Privacy Policy

The controller of your personal data is Techflip Networks Ltda. (CNPJ 18.936.209/0001-27), Rua das Pitangueiras, 18 — Matatu, Salvador/BA, 40255-436, Brazil. Contact: [email protected].

• Account — your email, the first name you give us, and a securely hashed password. If you sign in with Google, we receive your email, name and profile picture from Google; we never receive your Google password.
• Membership and payment — plan, status, renewal date, and an identifier from Stripe. We never see or store your full card number; Stripe handles that directly.
• Use of the service— what you watched and how far you got, your ratings, your list, and how you arrived at the site. This is what makes "continue watching" and recommendations work.
• Technical — IP address, browser and device type, approximate region, timestamps, and session records (for security and to let you sign out everywhere).
• Messages — what you write to support, so we can answer it.

We do not ask for, and do not want, sensitive categories of personal data. Please do not send them to us.

To run your account and remember where you stopped; to take payment and manage your membership; to send service email (welcome, receipts, renewal and price notices, security alerts); to keep the service secure and detect abuse; to understand which stories people watch so we can commission more of what works; to meet legal obligations.

Where the GDPR, UK GDPR or Brazil's LGPD applies, our bases are: performance of our contract with you (account, playback, billing), legitimate interests (security, fraud prevention, product analytics), consent (advertising and non-essential cookies, which you can withdraw at any time), and legal obligation (tax and accounting records).

• We do not sell your personal information for money.
• We do not publish, display or share what you watch with other users.
• We do not use the content of your viewing history to target you with ads for specific titles outside Luvante.

Only the providers that make the service run, each for its own narrow purpose:

• Stripe — payments, subscriptions and refunds.
• Google / YouTube— video playback happens in YouTube's embedded player, so Google receives the request and may set cookies. Your Luvante account is not disclosed to Google by us.
• Brevo — sending transactional email.
• Google Analytics — aggregate audience measurement.
• Meta (Facebook/Instagram) — advertising measurement, where you have accepted advertising cookies. See Section 7.
• Cloudflare — network delivery, security, and the anti-bot check on the signup form.
• Hetzner — the servers where the service runs.

We may also disclose data if the law requires it, or to establish or defend legal claims — and if a court order is involved, we will tell you unless we are forbidden to.

If the business is ever sold or merged, your data may transfer with it, subject to this policy.

We operate from Brazil and our servers are in Germany; our providers operate in the United States and Europe. That means your data crosses borders. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

When you accept advertising cookies, the Meta pixel may share identifiers and events (such as "visited the pricing page" or "subscribed") with Meta so we can measure our advertising.

Under California law this counts as "sharing" personal information for cross-context behavioral advertising — even though no money changes hands and we do not consider it a sale. We are telling you plainly rather than hiding behind the definition.

To opt out: decline or withdraw advertising cookies (see Cookie Policy), or email [email protected] with "Do not sell or share my personal information". We also honor the Global Privacy Control signal if your browser sends one. Opting out does not change your price or your access — California law forbids that, and so does our own preference.

Wherever you live, you may ask us to: give you a copy of your data; correct it; delete it; restrict or object to certain uses; or receive it in a portable format. If you are in California, you also have the right to know what we collect and disclose, to delete, to correct, to opt out of sharing (Section 7), and not to be discriminated against for exercising any of it.

Write to [email protected]. We answer within 30 days and we do not charge for it. We may need to confirm you control the account email before acting — that protects you, not us. You may use an authorized agent.

Deleting your account deletes your profile, list, ratings and viewing history. We keep payment and invoice records for as long as tax and accounting law requires, and we keep minimal records needed to defend legal claims or to stop a banned account from returning.

If you are in the EU/UK you may complain to your data protection authority; in Brazil, to the ANPD. We would rather you told us first.

Account and viewing data: while your account exists, and up to 90 days after deletion in backups. Payment records: as long as tax law requires. Support messages: up to 2 years. Security logs: up to 12 months.

Passwords are stored hashed, never in readable form. Sessions are stored as hashes too, so a copy of our database does not hand anyone your account. Traffic is encrypted in transit. Access to production data is limited to those who need it.

No system is perfectly secure. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.

Luvante is for adults 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, write to [email protected] and we will delete it.

Our quizzes are a separate service and are covered by the Quiz Privacy Policy, which describes additional processing — including the AI provider used to generate reports.

If we change this policy in a way that matters, we will notify account holders by email. The version on this page, with the date at the top, is the one in force.