phrases that may signal a crisis (such as thoughts of self-harm). When such signals are detected, the Service shifts its response toward care and displays help resources. This is an automated aid, not human monitoring, and it is not a substitute for emergency services. See our Terms of Service for important limitations.

9. Advertising

The Inner Circle is ad-free. Paid subscribers are not shown advertising in the Service.

We do not currently display advertising to anyone. We may introduce advertising for visitors and free accounts. If we do, the following limits apply, and we will update this policy and its effective date before any change that affects your rights:

Never your relationship content. The people you describe, the situations you write, your threads, notes, commitments, Perspective answers, balance, and Inner Circle Status are never used to select, target, or measure an ad, and are never disclosed to an advertising provider.
Contextual, not behavioral. Any advertising would be contextual — based on the page it appears on, not on a profile built from your activity here or across other sites.
No sale, no cross-context sharing. We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as those terms are used in California and comparable state laws.

10. Minors

The Service is for adults. You must be 18 or older to use it, and it is not directed to children or teenagers. We do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 has created an account or provided information, we will close the account and delete the information. If you believe a minor has provided us information, contact us at Contact@pensygroup.com and we will delete it.

11. Security

We use technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

12. International Users

We operate in the United States, and our service providers may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those in your location.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you within the Service or by email. Your continued use of the Service after changes take effect means you accept the updated policy.

14. Contact Us

If you have questions about this policy or your information, contact:

Pensy Group LLC
Oklahoma City, Oklahoma, United States
Contact@pensygroup.com