Liggo Privacy Policy

1. Who processes your data

VIRAL APPS SL, tax ID B26681262, registered at Calle de Diego de León 28, 28006 Madrid, Spain (“Liggo”, “we”). For any privacy matter: contacta@liggo.love. We are subject to the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Data Protection (LOPDGDD) and Spanish Law 34/2002 on Information Society Services (LSSI).

2. What data we process

• The screenshots you upload to Analyze, and any text or description you add. They include what can be seen in them: the messages, the other person's name and photo, and whatever the conversation says about you both. They may reveal sensitive data, such as your sex life or sexual orientation.
• The replies Liggo generates for you.
• What you write in Practice and your game scores.
• Your answers to the initial questionnaire: your gender, the gender of the people you talk to, your goals and your experience. Together they may reveal your sexual orientation.
• What you write to us: in “Feedback”, in the reason for cancelling, or by email.
• Device identifiers: the identifier the app uses to recognise your phone (on Android, the one the system gives each app; on iPhone, the identifier for vendor); on Android, Google's advertising ID, unless you have reset or deleted it; and the install identifiers of our measurement tools (Postback and, on Android, Appstack). On iPhone we do not read the advertising identifier (IDFA).
• Usage and technical data: which features you use and when, errors and crashes, app version, phone model, operating system, language, time zone, country and IP address.
• Attribution data: which campaign or ad brought you to Liggo. On Android, the Google Play install referrer and the IP address and technical device data used to find out. On iPhone, only Apple Ads' attribution signal (AdServices), which does not identify your device.
• Purchases: which subscription you have, when it started, renewals, cancellations and refunds. Payments are handled by Apple, Google or Stripe: we never see your card.
• On the website, if you have an account: your email and, if you sign in with Google, your name and profile picture.

The app does not ask you to create an account, nor for access to your contacts, location, camera or microphone. It only uses the photos you choose.

3. Why we use it and on what legal basis

We do not sell your data. We do not use your screenshots, replies or conversations for advertising or to train artificial intelligence models.

4. Measurement and attribution in the app, and how to object

To learn which parts of the app work and which campaigns bring people who stay, the app measures its use and the install:

• PostHog: which features you use, the paywalls you see, your purchases and which version of an A/B test you are in, linked to your device identifier. It does not record your screen.
• Postback, an attribution tool we host ourselves on servers in the European Union and on Cloudflare's global network: your sessions, your purchases and which ad brought you. On Android it uses the install referrer, your IP address and the device model and technical data to find out. On iPhone it uses only Apple Ads' attribution signal: it does not collect technical device data to identify it, nor the advertising identifier.
• Appstack, Android only: which campaign brought you, using the Google Play install referrer and the advertising ID.
• In addition, the campaign you came from and the install identifiers are stored with your subscription in RevenueCat, and the campaign in Superwall.

We do not match this data with advertising networks (TikTok, Meta, Google or others) and we do not track you across other companies' apps or websites. That is why, on iPhone, the app does not show Apple's “Allow tracking” prompt.

We do this on the basis of our legitimate interest in improving Liggo and spending wisely on advertising, without using the content of your screenshots or conversations. The app does not ask for your permission for this.

You can object at any time, without giving reasons. Write “I object to measurement” in the app, under Settings → “Feedback” (it reaches us with your device identifier, which is what we need to find you), or email contacta@liggo.love with your subscription order number if you have one. We will stop using your data for these purposes and delete what we hold within one month at the latest. On Android, you can also reset or delete your advertising ID in your phone settings (Privacy → Ads). Liggo works just the same.

5. The other person in your screenshots

Your screenshots include messages from another person, who may not use Liggo. We use them only to give you the result: we show them to no one, we do not keep their text and the image is deleted after 24 hours. By uploading a screenshot, you confirm that you may share that content with us for this purpose.

6. Who we share data with

Only with providers that work for us, under contract and following our instructions:

• Supabase — database, files and website accounts · EU (Sweden)
• Cloudflare — servers and network · EU and global network
• Datalix — website and API servers (the main one and the failover one) · EU (Germany)
• Gcore — CDN and DNS for liggo.love · EU and global network
• OpenRouter, which passes it on to Google (Gemini, Gemma) and Anthropic (Claude) and to other providers of the Practice models — analyzing screenshots, generating replies and Practice · USA
• RevenueCat — subscriptions · USA
• Superwall — paywalls and initial questionnaire · USA
• PostHog — usage statistics and A/B tests · USA
• Sentry — crashes · EU (Germany)
• Appstack (Android only) — install attribution
• Postback (hosted by us on Supabase and Cloudflare) — install attribution · EU and Cloudflare's global network
• Discord — receiving what you write in “Feedback”, with your device identifier · USA
• Apple, Google and Stripe — payments
• Datafast and Google Ads (website only, if you accept cookies) — measurement and ads

Our AI providers do not use your content to train their models. When data leaves the European Economic Area, the transfer relies on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

We may also disclose data where the law requires it. If Liggo were sold or merged with another company, your data would pass to it under this same policy, and we would tell you beforehand.

7. How long we keep it

Once those periods end, when you ask us or when you delete your web account, we only keep statistics that do not identify you. Deleted data disappears from backups within 7 days.

8. Your rights

You can ask to access, correct, delete or port your data, restrict its use or object to it (section 4), and withdraw at any time any consent you gave us on the website, without affecting what was done before.

Email us at contacta@liggo.love. As the app has no accounts, we need to know which data are yours: write to us from Settings → “Feedback” or include your subscription order number. We reply within one month at the latest, free of charge.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority of your country.

9. Minors

Liggo is only for people aged 18 or over. If we learn that a minor is using it, we delete their data.

10. Security

Encryption in transit, private storage, access limited to those who need it, and deletion according to the periods above. No system is infallible.

11. Cookies on the website

The first time you visit liggo.love we show a banner with two options, Accept and Reject. Until you choose, we do not enable any measurement or advertising cookies. Your choice is stored in your browser and shared with no one.

• Necessary (no consent needed): they keep you signed in (Supabase) and let you pay (Stripe).
• Measurement — Datafast: how many people visit the website, where they come from and what they complete. Loaded only if you accept.
• Advertising — Google Ads: how many campaigns end in a subscription. When you buy, we send Google the amount, the currency and a transaction identifier; never your name, your email or what you upload. We use Google Consent Mode v2: until you accept, Google neither reads nor writes advertising cookies nor personalises ads; at most it receives aggregated measurement without identifiers.

You can change your choice at any time right here:Change my cookie preferences

12. Changes

If we change anything important (the purposes, the legal basis or the providers), we will let you know in the app or on the website before it applies, and update the date above.