1. Data controller
The controller of your personal data is UnknownHorizons s.r.o., Company ID 23276070, VAT ID CZ23276070, registered at Na Folimance 2155/15, 120 00 Prague 2 – Vinohrady, Czech Republic (“UnknownHorizons”, “we”, “us”, or “our”).
Privacy questions and requests can be sent to matyashajek@proton.me.
2. Data we may collect
Account and profile data
Your name or display name, email address, login information, age range, language, and settings.
Nutrition and wellness data
Food photos, meal descriptions, calorie and nutrient entries, dietary preferences, goals, weight or body-related information you choose to provide, and your progress history. Depending on what you enter and how it is used, some of this information may be considered health data under applicable law.
Technical and usage data
Device and operating system information, app version, language, approximate region derived from IP address, identifiers, timestamps, feature interactions, diagnostics, and crash information.
Purchase data
Subscription status, product purchased, transaction identifier, and purchase date. App stores process your payment details; we do not receive your full card information.
Communications
Messages, support requests, feedback, and other information you send to us.
3. How we use personal data
- to provide your account, analyze food images, generate estimates, save entries, and show progress;
- to personalize goals, settings, and the way the Service is presented;
- to process and verify subscriptions and purchases;
- to respond to support requests and service messages;
- to maintain security, prevent fraud and misuse, fix errors, and monitor reliability;
- to improve existing features and develop new ones using aggregated or appropriately protected data;
- to comply with law, enforce our Terms, and protect users, UnknownHorizons, and others.
4. Legal bases under the GDPR
Where the GDPR applies, we rely on the following legal bases:
- Contract: to create your account and provide the features you request.
- Consent: where you choose to provide information treated as health data, allow optional permissions, or receive optional communications. You may withdraw consent at any time.
- Legitimate interests: to secure, maintain, troubleshoot, and improve the Service, provided those interests are not overridden by your rights.
- Legal obligation: to comply with tax, accounting, consumer, regulatory, and lawful request requirements.
5. Food image and AI processing
When you ask Lovako to analyze a meal, the food photo and related context are sent to specialized AI providers — currently Replicate, Inc. and Google (Gemini API) — which process the image to identify likely foods and estimate nutritional values. Automated results are informational estimates and do not make legal or similarly significant decisions about you. You can review or correct results.
We keep the resulting text data you choose to save, such as the identified foods and nutritional estimates. We do not use your meal photos to train general-purpose AI models unless we separately ask for and receive your explicit consent.
6. When we share data
We do not sell your personal data. We may share limited data with:
- Service providers (subprocessors) that support AI processing, hosting, storage, and infrastructure under contractual confidentiality and data protection obligations, as listed below.
- App stores and payment partners to validate purchases, manage subscriptions, and prevent fraud.
- Authorities or other parties when required by law or necessary to protect rights, safety, and security.
- A successor organization in a merger, acquisition, financing, reorganization, or sale, subject to appropriate safeguards and notice where required.
We currently use the following key subprocessors:
- Replicate, Inc. — AI model hosting used to analyze food images.
- Google LLC (Gemini API) — AI model used to analyze food images and generate nutritional estimates.
- DigitalOcean, LLC — cloud infrastructure and application hosting.
- Neon Inc. (neon.tech) — managed database hosting for your account and saved nutrition data.
7. International transfers
Some providers may process data outside the European Economic Area. Where required, we use recognized safeguards such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary measures where appropriate. You may contact us for more information about applicable safeguards.
8. Retention
We keep account and nutrition data while your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize associated personal data within a reasonable period, generally within 30 days, unless a longer period is needed for security, dispute resolution, legal compliance, or backup rotation. Financial and transaction records may be retained for the period required by tax and accounting law. Support communications may be retained for up to three years after resolution.
9. Your choices and rights
Depending on your location, you may have the right to:
- access and receive a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion or restriction of processing;
- object to processing based on legitimate interests;
- receive data you provided in a portable format;
- withdraw consent at any time, without affecting earlier lawful processing;
- complain to a data protection authority.
In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů). To exercise your rights, email us at matyashajek@proton.me. We may need to verify your identity before completing a request.
10. Device permissions
Lovako may request camera or photo library access so you can add meal images, and notification access for reminders you choose to enable. You can change permissions at any time in your device settings. Disabling a permission may limit the related feature.
11. Website cookies
The public website at lovako.app does not use advertising or cross-site tracking cookies. Essential technical storage may be used where strictly necessary for security or functionality. If we introduce optional analytics or marketing technologies, we will update this Policy and request consent where required.
12. Security
We use reasonable technical and organizational measures designed to protect personal data, including access controls, encryption in transit, provider review, and data minimization. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13. Children
Lovako is not directed to children under 16 and we do not knowingly collect their personal data without valid parental authorization where required. If you believe a child has provided data improperly, contact us and we will take appropriate action.
14. Changes to this Policy
We may update this Policy as the Service or law changes. We will publish the revised version and update the date above. If a change materially affects your rights, we will provide additional notice where appropriate.
15. Contact
UnknownHorizons s.r.o.
Na Folimance 2155/15
120 00 Prague 2 – Vinohrady
Czech Republic
Email: matyashajek@proton.me