Privacy Policy

Last updated: April 16, 2026

Express.Love is built on a simple belief: you deserve to feel safe while you're here. We don't make money from your data. We never have. This page explains exactly what we do and don't collect — in plain language, not legalese.

What we collect

We collect the minimum needed to keep the app working well:

♥Anonymous device fingerprint. A privacy-safe, non-identifying token that lets us remember your preferences (like dark mode) without requiring an account. It never leaves our servers or gets linked to your identity.
♥"I Did This" actions. When you tap the heart button to say you completed a kindness challenge, we record that action so we can count real-world impact together. This is tied to your anonymous fingerprint, not your name.
♥Optional email address. Only if you choose to create an account. We use it solely to let you sign in and to send the updates you opt into. You can delete your account and email at any time.

What we don't collect

We want to be crystal clear about this:

✓No tracking pixels or surveillance scripts
✓No ad networks or behavioral targeting
✓No selling, renting, or trading your data to third parties — ever
✓No location tracking
✓No microphone, camera, or contacts access

Express.Love is funded by the mission — not by ads. Your attention is yours.

Sharing challenges

When you share a kindness challenge via SMS or WhatsApp, we generate a standard share link using your device's native sharing system. We never see, store, or process the phone numbers you share with. The share happens entirely between your device and the messaging app of your choice — we're not in the middle of it.

Your rights (GDPR & beyond)

Wherever you are in the world, you have the right to:

→Access your data. Request a copy of everything we have on you.
→Delete your data. Ask us to permanently erase your account and all associated records.
→Export your data. Receive a portable copy in a machine-readable format.
→Correct your data. Update any information that is inaccurate.

To exercise any of these rights, email us at olivieraz@gmail.com. We'll respond within 30 days.

Children's privacy (COPPA)

Express.Love is designed for users 13 and older. We do not knowingly collect any personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at olivieraz@gmail.com and we will delete it promptly.

Researcher contact notice (GDPR Art. 14)

If you received an invitation to review an article on Express.Love, this section explains how we obtained your contact information and how it is used.

→Data collected. Name, institutional affiliation, publication list (title, journal, DOI), and a publicly listed email address associated with your published research.
→Source of data. Public academic databases — primarily CrossRef, OpenAlex, Europe PMC, and ORCID — which index peer-reviewed publications and associated author metadata.
→Purpose & legal basis. We use your contact details solely to invite you to review science articles for factual accuracy. Our legal basis is Legitimate Interest (GDPR Art. 6(1)(f)): we have a genuine interest in scientific accuracy, balanced against your reasonable expectation that a publicly listed academic email may receive relevant research correspondence.
→Retention. Contact records are kept for up to 36 months from the date of first contact, unless you opt out — in which case your record is suppressed immediately and permanently.
→Your rights. You may request access, correction, erasure, or restriction of your data at any time by emailing privacy@express.love. An opt-out link is included in every outreach email we send.

Questions?

We're a small team that genuinely cares. If you have any questions, concerns, or requests about your privacy, please reach out directly:

olivieraz@gmail.com

What we collect

We collect the minimum needed to keep the app working well:

♥Anonymous device fingerprint. A privacy-safe, non-identifying token that lets us remember your preferences (like dark mode) without requiring an account. It never leaves our servers or gets linked to your identity.

♥"I Did This" actions. When you tap the heart button to say you completed a kindness challenge, we record that action so we can count real-world impact together. This is tied to your anonymous fingerprint, not your name.

♥Optional email address. Only if you choose to create an account. We use it solely to let you sign in and to send the updates you opt into. You can delete your account and email at any time.

What we don't collect

We want to be crystal clear about this:

✓No tracking pixels or surveillance scripts

✓No ad networks or behavioral targeting

✓No selling, renting, or trading your data to third parties — ever

✓No location tracking

✓No microphone, camera, or contacts access

Express.Love is funded by the mission — not by ads. Your attention is yours.

Sharing challenges

Your rights (GDPR & beyond)

Wherever you are in the world, you have the right to:

→Access your data. Request a copy of everything we have on you.

→Delete your data. Ask us to permanently erase your account and all associated records.

→Export your data. Receive a portable copy in a machine-readable format.

→Correct your data. Update any information that is inaccurate.

To exercise any of these rights, email us at olivieraz@gmail.com. We'll respond within 30 days.

Researcher contact notice (GDPR Art. 14)

If you received an invitation to review an article on Express.Love, this section explains how we obtained your contact information and how it is used.

→Data collected. Name, institutional affiliation, publication list (title, journal, DOI), and a publicly listed email address associated with your published research.

→Source of data. Public academic databases — primarily CrossRef, OpenAlex, Europe PMC, and ORCID — which index peer-reviewed publications and associated author metadata.

→Purpose & legal basis. We use your contact details solely to invite you to review science articles for factual accuracy. Our legal basis is Legitimate Interest (GDPR Art. 6(1)(f)): we have a genuine interest in scientific accuracy, balanced against your reasonable expectation that a publicly listed academic email may receive relevant research correspondence.

→Retention. Contact records are kept for up to 36 months from the date of first contact, unless you opt out — in which case your record is suppressed immediately and permanently.

→Your rights. You may request access, correction, erasure, or restriction of your data at any time by emailing privacy@express.love. An opt-out link is included in every outreach email we send.