1. Who We Are
Luna Couple Connect ("we", "our", "us") is a social application operated by Kangavena. The app lets couples and single users connect — sharing location, messages, photos, expenses, and more in a private, encrypted space. Single users can also discover and connect with other single users through our pairing feature.
Developer: Kangavena (Asanka Maduranga)
Contact: [email protected]
Website: couple.kangavena.com
🤝 How pairing works: Both users must install the app and create their own account. Pairing requires mutual consent — one user sends a code or pairing request, the other accepts. Either user can unlink at any time. This is NOT a one-sided tracking app.
2. Age Requirement
You must be at least 13 years old to use Luna Couple Connect. The "I'm Single" discovery and pairing features are restricted to users 18 years and older. We do not knowingly collect data from children under 13.
🔞 Dating/Discovery features: The "I'm Single" mode allows users to discover other single users and send pairing requests. This feature is age-restricted to users 18+. Users must confirm they are 18+ before enabling discovery mode.
3. Information We Collect
3.1 When You Sign Up
- Username — your display name (restricted names like "admin" are blocked)
- Email address — used for login and account recovery
- Password — stored as a bcrypt hash (we never see your actual password)
- Nickname — shown to your partner and other users
- @Handle — optional unique identifier (minimum 3 characters)
- Gender — used for theme color (pink for female, blue for male)
- Birthday — optional, shown to partner, used for birthday wishes from Luna AI
3.2 Profile Information
- Avatar image — your profile picture
- Cover photo — optional profile background
- Bio — optional text about yourself
- Mood status — your current mood (happy, cozy, sweet, miss you, sad)
- Looking for — what you're seeking (e.g., "partner") — only visible to single users in discovery
- Profile view count — how many times other users viewed your profile
- Points — activity points earned from using the app
3.3 Location Data
When you enable location sharing with your partner:
- Precise GPS coordinates (latitude, longitude) — fine location
- Background location — collected even when the app is closed or not in use, so your partner can see your real-time position on the map
- Battery level and charging status — shown to your partner
- Location history — stored so you can view daily routes (buffered locally, synced to server)
- Geofence data — named locations (home, work) with arrival/departure alerts you configure
📍 How location is used:
- Your GPS coordinates are shared only with your paired partner
- Location payloads are end-to-end encrypted before leaving your device
- When you view the map, two coordinates (yours + partner's) are sent to OSRM (open-source routing engine) to calculate driving distance. OSRM processes the request ephemerally and does not store your location.
- Location is also sent via real-time socket for instant map updates
To stop sharing: Settings → Unlink Partner, or revoke location permission in your device settings. You can also use Ghost Mode to temporarily hide your location, or set location precision to "approximate".
3.4 Messages & Media
- Chat messages — text, images, and media sent to your partner (end-to-end encrypted)
- Direct messages (DMs) — messages sent to friends on the platform
- Love letters — private messages between partners
- Uploaded photos and videos — images you share in chat, albums, feed posts, or stories
- Stories — temporary content you post (viewed by partner/friends)
- Voice messages — audio recordings shared in chat
🔐 End-to-End Encryption (E2EE):
- Partner messages are end-to-end encrypted — encrypted on your device before sending
- Only you and your partner have the keys to decrypt them
- We (the server) cannot read your messages — we only store encrypted ciphertext
- Location data sent to your partner is also E2EE encrypted
- Media files shared with your partner are E2EE encrypted
Note: Direct messages with friends are NOT end-to-end encrypted — they are encrypted in transit (HTTPS) but stored on our servers in readable form.
3.5 Relationship Features
These features store data shared between you and your partner:
| Feature | What We Store |
|---|
| 💰 Expenses | Amounts, descriptions, categories you log together |
| 🎯 Milestones | Relationship milestones you add (anniversaries, firsts) |
| 📅 Calendar | Events you add to your shared calendar |
| 📸 Shared Albums | Albums and photos you upload together |
| 📝 Daily Check-in | Your mood, optional note (once per day) |
| 💌 Love Letters | Private letters between partners |
| 🎮 Couple Games | Quiz answers and scores |
| 🗺️ Bucket List | Places and goals you want to do together |
| ⭐ Goals | Shared relationship goals and progress |
| 💝 Wishlist | Items you want to gift each other |
| 📍 Geofences | Named locations (home, work) with arrival/departure alerts |
| 📰 Feed Posts | Posts, comments, reactions on the social feed |
| 🔔 Nudges | Heartbeat nudges sent to your partner |
3.6 Discovery & Social Features
- "I'm Single" mode — opt-in discovery mode that makes your profile visible to other single users (age 18+ only)
- Pairing requests — send, accept, or decline requests to connect with other single users
- Friend system — add and manage friends on the platform
- User search — search for users by username or handle
- Profile views — we track how many times your profile is viewed by others
- Online status & last seen — your online/offline status and last active time may be visible to other users
- Content reports — you can report other users or posts; we store the report reason and context
3.7 Security & Authentication Data
- Login history — IP address, device info, login timestamps, success/failure status
- Active sessions — device info, IP address, last active time for each logged-in session
- Two-Factor Authentication (2FA) — TOTP secrets if you enable 2FA
- Password reset tokens — temporary tokens for password recovery (expire in 15 minutes)
- E2EE key pairs — your public/private encryption keys (private key stays on your device)
3.8 Device Information
- Device model and OS version
- IP address — used for security, session management, and approximate location
- Battery level and charging status — shared with your partner
3.9 Luna AI (AI Assistant)
Luna is an AI chatbot built into the app for relationship advice and casual conversation.
⚠️ Important — Third-Party AI Processing:
- Your Luna AI messages are sent to Google's Gemini API for processing
- Google processes these messages to generate AI responses
- Luna AI conversations are stored on our servers for chat history
- Your Luna usage (messages sent, tokens used) is tracked for rate limiting
- Luna AI has access to your name, nickname, birthday, gender, mood, and partner info to personalize responses
- Do not share sensitive personal information (passwords, financial details, government IDs) with Luna AI
Luna AI conversations are subject to Google's Privacy Policy.
3.10 Content Moderation
- AI moderation — feed posts are automatically checked by Google's Gemini API for harmful content before publishing
- User reports — you can report other users or content; reports are reviewed by our team
- Report data — when you report content, we store the reported content, your reason, and timestamp
3.11 Crash Reports
If the app crashes, we collect:
- Stack trace (technical error details)
- Device model and OS version
- App version
Crash reports do not include your personal data, messages, or location. They are stored on our server for up to 30 days.
3.12 Analytics
We collect basic, first-party analytics (no third-party analytics SDKs):
- Login/logout logs — IP address, device info, session duration
- Page views — which screens you visit and actions you take
- System emails — registration confirmation, password reset (logged for troubleshooting)
4. How We Use Your Information
| Purpose | Data Used |
|---|
| Core app features | Account info, location, messages, relationship data |
| Partner communication | Messages, calls, location sharing (mutual consent) |
| Discovery & pairing | Profile info, single status, looking for (18+ only) |
| Social features | Feed posts, comments, reactions, friend connections |
| Security & fraud prevention | IP, device info, login history, 2FA, session tokens |
| Content moderation | Feed posts (sent to Google Gemini for AI moderation) |
| AI assistant | Luna AI messages (sent to Google Gemini for processing) |
| Map features | Coordinates sent to OSRM for distance calculation |
| App improvement | Crash reports, usage patterns (first-party only) |
| Birthday features | Birthday used for AI-generated birthday wishes |
We do NOT:
- ❌ Sell your data to anyone
- ❌ Show you advertisements
- ❌ Share your data with advertisers or data brokers
- ❌ Track you for marketing purposes
- ❌ Use third-party analytics SDKs (no Google Analytics, Facebook SDK, Firebase, etc.)
- ❌ Use advertising SDKs (no AdMob, no ad networks)
- ❌ Collect data from other apps on your device
5. Who We Share Data With
| Recipient | What's Shared | Why |
|---|
| Your Partner | Location, battery, messages, photos, all relationship data | Core app functionality — mutual consent |
| Your Friends | Profile info, DMs, feed posts, online status | Social features you opt into |
| Google Gemini API | Luna AI messages + your name/birthday/mood for personalization; Feed posts for content moderation | AI chatbot and content moderation |
| OSRM | Two coordinates (you + partner) when you view the map | Driving distance calculation (ephemeral, not stored) |
| Cloudflare | All network traffic passes through Cloudflare | CDN, DDoS protection, SSL/TLS encryption |
| Legal authorities | Only if legally required (court order, government request) | Legal compliance |
We do not share data with service providers for their own purposes. All third-party processing is strictly for the functionality described above.
6. Data Security
- End-to-End Encryption (E2EE) — partner messages, location payloads, and media are encrypted so only you and your partner can read them
- Audio/Video calls — peer-to-peer via WebRTC, not routed through our servers
- Password hashing — bcrypt with 10 rounds (industry standard)
- HTTPS/TLS — all data in transit is encrypted
- No cleartext traffic — the app refuses unencrypted HTTP connections
- JWT tokens — 30-day expiry, stored in encrypted shared preferences (Android Keystore-backed)
- Session management — view and revoke active sessions from Settings → Security
- Two-Factor Authentication — optional TOTP-based 2FA available
- Forgot password — uses 6-digit reset code (not clickable links) for mobile safety
7. Your Rights & Controls
7.1 In-App Controls
- Stop location sharing — Unlink partner or revoke location permission
- Ghost Mode — temporarily hide your location from your partner
- Location precision — choose between precise and approximate location
- Delete individual data — delete messages, expenses, milestones, calendar events, posts, albums, love letters, bucket list items, goals, wishlist items, geofences, and more from within the app
- Export your data — Settings → Security → Export (downloads all your data as JSON)
- Revoke sessions — Settings → Security → view and revoke active login sessions
- Disable "I'm Single" mode — turn off discovery at any time from Settings
- Block users — block other users to prevent them from contacting you
- Report users/content — report inappropriate behavior or content
7.2 Account Deletion
You can permanently delete your account and all associated data:
What gets permanently deleted:
- All messages and media (including E2EE encrypted content)
- Location history and geofence data
- Expenses, milestones, and calendar events
- Feed posts, comments, reactions, and stories
- Bucket list, goals, and wishlist items
- Love letters and daily check-ins
- Shared albums and photos
- Luna AI conversation history
- Quiz responses and game data
- Direct messages (sent and received)
- Friend connections and blocked users
- Pairing requests (sent and received)
- Login history and active sessions
- Analytics data
- Your profile, encryption keys, and account
- Your partner will be automatically unlinked and notified
This action is immediate and cannot be undone.
8. Data Retention
- Active account: Data is retained as long as your account exists
- After deletion: All data is permanently deleted immediately. No grace period.
- Crash reports: Stored on our server for up to 30 days, then auto-deleted
- System emails: Registration and password reset email logs retained for 90 days
- Location buffer: Location data is buffered locally on your device and synced to server when network is available; deleted from server on account deletion
9. Children's Privacy
Luna Couple Connect is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will delete the account immediately.
The "I'm Single" discovery and pairing features are restricted to users 18 years and older.
10. Third-Party Services
| Service | Purpose | Data Sent | Their Policy |
|---|
| Google Gemini API | Luna AI chatbot responses + Feed post content moderation | Your Luna AI messages, your name/birthday/mood for personalization; Feed post text/images for moderation | Google Privacy Policy |
| Google Maps SDK | Map display in app | Map tile requests (no personal data) | Google Privacy Policy |
| OSRM | Driving distance calculation | Two coordinates (you + partner) — ephemeral, not stored | Open-source, no data retention |
| Cloudflare | CDN, DDoS protection, SSL/TLS | All network traffic (encrypted) | Cloudflare Privacy Policy |
| Socket.io | Real-time messaging and location | Messages, location, calls, typing indicators | Hosted on our servers in France |
| WebRTC | Audio/video calls | Call streams (peer-to-peer, not routed through servers) | Direct P2P connection |
No advertising SDKs. We do not integrate any advertising networks, tracking pixels, analytics SDKs (Firebase, Google Analytics, Mixpanel, etc.), or data collection SDKs. The app has zero ads.
11. International Data Transfers
Our servers are located in France (hosted by Contabo). If you access the app from outside France, your data will be transferred to and processed in France. By using the app, you consent to this transfer.
Google Gemini API processes data according to Google's Privacy Policy and may process data in Google's global data centers.
12. Legal Basis for Processing
We process your data based on:
- Consent — when you enable location sharing, create an account, or use Luna AI
- Contractual necessity — to provide the app's core features you signed up for
- Legitimate interest — for security, fraud prevention, and app improvement
- Legal obligation — when required by law (court orders, government requests)
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do:
- We will update the "Last updated" date at the top
- Significant changes will be communicated via in-app notification
- Continued use of the app after changes means you accept the updated policy
14. Subscriptions & Billing
14.1 Free Trial
- New users receive a 14-day free trial of all premium features
- One trial per device — we track device identifiers and IP addresses to prevent abuse
- After the trial ends, a subscription is required to continue using the app
14.2 Subscription
- Price: LKR 100 per month (billed through Google Play)
- Auto-renewal: Your subscription renews automatically each month until cancelled
- Payment: Processed securely by Google Play — we never see your payment details
14.3 Cancellation
- You can cancel your subscription at any time from Google Play Store → Subscriptions
- After cancellation, you retain access until the end of your current billing period
- No partial refunds for unused time in the current billing period
14.4 Refund Policy
No refunds once a subscription payment has been processed. By subscribing, you acknowledge and agree that:
- All subscription payments are final and non-refundable
- You will not receive a refund or credit for any partial subscription period
- You can cancel at any time to prevent future charges
- Exception: Refund requests due to technical issues preventing app use may be reviewed on a case-by-case basis — contact us at [email protected]
For Google Play refund requests, visit Google Play Support.
14.5 Fraud Prevention
To prevent trial abuse, we collect and store:
- Device identifier (Android ID) — linked to trial usage, not to your personal identity
- IP address — used only to detect duplicate trial attempts
This data is used solely for fraud prevention and is deleted when your account is deleted.
15. Contact Us
For questions, concerns, data access requests, or privacy-related inquiries: