Legal

Privacy Policy

Last updated: February 28, 2026

This policy explains what data the app stores and how your vault content is handled.

Your uploaded images are encrypted on your device before they reach the server. Canvas data (text, drawings) is stored securely but is not yet encrypted in the same way.

1. Overview

Love as a Story (LaaS) is built for private use by two partners sharing one vault.

This policy explains what data is stored, why it is stored, and how your content is protected.

2. Data Collected

  • Vault records (vault ID and related metadata).
  • Vault Key and shared password (stored as secure hashes, never in plain text).
  • Canvas data used to restore your boards and sub-canvases.
  • Uploaded photos and images.
  • File metadata such as name and type.
  • Session and access control data to protect your vault.

3. Where Data Is Stored

  • A hosted database for vault metadata, sessions, and canvas data.
  • A cloud storage service for your uploaded images.
  • A real-time sync service for live collaboration between you and your partner.
  • A caching service for rate limiting. No vault content is stored here.

4. How Data Is Used

  • Verify your identity when you unlock your vault.
  • Save and load your canvases and sub-canvases.
  • Store and deliver your uploaded images.
  • Protect your vault from unauthorized access attempts.
  • Enable real-time collaboration between you and your partner.

5. Security

Your uploaded images are encrypted on your device before they ever leave your browser. The server never sees the original files.

Canvas data (text, drawings, element positions) is stored securely on the server but is not encrypted in the same way. Encrypting canvas data is planned for a future update.

No internet service can guarantee absolute security. Use strong secrets and store them safely offline.

6. Data Sharing

  • Your vault content is never sold.
  • No advertising profiles are built from your memories.
  • Data is only processed to operate and secure your vault.
  • Third-party infrastructure providers are used to host and deliver the service, but they do not have access to your original images.

7. Retention and Deletion

Data remains stored while your vault is active.

Because there is no account or email system, deleting or recovering a vault may require direct support in future versions.

8. Your Control

  • Do not store secrets only in one place.
  • Export or back up important memories outside the app when possible.
  • Avoid uploading content that you would not want stored on server infrastructure.

9. Policy Updates

This policy may be updated as the app evolves. Continued use after updates indicates acceptance of the revised policy.