Privacy Policy

Effective Date: August 20, 2025

Your privacy is important to us. This Privacy Policy explains how CoupleChecks.com (“CoupleChecks,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our website, purchase or use our products, or interact with our services, including Love Note Generator Pro (LNGP) and LoveBites™ (Smart Meal & Drink).

By using CoupleChecks.com, you agree to this Policy. If you do not agree, please do not use the site or services.

1) Information We Collect

We may collect:

Account & Contact Data: Name, email address, password (hashed), profile details you choose to add.
Purchase & Billing Data: Transaction details processed by payment partners (e.g., PayPal). We do not store full card numbers.
Service & Content Data: Quiz/assessment responses, workbook inputs, and content you submit or generate (e.g., notes you view or create).
LNGP (Love Note Generator Pro) Data:
- Non-AI notes: categories you view, note “seen” history (to avoid repeats).
- AI notes (optional): short free-text “feeling” (up to ~220 chars), selected tone, optional partner name you provide, and whether you’re eligible (cooldown status and—if enabled—payment unlock status).
LoveBites™ Data: Prompts/selections you provide (e.g., cuisine preferences, dietary notes, budget ranges), usage counts, timestamps, remaining uses (if applicable), and whether you are a guest or logged-in user.
Device/Usage Data: IP address, browser type, device identifiers, pages viewed, referring URLs, and general analytics via server logs.
Cookies, Local Storage & Similar: Session/auth cookies, feature flags, guest identifiers and device fingerprints (for rate-limits/cooldowns and “seen note” history), and simple state to operate UI features (see §6 “Cookies & Local Storage”).

Login Status in Front-End: For certain UI behaviors, we expose a simple “logged-in or not” flag to your browser. Admin accounts may be exempt from some limits for maintenance.

2) How We Use Information

We use information to:

Provide & Improve Services: Deliver digital products, quizzes, LNGP notes, and LoveBites suggestions; prevent repeat notes; enforce daily limits/cooldowns.
Personalize Experience: Tailor content to your inputs (e.g., tone, category) and locale (e.g., country).
Process Payments & Orders: Fulfill purchases, confirm unlocks, and provide support/verification.
Communicate with You: Service messages (order confirmations, password resets, important updates). With your consent or where allowed, newsletters or offers (you can opt out).
Security, Abuse Prevention & Compliance: Fraud checks (e.g., reCAPTCHA), IP/country checks, cooldown enforcement, debugging, and legal compliance.

We do not sell or rent your personal data.

3) AI Processing (LNGP & LoveBites)

To generate AI content (e.g., a personalized love note or a smart meal idea), we send your prompts and minimal context to an AI service provider acting as our processor. Where provider controls are available, we configure them to limit retention and model training; however, data handling ultimately follows each provider’s terms and policies.

What we send: Your prompt fields (e.g., “feeling,” tone, optional first name; or meal/drink preferences), plus system instructions needed to produce the output.
What we don’t need: Please avoid sensitive personal or health data; share only what you are comfortable providing.
Outputs: May be similar to content provided to others and are not guaranteed unique.

4) Data Sharing

We share data only as needed to run the service or as required by law:

Processors / Service Providers:
- OpenAI (AI generation) – prompt/response processing.
- PayPal (payments) – purchase processing and fraud checks.
- Google reCAPTCHA (abuse prevention) – challenge/response data.
- ipinfo.io (coarse geolocation) – we query your IP address to determine country; we store only the returned country in aggregate usage logs.
- CDNs / Assets (e.g., Font Awesome via cdnjs) – serving fonts/icons may expose your IP/request metadata to that provider.
- Hosting & Email – infrastructure and transactional mail.
Social Sharing: If you click a share button (e.g., WhatsApp, X/Twitter, Facebook), the destination platform receives data governed by its own policy.
Legal/Compliance: If required by law, subpoena, or to protect rights, safety, and security.
Business Transfers: In a merger, acquisition, or asset sale, information may transfer with the business.
Aggregated/De-identified Data: We may share aggregate statistics that do not identify individuals.

We do not sell personal data.

5) International Transfers

Our service providers may process data in countries outside your own (e.g., the United States). Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) or other valid transfer mechanisms.

6) Cookies & Local Storage (What We Use and Why)

We use strictly necessary and functional identifiers to operate core features; blocking them can break the service.

Authentication / Session: WordPress auth cookies (for logged-in features).
LNGP “Seen Notes” History:
- Guests: cookie keys like lngp_seen_* store hashed note IDs to avoid repeats (default expiry ~90 days).
- Logged-in users: equivalent “seen” data stored in your user profile (user meta).
LNGP AI Payment Unlock (if enabled):
- Guests: a short-lived cookie (e.g., lngp_ai_payment_confirmed) to unlock one AI generation (typically ~1 hour or until used).
- Logged-in users: a user-meta flag cleared after use.
Cooldown / Rate-Limit Flags:
- Non-AI daily limit: server-side flags combine IP + a device fingerprint value your browser sends; this helps fairly enforce “one per 24 hours” for guests.
- AI daily limit: server-side per user (24 hours).
LoveBites Guest Tokens: a guest identifier in cookies/local storage to preserve pass state and timers.
reCAPTCHA / Payments / CDNs: may set their own cookies or collect request metadata to operate.

Your controls: You can clear cookies and local storage in your browser. Doing so may reset guest history, passes, or cooldowns.

7) Usage Logging & Analytics

To understand feature usage and reliability, we log aggregate counts by date → type (e.g., user_ai, guest_non_ai) → country to a server file. We do not store full IPs in this log—only the returned country code. We may rotate/purge these logs during routine maintenance.

8) Data Security

We use reasonable administrative, technical, and physical safeguards (e.g., HTTPS/SSL, access controls, firewalling). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9) Data Retention

We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Examples:

LNGP seen-note cookies: typically ~90 days (guests).
AI / non-AI cooldown flags: ~24 hours.
AI payment unlock cookie (guest): short-lived and cleared after use.
User-meta history (logged-in): retained until you delete your account or we purge during maintenance, or until an admin resets “seen notes.”
Aggregate usage logs: retained until rotated or purged.

10) Your Rights & Choices

Depending on your location, you may have the right to:

Access, correct, or delete personal data;
Object to or restrict certain processing;
Data portability (receive a copy in a usable format);
Opt out of marketing emails (use unsubscribe links or email us).

To exercise rights, email [email protected]. We may need to verify your identity.

California (U.S.)

We do not “sell” or “share” personal information for cross-context behavioral advertising under California law. You may still request access/deletion as above.

EEA/UK

Legal bases include contract (to deliver services), legitimate interests (to secure/improve the site, prevent abuse), consent (for certain marketing/optional cookies), and legal obligation. When data is transferred outside your region, we use appropriate safeguards where required.

11) Children’s Privacy

Our services are intended for adults (see Terms for age limits). We do not knowingly collect personal data from children under 13. If we learn we have such data, we will delete it.

12) Do Not Track

Some browsers send “Do Not Track” (DNT) signals. Because there is no industry-standard response, we do not respond to DNT signals.

13) Changes to This Policy

We may update this Policy from time to time. Changes will be posted here with an updated Effective Date. Your continued use after changes means you accept the revised Policy.

14) Contact Us

Questions or requests? Email [email protected].