Who we are
iluvu is provided by Moocher Ltd. For privacy questions or a data-protection request, email luvapp@moocher.co.
Information stored on your device
Capsules you create, their titles, schedules, private connection names, app preferences and, where available, Avatar facts and memories may be stored locally on your phone. Locally stored data remains under the control of that device and may be lost if the app or device is erased unless you have made your own backup.
Information used for private delivery
When you connect phones or choose to send a message or capsule through iluvu, the service may process installation and connection identifiers, recipient details, delivery status, timestamps, push-notification tokens and the content you chose to send. This is necessary to route the item to the intended connection and show delivery or read status.
iluvu does not require a public username, public profile or phone-number directory. Private names are chosen on each device.
Camera, microphone, photos and notifications
The app requests camera and microphone access so you can record capsules and, where enabled, a voice reference or spoken Avatar question. Photo or file access is requested when you choose an attachment, import a recording or select a portrait. Notifications are used for delivery and calendar reminders. You can change these permissions in your phone settings.
Avatar test features
Avatar replies are being tested and may not be available in your version of iluvu. Where enabled, you can choose a portrait, record a voice reference, add facts and memories, and ask a spoken or written question. When you request transcription or an Avatar reply, the portrait, voice reference, question and the approved information needed for that reply are sent to our processing services. These may include Cloudflare for speech transcription and response preparation and RunPod for synthetic voice and video generation.
Create an Avatar only of yourself or someone who has clearly authorised use of their face and voice. iluvu's temporary Avatar input files and private results are scheduled for deletion after processing or within 24 hours. A provider-managed generated-video link may remain available for up to seven days under that provider's retention arrangements. Save a completed video on your phone if you want to keep it.
The current Avatar service keeps limited job, entitlement, usage and security records needed to deliver the result, apply allowances and investigate failures or abuse. Deleting local content does not remove copies you have exported, sent to another person or saved outside iluvu.
Purchases
Payments are processed by Apple or Google. To check an entitlement, we may process product identifiers, transaction references, signed purchase information or purchase tokens and verified purchase status. We do not receive your full payment-card details. A purchase reference may be linked to supported installations so a one-time benefit cannot be claimed repeatedly. Purchases remain platform-specific.
Security and abuse prevention
Depending on the feature and app version, we process installation identifiers, app-integrity proofs and public-key metadata, request times, usage counts, connection or recipient identifiers and IP-address-derived security identifiers. Apple App Attest and Google Play Integrity may be used to check that a request comes from a genuine app and supported device. Hosting providers necessarily receive network information such as your IP address while handling a request. We use these signals to protect private content, enforce fair-use limits and reduce fraud and automated traffic, not for advertising.
Service providers and security
We use service providers for hosting, temporary media handling, push notifications, app distribution, payment processing and optional Avatar generation. These may include Cloudflare, Expo, Apple, Google and RunPod. Data is transmitted using encrypted HTTPS connections. No internet service can promise absolute security, so keep your device protected and send sensitive material only to people you trust.
Sharing, advertising and sale of data
We do not operate an advertising feed and do not sell personal information. Content is shared only when you choose a recipient or an outside sharing method, when a processor needs it to provide a feature you requested, or where disclosure is required by law or needed to protect the service and its users.
Deletion and your choices
You can delete local capsules, messages, connections and Avatar information within the app. Deleting the app removes its local data from that device. A delivered item may remain on the recipient's device, and security or purchase records may be retained where reasonably needed for fraud prevention, support, legal obligations or a dispute. Ordinary shared files follow the retention periods in our Fair Use Policy. Contact us to ask about server-held delivery data or exercise a data-protection right.
Children and changes
iluvu is not directed to children under 13. A parent or guardian should supervise use by a minor. We may update this policy as the service changes and will publish the revised date on this page.