Lovaio Legal
Privacy Policy
How Lovaio collects, uses, stores, shares and protects personal information.
- Version
- 1.1
- Effective
- 28 July 2026
- Last updated
- 28 July 2026
- Reading time
- 16 min
1. Introduction
Welcome to Lovaio.
Your privacy is important to us. This Privacy Policy explains how Lovaio collects, uses, stores, shares and protects your personal information when you use our website, mobile applications and related services (collectively, the "Platform").
Lovaio is a global community platform designed to connect travelers around the world. Our mission is to make travel more affordable, sustainable and accessible by enabling people to exchange, sell, give away and discover travel-related items, knowledge and opportunities.
We are committed to processing your personal data lawfully, fairly and transparently, in accordance with applicable privacy laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), where applicable.
Please read this Privacy Policy carefully before using the Platform.
By creating an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The controller of your personal data is:
VHV-Construction, s.r.o.
Company ID (IČO): 24212865
Registered Office: Bělehradská 858/23, 120 00 Prague 2, Czech Republic.
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 189175.
Website: https://lovaio.com
Privacy: privacy@lovaio.com
Support: support@lovaio.com
Legal: legal@lovaio.com
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the contact details above.
3. Scope of this Privacy Policy
This Privacy Policy applies to all users of the Lovaio Platform, including visitors, registered users, buyers, sellers, donors, recipients and anyone interacting with our services.
It applies to:
- the Lovaio website;
- mobile applications;
- messaging features;
- user profiles;
- community features;
- customer support;
- promotional communications;
- any future services operated by Lovaio unless stated otherwise.
Third-party services
This Privacy Policy does not apply to third-party websites, services or applications that may be linked from the Platform.
Those services have their own privacy policies and practices, for which Lovaio is not responsible.
4. Information We Collect
We collect information in several different ways depending on how you use the Platform.
We only collect personal information that is reasonably necessary to provide our services, maintain the security of the Platform, comply with legal obligations and improve the user experience.
The information we collect may include the following categories.
4.1 Account Information
When you create an account, we may collect information including:
- your name or display name;
- your email address;
- your password, stored in encrypted or hashed form;
- your date of birth, where required;
- your country or region;
- your preferred language;
- your profile photo;
- account verification information, where applicable;
- login credentials when using third-party authentication providers, such as Google, Apple or other supported identity providers.
Optional information
You may choose to provide additional information to personalize your profile.
Unless specifically indicated, providing optional profile information is voluntary.
4.2 Profile Information
Your public profile may include information that you choose to share with other users, such as:
- profile picture;
- display name;
- biography;
- languages spoken;
- country or city;
- travel interests;
- travel history, where voluntarily shared;
- ratings and reviews;
- account creation date;
- verification badges;
- publicly visible activity on the Platform.
Public profile responsibility
You are responsible for the information you choose to make publicly available.
4.3 User Content
Lovaio allows users to create, upload and share content.
This may include:
- listings;
- photographs;
- videos;
- descriptions;
- comments;
- reviews;
- ratings;
- messages posted in public areas;
- profile content;
- other content voluntarily submitted by users.
Visibility of user content
Some of this content may be publicly visible depending on your privacy settings and the functionality of the Platform.
4.4 Private Messages
When users communicate through the Platform, we process the content of private messages in order to provide the messaging service.
Lovaio does not routinely monitor or read private conversations.
However, we may access, review or process private messages where reasonably necessary to:
- investigate reports of abuse, fraud or illegal activity;
- enforce our Terms or other Platform policies;
- comply with applicable laws or lawful requests from public authorities;
- protect the rights, safety or property of Lovaio, our users or third parties;
- maintain the security and integrity of the Platform.
Access limitations
Where technically feasible and legally permitted, access to private communications is limited to authorized personnel and only for the purposes described above.
4.5 Location Information
Depending on how you use the Platform, we may collect location-related information, including:
- country;
- city;
- approximate geographic location;
- travel destination;
- location associated with listings;
- device location, where you have granted permission.
Use of location information
Location information helps users discover relevant listings and improves the functionality of the Platform.
You may disable precise location permissions through your device settings.
Some Platform features may become unavailable or less accurate as a result.
4.6 Device and Technical Information
We automatically collect certain technical information, including:
- IP address;
- browser type and version;
- operating system;
- device type;
- device identifiers;
- language settings;
- time zone;
- referring URLs;
- pages visited;
- clicks and interactions;
- crash reports;
- diagnostic information;
- security logs.
Use of technical information
This information helps us maintain security, detect fraud, diagnose technical issues and improve our services.
4.7 Cookies and Similar Technologies
We use cookies, pixels, local storage and similar technologies to:
- authenticate users;
- remember preferences;
- maintain secure sessions;
- measure Platform performance;
- understand how the Platform is used;
- personalize certain features;
- improve the overall user experience.
Cookie Policy
Additional information about cookies is provided in our Cookie Policy.
4.8 Information from Third Parties
We may receive information from third parties, including:
- identity providers used for login;
- payment service providers;
- analytics providers;
- advertising partners, where applicable;
- fraud prevention providers;
- publicly available sources;
- other users who interact with you on the Platform.
Third-party information processing
We process such information only where permitted by applicable law.
4.9 AI-Assisted Moderation
To protect our community, Lovaio may use artificial intelligence and automated systems to analyze user-generated content.
This may include:
- listing titles and descriptions;
- uploaded photographs;
- public comments;
- reviews;
- reports submitted by users;
- account behavior patterns;
- metadata associated with uploaded content.
Detection purposes
These systems help detect:
- spam;
- scams;
- fake listings;
- prohibited items;
- abusive content;
- copyright violations;
- suspicious or fraudulent activity.
Human oversight
Automated systems may assist human moderators but do not make legally significant decisions without appropriate human oversight where required by applicable law.
5. How We Use Your Information
We use your personal information only where necessary to operate the Platform, provide our services, comply with legal obligations, protect our users and improve the overall user experience.
Depending on how you use the Platform, your information may be used for the following purposes.
5.1 Providing the Platform
We use your information to:
- create and manage your account;
- authenticate your identity;
- display your profile and listings;
- enable communication between users;
- facilitate exchanges, sales, donations and other interactions;
- provide customer support;
- process reports submitted by users;
- maintain Platform functionality.
5.2 Improving the Platform
We use information to better understand how the Platform is used and to improve our services.
This may include:
- developing new features;
- improving existing functionality;
- fixing bugs;
- optimizing performance;
- measuring feature usage;
- improving accessibility;
- improving search results;
- enhancing user experience.
Aggregated analytics
Where possible, we use aggregated or anonymized information for analytics.
5.3 Personalization
We may personalize your experience by:
- recommending relevant listings;
- suggesting users with similar travel interests;
- displaying content based on your location;
- remembering your preferences;
- providing localized content;
- improving search relevance.
User control
Personalization is intended to improve your experience without limiting your control over the Platform.
5.4 Communications
We may contact you regarding:
- account security;
- password resets;
- important service announcements;
- changes to our Terms or Privacy Policy;
- responses to support requests;
- notifications related to your listings;
- messages from other users;
- moderation decisions;
- verification requests;
- legal notices.
Marketing communications
Where permitted by law and subject to your preferences, we may also send newsletters, product updates and promotional communications.
You may unsubscribe from marketing communications at any time.
5.5 Safety and Security
Protecting our community is one of our highest priorities.
We use personal information to:
- detect fraud;
- prevent scams;
- identify fake accounts;
- detect suspicious activity;
- prevent abuse;
- investigate reports;
- protect users;
- enforce our policies;
- secure user accounts;
- maintain the integrity of the Platform.
5.6 AI-Assisted Safety Systems
Lovaio may use artificial intelligence and machine learning technologies to assist in protecting the Platform and improving our services.
These technologies may help:
- identify spam;
- detect fraudulent listings;
- recognize prohibited content;
- identify abusive behavior;
- detect duplicate content;
- improve search quality;
- prioritize reports for review;
- recommend relevant content.
Decision support and review
AI systems are designed to support human decision-making.
Where required by applicable law, significant moderation decisions are subject to appropriate human review.
5.7 Legal Compliance
We process personal information where necessary to:
- comply with applicable laws;
- respond to lawful requests from public authorities;
- comply with court orders;
- fulfill tax and accounting obligations;
- enforce contractual obligations;
- establish, exercise or defend legal claims.
5.8 Research and Statistics
We may use anonymized or aggregated information for:
- statistical analysis;
- business reporting;
- product development;
- academic research;
- market analysis;
- improving Platform performance.
Protection of identity
Information used for these purposes is processed in a way that does not directly identify individual users whenever reasonably possible.
5.9 Business Operations
Your information may also be processed for legitimate business purposes, including:
- maintaining internal records;
- auditing;
- financial reporting;
- risk management;
- quality assurance;
- training customer support staff;
- improving operational efficiency.
5.10 Business Transfers
If Lovaio is involved in a merger, acquisition, investment, corporate restructuring or sale of assets, personal information may be transferred as part of that transaction, subject to applicable law.
Users will be informed where required by law.
6. Legal Basis for Processing (GDPR)
Where the GDPR applies, Lovaio processes personal data on one or more of the following legal bases.
Performance of a Contract
We process personal information where necessary to provide the Platform and fulfill our contractual obligations to users.
Examples include:
- creating user accounts;
- providing messaging;
- displaying listings;
- enabling Platform functionality;
- providing customer support.
Legitimate Interests
We process information where necessary for our legitimate interests, provided such interests are not overridden by your rights and freedoms.
Examples include:
- fraud prevention;
- Platform security;
- moderation;
- analytics;
- improving our services;
- protecting users;
- preventing abuse.
Legal Obligations
We process information where required to comply with applicable laws, including:
- accounting obligations;
- tax obligations;
- legal reporting requirements;
- court orders;
- law enforcement requests.
Consent
In certain situations, we rely on your consent.
This may include:
- marketing communications;
- optional cookies;
- certain location services;
- optional profile information.
Withdrawal of consent
You may withdraw your consent at any time.
Withdrawal does not affect processing carried out before consent was withdrawn.
Vital Interests
In exceptional circumstances, we may process personal information where necessary to protect the vital interests of a user or another person.
8. International Data Transfers
Lovaio operates internationally.
Your personal information may therefore be transferred to, processed or stored in countries outside your country of residence.
Where personal information is transferred outside the European Economic Area (EEA), we implement appropriate safeguards as required by applicable law.
These safeguards may include:
- Standard Contractual Clauses approved by the European Commission;
- adequacy decisions adopted by the European Commission;
- contractual obligations with service providers;
- additional technical and organizational security measures.
Protection of transferred information
We take reasonable steps to ensure that transferred information receives an adequate level of protection regardless of where it is processed.
9. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of information and the purpose for which it is processed.
Examples include:
- account information while your account remains active;
- transaction-related information as required by applicable accounting or tax laws;
- security logs for fraud prevention and Platform security;
- customer support communications for quality assurance and dispute resolution;
- moderation records for enforcement of Platform policies;
- backup copies retained for disaster recovery purposes for a limited period.
Deletion and anonymization
When information is no longer required, it is securely deleted, anonymized or otherwise irreversibly de-identified, unless legal obligations require continued retention.
Deletion from backup systems may not occur immediately but will take place during normal backup rotation cycles.
10. Your Rights
Depending on your location and applicable law, you may have the right to:
- access your personal information;
- obtain a copy of your personal information;
- correct inaccurate information;
- update incomplete information;
- request deletion of your personal information;
- restrict processing;
- object to certain processing activities;
- withdraw consent where processing is based on consent;
- request data portability;
- object to direct marketing;
- lodge a complaint with a competent supervisory authority.
Responding to requests
We will respond to requests within the time limits required by applicable law.
In certain situations, legal obligations may prevent immediate deletion of some information.
Identity verification may be required before fulfilling certain requests to protect user privacy and security.
10.1 Right to Lodge a Complaint
If you believe that your personal information has been processed unlawfully, you have the right to lodge a complaint with the competent data protection authority in your country of residence or with another competent supervisory authority as provided by applicable law.
10.2 Exercising Your Rights
Requests regarding privacy rights may be submitted to privacy@lovaio.com.
We may request additional information to verify your identity before processing your request.
11. Children's Privacy
Lovaio is intended for users who are at least 16 years of age, or the minimum age required by applicable law in their country of residence to consent to the processing of personal data.
Individuals who have not reached the applicable minimum age may use the Platform only with the involvement and consent of a parent or legal guardian where permitted by applicable law.
Lovaio does not knowingly collect personal information from children in violation of applicable laws.
If we become aware that personal information has been collected from a child unlawfully, we will take reasonable steps to:
- verify the information;
- obtain parental consent where legally permitted;
- restrict access to the account where appropriate;
- delete the personal information without undue delay where required by law.
Parents and legal guardians
Parents or legal guardians who believe that a child has provided personal information to Lovaio without the required consent may contact us at privacy@lovaio.com.
We encourage parents and guardians to supervise children's online activities and to educate them about the safe use of online services.
12. Security Measures
Protecting your personal information is one of Lovaio's highest priorities.
We implement appropriate technical, organizational and administrative measures designed to protect personal information against unauthorized access, accidental loss, misuse, disclosure, alteration or destruction.
Our security measures may include, among others:
- encrypted communication using HTTPS/TLS;
- secure authentication mechanisms;
- password hashing using industry-standard algorithms;
- role-based access controls;
- multi-factor authentication for administrative accounts where appropriate;
- monitoring for suspicious activity;
- automated fraud detection systems;
- regular software updates and security patches;
- vulnerability assessments and security testing;
- backup and disaster recovery procedures;
- logging of security-relevant events.
Access controls
Access to personal information is limited to employees, contractors and service providers who require such access to perform their duties and who are subject to appropriate confidentiality obligations.
Security limitations
While we strive to use commercially reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is completely secure.
Accordingly, Lovaio cannot guarantee absolute security, and users should also take appropriate steps to protect their own accounts, including choosing strong passwords, enabling available security features and keeping login credentials confidential.
Personal data breaches
If we become aware of a personal data breach, we will respond in accordance with applicable law, including notification of competent supervisory authorities and affected individuals where required.
14. Third-Party Services
The Platform may integrate or interact with third-party services.
Examples include:
- authentication providers;
- payment providers;
- cloud hosting providers;
- mapping services;
- analytics providers;
- customer support providers;
- email delivery providers;
- content delivery networks;
- AI service providers;
- security providers.
Third-party processing
These third parties may process personal information in accordance with their own privacy policies and contractual obligations with Lovaio.
Lovaio carefully selects service providers and, where required by law, enters into appropriate contractual arrangements to ensure that personal information is processed securely and lawfully.
Third-party links
The Platform may also contain links to third-party websites.
Lovaio is not responsible for the privacy practices or content of third-party websites or services that are not operated by us.
Users are encouraged to review the privacy policies of any third-party services they use.
15. Changes to this Privacy Policy
Lovaio may update or modify this Privacy Policy from time to time to reflect changes in our services, legal obligations, business operations or technological developments.
When material changes are made, we will take reasonable steps to inform users through appropriate means, which may include:
- notifications within the Platform;
- email notifications;
- updates published on our website;
- other communication channels where appropriate.
Effective date
The "Effective Date" at the beginning of this Privacy Policy indicates when the current version became effective.
Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the revised Policy to the extent permitted by applicable law.
Consent to changes
Where applicable law requires your consent for specific changes, we will obtain such consent before those changes take effect.
We encourage users to review this Privacy Policy periodically to stay informed about how their personal information is processed and protected.
16. Contact Information
If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal information, please contact us.
Data Controller: VHV-Construction, s.r.o.
Company ID (IČO): 24212865
Registered Office: Bělehradská 858/23, 120 00 Prague 2, Czech Republic.
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 189175.
Website: https://lovaio.com
General Support: support@lovaio.com
Privacy Requests: privacy@lovaio.com
Legal Matters: legal@lovaio.com
We aim to respond to privacy-related requests without undue delay and, where applicable, within the time limits required by law.
17. Final Provisions
This Privacy Policy forms an integral part of the legal framework governing the use of the Lovaio Platform and should be read together with our:
- Terms of Service;
- Cookie Policy;
- Community Guidelines;
- Acceptable Use Policy;
- Trust & Safety resources;
- any additional policies referenced by the Platform.
Severability
If any provision of this Privacy Policy is found to be invalid or unenforceable under applicable law, the remaining provisions shall remain in full force and effect.
Mandatory rights
Nothing in this Privacy Policy limits any rights that users may have under applicable data protection legislation.
In the event of any conflict between this Privacy Policy and mandatory provisions of applicable law, the applicable law shall prevail.
Closing statement
Thank you for being part of the Lovaio community.
We believe that travel becomes more meaningful when people help one another, share responsibly and build trust across borders.
We are committed to protecting your privacy while supporting a safe, respectful and sustainable global travel community.