Privacy Notice

Last updated: May 27, 2026

This Privacy Notice describes how Luvu, Inc. (“Luvu,” “we,” “our,” or “us”) collects, uses, discloses, sells, shares, licenses, and otherwise processes personal information in connection with our websites, mobile applications, games, products, services, and any other online or offline offerings that link to this Privacy Notice, including Tiny Stage or TinyStage (“Tiny Stage”).

Tiny Stage is a voice acting and improv game where users may create, upload, perform, submit, rate, and interact with voice recordings and related content. This Privacy Notice explains how we process personal information in connection with Tiny Stage and our other services.

This Privacy Notice does not apply to personal information we process about job applicants, employees, contractors, or other employment-related individuals, or to information that is not subject to applicable data protection laws, such as deidentified information or publicly available information where excluded by law. This Privacy Notice is not a contract and does not create any legal rights or obligations beyond those provided by applicable law.

Important Notice About Tiny Stage Voice Recordings

Tiny Stage is a game, but submitted voice recordings may also be used commercially. When you create, upload, submit, or otherwise provide voice recordings, performances, audio files, related content, or associated metadata through Tiny Stage, Luvu may use, analyze, review, moderate, transcribe, annotate, package, sell, share, license, sublicense, distribute, or otherwise provide those recordings and related data to third-party clients, including companies developing, training, evaluating, testing, improving, or commercializing artificial intelligence systems, machine learning models, speech technologies, voice technologies, moderation systems, transcription systems, synthetic media systems, analytics tools, or other products and services.

Some users may be eligible for in-app rewards, credits, coins, prizes, gift cards, promotional incentives, cash-like rewards, cash-equivalent rewards, or other benefits. However, Tiny Stage is not a one-to-one marketplace where each submission is guaranteed to be purchased or compensated. Luvu does not guarantee that any user will receive payment or rewards for any particular recording, submission, rating, performance, account activity, or use of Tiny Stage, except as expressly stated in the applicable reward, promotion, or program terms.

By using Tiny Stage and submitting voice recordings or related content, you acknowledge that your submissions may be commercially used and may be disclosed, sold, licensed, sublicensed, or otherwise made available to third-party clients as described in this Privacy Notice, our Terms of Service, and any applicable consent or submission flow presented to you.

Our Role in Processing Personal Information

Data protection laws sometimes distinguish between “controllers” and “processors” of personal information. A controller determines the purposes and means of processing personal information. A processor, sometimes called a service provider, processes personal information on behalf of a controller and according to that controller’s instructions.

This Privacy Notice describes our privacy practices where Luvu acts as a controller of personal information. In some circumstances, we may process personal information on behalf of a third-party client, business customer, vendor, or other partner. In those circumstances, this Privacy Notice may not fully describe how that third party processes personal information, and you should review the privacy notice of the relevant third party.

Personal Information We Collect and How We Use It

The personal information we collect depends on how you interact with us and our services. We may collect personal information directly from you, automatically when you use our services, from other users, and from third parties.

Account and Contact Information

We may collect account and contact information, including:

• First and last name;
• Username, display name, profile photo, avatar, bio, and other profile details;
• Email address, phone number, and other contact information;
• Age, date of birth, or age range;
• Country, state, region, time zone, language preferences, and communication preferences;
• Account credentials, authentication tokens, one-time passcodes, and login information;
• Products, services, games, features, promotions, or programs you are interested in or use.

We use this information to create, authenticate, operate, maintain, and secure your account; provide our services; communicate with you; provide customer support; verify eligibility; administer rewards or promotions; enforce our terms; prevent fraud and abuse; and comply with legal obligations.

Tiny Stage Voice Recordings and Submitted Content

Tiny Stage allows users to create, upload, perform, submit, rate, and interact with voice acting, improv, and other audio-based content. We may collect and process:

• Voice recordings, audio files, performances, takes, auditions, lines, scenes, prompts, improvisations, and related submissions;
• Transcripts, captions, translations, summaries, and annotations of recordings;
• Prompt text, performance instructions, emotional labels, style labels, scenario labels, rating categories, challenge metadata, and task instructions;
• Submission metadata, including duration, file size, file format, codec, sample rate, volume levels, quality scores, language, accent, estimated audio quality, background noise, device type, upload time, recording time, and technical characteristics;
• Gameplay metadata associated with recordings, such as battles entered, votes received, ratings, wins, losses, coins, credits, points, XP, streaks, rankings, rewards, moderation outcomes, review status, and quality review feedback;
• Moderation, safety, fraud-prevention, and quality-assurance signals;
• Any other personal information included in a recording or submission, including names, voices, statements, opinions, emotions, background sounds, or information about other people.

We may use Tiny Stage voice recordings and submitted content to:

• Provide, operate, personalize, improve, and develop Tiny Stage and our other services;
• Enable gameplay, battles, ratings, leaderboards, rewards, incentives, and social or interactive features;
• Review, moderate, score, categorize, transcribe, translate, annotate, label, or quality-check submissions;
• Detect spam, bots, fraud, duplicate submissions, abusive behavior, policy violations, or low-quality submissions;
• Create, curate, package, format, maintain, improve, and commercialize datasets;
• Sell, share, disclose, license, sublicense, distribute, or otherwise make recordings, submissions, transcripts, annotations, labels, metadata, datasets, or derived data available to third-party clients;
• Support third-party client uses, including artificial intelligence training, machine learning, model evaluation, benchmarking, product development, speech recognition, speech synthesis, voice technology, transcription, moderation, safety, analytics, research, and related commercial purposes;
• Train, fine-tune, evaluate, test, improve, and develop Luvu’s own models, systems, products, and services;
• Enforce our Terms of Service, contributor terms, promotion rules, acceptable use policies, and other agreements;
• Comply with law and protect the rights, safety, security, and integrity of Luvu, our users, third-party clients, and others.

Commercial Use and Third-Party Client Licensing of Voice Recordings

Luvu may sell, share, disclose, license, sublicense, provide access to, transfer, or otherwise make available Tiny Stage voice recordings, submitted content, associated metadata, transcripts, annotations, labels, quality scores, or derived datasets to third-party clients. These third-party clients may include artificial intelligence companies, research organizations, technology companies, speech technology providers, model developers, data platforms, product developers, and other commercial or institutional clients.

Third-party clients may use the information we provide for purposes that may include:

• Training, fine-tuning, evaluating, testing, validating, benchmarking, or improving AI or machine learning models;
• Developing or improving speech recognition, speech-to-text, text-to-speech, voice generation, voice conversion, voice analysis, audio understanding, conversational AI, moderation, safety, accessibility, education, gaming, or entertainment technologies;
• Product development, research, analytics, quality assurance, model safety, model alignment, and model evaluation;
• Other purposes permitted by our agreements with those clients.

We may impose contractual restrictions on third-party clients, including restrictions on unauthorized redistribution, misuse, or unlawful processing of recordings and related data. However, once recordings, submitted content, or related information have been provided to third-party clients, Luvu may not be able to retrieve, delete, remove, audit, or control all copies, derivative uses, trained model effects, outputs, backups, logs, or internal records, except where required by law or contract.

Rewards, Incentives, and Payment-Related Information

Some users may have the opportunity to receive in-app rewards, credits, coins, prizes, promotional incentives, gift cards, cash-like rewards, cash-equivalent rewards, or other benefits. We may collect information necessary to administer those programs, including:

• Reward eligibility information;
• Fraud-prevention and abuse-prevention information;
• Payment or payout account information, where applicable;
• Tax information, where required;
• Mailing address or shipping information, where needed to deliver a prize or reward;
• Transaction history and reward redemption history.

We may use third-party providers to process payments, payouts, rewards, gift cards, tax forms, identity verification, fraud checks, or related transactions. Those providers may process your personal information according to their own privacy notices and terms.

Rewards are not guaranteed unless expressly stated in applicable program terms. Participation in Tiny Stage does not create an employment, contractor, agency, partnership, or marketplace seller relationship with Luvu unless expressly agreed in a separate written agreement.

Communications, Feedback, and Support Information

We may collect information when you contact us, submit feedback, participate in surveys, communicate with customer support, report content, or otherwise interact with us, including:

• Message contents;
• Email address, phone number, social handles, and other contact details;
• Support requests, bug reports, screenshots, logs, and related information;
• Survey responses, feedback, ratings, and research responses.

We use this information to respond to you, provide support, investigate issues, improve our products and services, enforce our policies, and maintain records of our communications.

Usage, Device, and Online Activity Information

We and our service providers may automatically collect information about how you access and use our services, including through cookies, pixels, SDKs, APIs, local storage, device identifiers, logs, and similar technologies. This information may include:

• Device type, operating system, browser type, app version, mobile carrier, language, time zone, device settings, and device identifiers;
• IP address, approximate location derived from IP address, network information, and internet service provider;
• Pages, screens, features, prompts, recordings, battles, content, buttons, links, ads, and messages you view or interact with;
• Session length, crash logs, diagnostic data, performance data, referral URLs, attribution data, install source, and marketing campaign information;
• Push notification tokens and notification interaction data;
• Information about purchases, subscriptions, rewards, redemptions, and transactions;
• Information used to recognize you across devices or sessions, where permitted by law.

We use this information to provide, secure, personalize, analyze, improve, and market our services; understand user behavior; measure advertising and marketing performance; prevent fraud; debug and improve app performance; and support attribution, analytics, and product development.

Information From Other Sources

We may receive personal information from other sources, including:

• Other users who interact with you, rate your submissions, report content, invite you, or submit content that includes information about you;
• Social platforms, app stores, analytics providers, advertising partners, attribution providers, fraud-prevention providers, and payment or reward providers;
• Publicly available sources;
• Business partners, vendors, affiliates, service providers, and third-party clients;
• Corporate transactions, such as mergers, acquisitions, financings, reorganizations, or asset sales.

Sensitive Personal Information and Biometric Information

Voice recordings may reveal sensitive personal information, including information about a person’s voice, language, accent, emotions, age range, background environment, health, identity, or other characteristics. Recordings may also contain information that you or others choose to say during a performance.

We do not want users to submit recordings containing sensitive personal information unless specifically requested by the applicable prompt or feature and permitted by our policies. You should not submit personal information about another person without their permission.

Some laws treat certain biometric information as sensitive or subject to special rules. Depending on how our systems are configured, we may process voice characteristics, speaker features, audio embeddings, or similar technical signals for purposes such as quality assurance, duplicate detection, fraud prevention, moderation, speaker separation, identity verification, personalization, safety, or dataset preparation. If and where required by applicable law, we will provide additional notice and obtain any required consent before collecting or processing biometric identifiers or biometric information, such as voiceprints.

Unless expressly stated in a separate consent or policy, we do not use Tiny Stage voice recordings to authenticate your identity through a biometric voiceprint. If we introduce features that use biometric identifiers or biometric information in a way that requires additional notice or consent, we will provide that notice and obtain consent where required.

How We Disclose Personal Information

We may disclose personal information in the following ways:

Third-Party Clients and Business Customers

We may disclose, sell, share, license, sublicense, provide access to, transfer, or otherwise make available Tiny Stage voice recordings, submitted content, transcripts, annotations, labels, metadata, quality scores, datasets, or derived data to third-party clients and business customers for the purposes described in this Privacy Notice.

Depending on applicable law, this may be considered a “sale” or “sharing” of personal information, even if our agreements are structured as a license, sublicense, data access agreement, dataset transaction, or other commercial arrangement.

Service Providers and Contractors

We may disclose personal information to service providers, contractors, vendors, and other third parties that perform services on our behalf, such as hosting, storage, analytics, moderation, transcription, translation, annotation, quality assurance, customer support, payment processing, reward fulfillment, tax compliance, identity verification, security, fraud prevention, marketing, advertising, attribution, app analytics, communications, and legal or accounting services.

Advertising, Analytics, and Marketing Partners

We may disclose personal information to advertising, analytics, attribution, measurement, and marketing partners. These partners may collect information through cookies, pixels, SDKs, APIs, device identifiers, and similar technologies to help us measure marketing performance, attribute installs and conversions, deliver ads, personalize content, conduct analytics, and improve our services.

Depending on your location and applicable law, these disclosures may constitute “sharing” for cross-context behavioral advertising or “targeted advertising.”

Other Users and Public Features

If you use social, competitive, interactive, leaderboard, battle, profile, commenting, voting, or sharing features, some information may be visible to other users or the public, depending on your settings and the feature. This may include your username, display name, avatar, profile information, recordings, performances, rankings, ratings, votes, comments, scores, wins, losses, badges, rewards, or other gameplay information.

Do not submit or post information that you do not want other users or the public to see.

Business Transactions

We may disclose, transfer, or assign personal information in connection with an actual or potential merger, acquisition, financing, investment, reorganization, bankruptcy, receivership, sale of assets, corporate transaction, or similar event.

Legal, Safety, and Compliance Purposes

We may disclose personal information to law enforcement, regulators, courts, legal advisors, or other parties when we believe disclosure is necessary or appropriate to:

• Comply with law, legal process, subpoenas, court orders, or government requests;
• Protect the rights, property, safety, or security of Luvu, our users, third-party clients, or others;
• Enforce our Terms of Service, policies, agreements, or rights;
• Detect, prevent, investigate, or respond to fraud, abuse, security incidents, harmful conduct, illegal activity, or policy violations;
• Resolve disputes, collect amounts owed, or defend legal claims.

With Your Consent or Direction

We may disclose personal information with your consent, at your direction, or as otherwise disclosed to you at the time of collection.

Your Choices

Account and Profile Choices

You may be able to access, update, or delete certain account or profile information through your account settings. Some information may not be editable through the app and may require contacting us.

Voice Recording Submission Choices

You can choose not to submit voice recordings or other content through Tiny Stage. If you do not submit recordings, some features may not be available to you.

If you submit a recording, Luvu may process, use, disclose, sell, share, license, sublicense, or otherwise commercialize that recording and related information as described in this Privacy Notice, our Terms of Service, and any applicable consent or submission flow.

Withdrawal of Consent and Deletion Requests

Where we rely on consent to process personal information, you may withdraw that consent as permitted by law. However, withdrawing consent may not affect processing that occurred before withdrawal, processing based on other legal grounds, or information already disclosed, sold, shared, licensed, sublicensed, provided to, or used by third-party clients, except where required by law or contract.

We may be unable to delete or retrieve recordings or related data that have already been provided to third-party clients, incorporated into datasets, used for model training or evaluation, stored in backups, reflected in logs, or otherwise processed in ways that cannot reasonably be reversed. We will honor deletion, access, correction, opt-out, and other privacy requests where required by applicable law.

Communications Preferences

You may opt out of promotional emails by using the unsubscribe link in those emails. You may opt out of promotional text messages by following the instructions provided in the message. You may adjust push notification settings through your device settings or app settings. You may still receive service-related, transactional, security, legal, or account communications.

Cookies, SDKs, and Similar Technologies

We may use cookies, pixels, SDKs, APIs, local storage, and similar technologies for authentication, security, analytics, personalization, advertising, attribution, and performance measurement.

Where required, we provide choices for certain cookies or similar technologies. You may also be able to adjust your browser or device settings to limit certain tracking technologies. These settings may affect the functionality of our services.

Global Privacy Control and Opt-Out Signals

Where required by applicable law, we honor legally recognized opt-out preference signals, such as Global Privacy Control, for applicable opt-outs. Because some opt-out signals are browser- or device-specific, you may need to enable them on each browser or device you use.

Children’s Privacy

Our services, including Tiny Stage, are not directed to children under 18, and we do not knowingly collect personal information from individuals under 18. If you are under 18, you may not use Tiny Stage or submit voice recordings or other content to us.

If we learn that we have collected personal information from an individual under 18, we will take steps to delete that information as required by law. Parents or guardians who believe that a child has provided us personal information may contact us using the information in the “Contact Us” section below.

Security

We use administrative, technical, and physical safeguards designed to protect personal information. These safeguards may include encryption in transit, encryption at rest, access controls, authentication controls, least-privilege access, monitoring, secure storage, content validation, security review, and administrative safeguards.

No method of transmission, storage, or processing is completely secure. We cannot guarantee that personal information will be secure in all circumstances.

Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Notice, including to provide and improve our services, operate Tiny Stage, administer accounts and rewards, maintain datasets, support third-party client licensing, comply with legal obligations, resolve disputes, enforce agreements, protect safety and security, and maintain business records.

Voice recordings, submitted content, transcripts, annotations, labels, metadata, datasets, and related records may be retained for extended periods where reasonably necessary for commercial licensing, dataset integrity, legal compliance, fraud prevention, quality assurance, auditability, client obligations, backup, dispute resolution, or other legitimate business purposes.

When retention is no longer reasonably necessary, we may delete, deidentify, aggregate, or otherwise process information in accordance with applicable law.

Third-Party Websites, Platforms, and Services

Our services may contain links to third-party websites, platforms, app stores, payment providers, reward providers, social networks, or other services. This Privacy Notice does not apply to the privacy practices of third parties. We encourage you to review their privacy notices and terms.

International Transfers

We are based in the United States and may process, store, access, and transfer personal information in the United States and other countries. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we update it, we will revise the “Last Updated” date above. If we make material changes, we may provide notice through the services, by email, or by other appropriate means. Unless otherwise stated, the updated Privacy Notice will be effective when posted.

Contact Us

If you have questions or requests about this Privacy Notice or our privacy practices, you may contact us at:

Luvu, Inc.
114 South Negley Ave, Apt 1A
Pittsburgh, PA 15206
Email: support@luvufit.com

Additional U.S. State Privacy Disclosures

These disclosures supplement the Privacy Notice above and apply to residents of U.S. states with comprehensive consumer privacy laws, such as California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states as applicable.

Categories of Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

• Identifiers, such as name, username, email address, phone number, account ID, device identifiers, IP address, and online identifiers;
• Customer records, such as account information, transaction history, reward history, and payment or payout-related information;
• Protected classification characteristics, such as age or other information you provide or that may be revealed in submitted content;
• Commercial information, such as purchases, subscriptions, rewards, redemptions, and product usage;
• Internet or other electronic network activity information, such as app activity, device information, log data, interactions with content, and usage analytics;
• Geolocation information, such as approximate location derived from IP address;
• Audio, electronic, visual, or similar information, such as voice recordings, audio files, performances, and submitted content;
• Biometric information, if we process voiceprints or other biometric identifiers or biometric information in a manner covered by applicable law;
• Inferences, such as preferences, interests, gameplay patterns, quality scores, fraud signals, and content labels;
• Sensitive personal information, such as account credentials, precise geolocation if collected, biometric information if collected, and sensitive information that may be included in user-submitted recordings or content.

Sources of Personal Information

We may collect personal information from you, your device, your use of our services, other users, service providers, advertising and analytics partners, payment and reward providers, fraud-prevention providers, app stores, social platforms, public sources, business partners, and third-party clients.

Purposes for Collecting, Using, and Disclosing Personal Information

We collect, use, and disclose personal information for the purposes described in the Privacy Notice above, including to provide our services, operate Tiny Stage, process submissions, administer accounts and rewards, commercialize submitted content, license data to third-party clients, conduct analytics, train and improve models, personalize services, market our services, prevent fraud and abuse, comply with law, and protect rights and safety.

Categories of Personal Information Sold, Shared, or Used for Targeted Advertising

Depending on applicable law, we may “sell” or “share” the following categories of personal information:

• Voice recordings, submitted content, transcripts, annotations, labels, metadata, datasets, and related information disclosed, sold, shared, licensed, sublicensed, provided, or made available to third-party clients and business customers;
• Identifiers and internet or network activity information, such as IP address, device identifiers, online identifiers, hashed email address, account ID, advertising identifiers, app activity, and analytics or attribution data, disclosed to advertising, analytics, attribution, and marketing partners;
• Inferences and usage data used for advertising, analytics, personalization, or marketing, where applicable.

We do not knowingly sell or share personal information of individuals under 16.

Sensitive Personal Information

We may collect sensitive personal information as described above. We use sensitive personal information for purposes permitted by applicable law, including to provide requested services, process submissions, maintain security, prevent fraud, administer accounts and rewards, comply with law, and as otherwise permitted with consent or where legally allowed.

We do not use sensitive personal information to infer characteristics about you except as permitted by law or with appropriate notice and consent where required.

Deidentified Information

We may create or process deidentified, aggregated, or anonymized information. Where we maintain deidentified information, we will maintain and use it in deidentified form and will not attempt to reidentify it except as permitted by law.

Automated Decision-Making and Profiling

We may use automated systems for quality assurance, moderation, fraud prevention, duplicate detection, submission scoring, reward eligibility, content labeling, and safety. If applicable law provides a right to opt out of or obtain information about automated decision-making or profiling, you may contact us to exercise that right.

Your U.S. Privacy Rights

Depending on your state of residence and subject to legal limitations, you may have some or all of the following rights:

• Right to Know or Confirm Processing: to know whether we process personal information about you and to receive information about our processing;
• Right to Access and Portability: to access and obtain a copy of personal information we maintain about you;
• Right to Correction: to correct inaccurate personal information;
• Right to Deletion: to request deletion of personal information we maintain about you;
• Right to Opt Out of Sales: to opt out of the sale of personal information;
• Right to Opt Out of Sharing or Targeted Advertising: to opt out of sharing for cross-context behavioral advertising or targeted advertising;
• Right to Limit or Control Sensitive Personal Information: to limit or control certain uses of sensitive personal information where required by law;
• Right to Opt Out of Certain Profiling or Automated Decision-Making: where required by law;
• Right to Non-Discrimination: to not receive discriminatory treatment for exercising privacy rights.

Some rights may be limited where honoring the request would conflict with legal obligations, fraud-prevention needs, security needs, contractual obligations, completed transactions, third-party client licensing, free speech rights, or other exceptions under applicable law.

How to Submit a Privacy Rights Request

You may submit a privacy rights request, including a request to opt out of the sale or sharing of your personal information or of targeted advertising, by emailing support@luvufit.com. Where we are required to honor a legally recognized opt-out preference signal, such as Global Privacy Control, we will do so.

We may need to verify your identity before fulfilling certain requests. We may ask for information such as your name, email address, account information, state of residence, or other information reasonably necessary to verify your request. We may deny or limit requests where we cannot verify your identity, cannot locate your information, or where an exception applies.

Authorized Agents

Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and may also require you to verify your identity directly with us.

Appeals

Depending on your state of residence, you may have the right to appeal our decision regarding your privacy request. You may submit an appeal by replying to our decision or by emailing support@luvufit.com with the subject line “Privacy Appeal.”

Additional California Privacy Disclosures

This section applies to California residents.

California Categories of Personal Information

For purposes of California law, we may collect the following categories of personal information:

• Identifiers;
• Customer records information;
• Protected classification characteristics;
• Commercial information;
• Internet or other electronic network activity information;
• Geolocation information;
• Audio, electronic, visual, or similar information;
• Biometric information, where applicable;
• Inferences;
• Sensitive personal information.

We collect, use, retain, disclose, sell, and share these categories for the purposes described in this Privacy Notice.

Notice of Sale or Sharing

We may sell or share personal information as described in this Privacy Notice, including by licensing or otherwise making available Tiny Stage voice recordings, submitted content, transcripts, annotations, labels, metadata, datasets, or related information to third-party clients, and by disclosing identifiers, device data, online activity, or similar information to advertising, analytics, attribution, and marketing partners.

You may opt out of sales or sharing by emailing support@luvufit.com or by enabling a legally recognized opt-out preference signal such as Global Privacy Control.

Shine the Light

California Civil Code Section 1798.83 permits California residents with an established business relationship with us to request certain information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact us at support@luvufit.com.

Additional EEA, UK, and Swiss Privacy Disclosures

This section applies to individuals located in the European Economic Area, United Kingdom, and Switzerland.

Controller

Luvu, Inc. is the controller responsible for the processing of personal data described in this Privacy Notice, unless otherwise stated.

Contact: support@luvufit.com
Address: 114 South Negley Ave, Apt 1A, Pittsburgh, PA 15206, United States

Legal Bases for Processing

We process personal data under the following legal bases, as applicable:

• Contract: where processing is necessary to provide services, operate your account, administer rewards, or perform our Terms of Service;
• Consent: where you consent to recording submission, marketing communications, biometric processing where required, or other specific processing activities;
• Legitimate Interests: where processing is necessary for our legitimate interests, such as operating, improving, securing, analyzing, marketing, and developing our services, preventing fraud, and commercializing submitted content, provided those interests are not overridden by your rights and interests;
• Legal Obligation: where processing is necessary to comply with legal, tax, accounting, regulatory, or law enforcement obligations;
• Vital Interests or Public Interest: where applicable and permitted by law.

Where we process special categories of personal data, we do so with explicit consent, because the information has been manifestly made public by you, for legal claims, for substantial public interest reasons, or under another lawful basis permitted by applicable law.

International Transfers

We may transfer personal data outside the EEA, UK, or Switzerland, including to the United States. Where required, we rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, or other recognized transfer mechanisms.

EEA, UK, and Swiss Rights

Subject to legal limitations, you may have the right to:

• Access your personal data;
• Correct inaccurate or incomplete personal data;
• Delete personal data;
• Restrict processing;
• Object to processing based on legitimate interests;
• Withdraw consent;
• Receive a portable copy of personal data;
• Object to direct marketing;
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at support@luvufit.com.

Complaints

You may lodge a complaint with your local data protection authority. We would appreciate the opportunity to address your concerns first, so you may also contact us at support@luvufit.com.