Privacy and security
This is how Love your life protects your data. This page only describes what is built and running today.
How we protect your data
Stored in Frankfurt am Main
The application and database run in Google Cloud data centres in Frankfurt am Main. Uploaded files are stored twice: in Frankfurt am Main and in the Netherlands – both in the European Union.
Encrypted transmission
Every connection to Love your life is encrypted (HTTPS). Your browser only opens the site over an encrypted connection (HSTS).
Encrypted storage
Google Cloud stores the database and files in encrypted form. Backups are kept only in encrypted images.
Sensitive details encrypted individually
We additionally encrypt particularly sensitive details one by one, for example bank details, the key of the second factor, assistant conversation histories, transcripts of video consultations and travellers' passport data.
Rights by role
Everyone only sees what their role allows. Every protected page checks login and role on the server before it loads any data.
Second factor
Every account can set up a second factor: a code from an authenticator app plus single-use recovery codes. The administration can require it for individual groups.
Audit trail
Important actions are recorded with the time and the person acting. The database does not allow the application to change or delete these entries.
Four-eyes principle
Payouts and refunds are approved by a second person – never the one who created or requested them.
Checking uploaded files
Every uploaded file is checked for malware before it is stored.
Service providers that process data
These companies process data on our behalf or receive it when you use the respective function. For countries outside the European Union, the safeguards named in the privacy policy apply.
- Company
- Google Cloud EMEA Ltd.
- Purpose
- Running the application, database and file storage; speech output
- Location
- Frankfurt am Main; files also in the Netherlands; speech output via the EU endpoint
- Company
- Google Cloud EMEA Ltd. (Google Maps Platform)
- Purpose
- Address suggestions while typing
- Location
- Registered in: Ireland
- Company
- Stripe Payments Europe Ltd.
- Purpose
- Card payments and refunds; card details stay with Stripe
- Location
- Registered in: Ireland
- Company
- Resend
- Purpose
- Sending and receiving the platform's emails
- Location
- Registered in: United States
- Company
- Daily.co
- Purpose
- Video rooms for video consultations, without recording
- Location
- Media servers in Frankfurt am Main (EU)
When we delete
These periods are kept in the platform's register of deadlines. The value shown is the one currently set; deletion runs automatically every day.
- Passport data from visa procedures, security clearance and travel bookings: 7 months after the procedure is completed or the trip has ended
- WhatsApp messages: 90 days after receipt
- Call log of the country offices: 90 days after the call
- Short messages at the meeting point: 90 days after the ride ends
- Identifications and hand-overs of the phone assistants: 90 days
- Documents of a case remain in the case profile until you request their deletion.
- We keep invoices, contracts and accounting records for as long as commercial and tax law requires.
Your rights
- Access and data portability: as a patient, you download your data as a file in the portal under “Privacy”. Open →
- Rectification: you change your name, address and other details in your profile. Open →
- Erasure: you request deletion in the portal under “Privacy”; statutory retention obligations remain. Open →
- Withdrawal: you withdraw consents in the portal under “Privacy” with effect for the future. Open →
- Restriction, objection and all other requests: write to datenschutz@love-you.life. Every request becomes a case with a response deadline of one month. datenschutz@love-you.life
- Complaint: you can lodge a complaint with a data protection supervisory authority. Open →
This page is a summary. The privacy policy is binding. Open →