Lomi — Privacy Policy
Effective date: May 12, 2026
Last updated: May 12, 2026
This Privacy Policy describes how Lomi (referred to as “Lomi,” “we,” “us,” or “our”) collects, uses, and protects information when you use our mobile application.
If you have questions about this policy, email us at lomiteam@outlook.com.
1. Who We Are
Lomi is a dating application operated by Bruck Assefa (the “Operator”), based in Washington State, United States. Lomi is currently available only to users located in the United States.
2. What We Collect
We collect the following categories of information:
- Email address (for authentication)
- Authentication tokens (managed by Supabase, our backend provider)
- Push notification token (for sending notifications to your device)
- First name, last name (optional), date of birth, gender
- Current city and country of origin
- Photos (up to 4 profile photos plus a verification selfie)
- Bio, lifestyle preferences, faith, language, and other profile fields you fill out
- Match preferences (age range, gender, location)
Activity Data
- Tosses sent and received
- Waves sent and received
- Matches and unmatches
- Messages sent in matched conversations
- Moments you post (photos or text)
- Reactions to others’ moments
- Reports you submit about others
- Lemon and Golden Lemon balance and transactions
Technical Data
- Device type and operating system version
- App version
- Approximate session timing for the daily moment cap and feed cap
- We do not collect your precise GPS location.
- We do not access your contacts, calendar, microphone, or camera roll without your explicit permission.
- We do not track you across other apps or websites.
We use your information to:
- Operate the Lomi service (match you with potential dating partners, deliver messages, post moments)
- Authenticate you and keep your account secure
- Process in-app purchases of Lemons and Golden Lemons (via RevenueCat and Apple)
- Send push notifications about matches, messages, waves, tosses, and moments (you can disable these in iOS Settings)
- Investigate reports of abuse and enforce our Terms of Service
- Improve the app (aggregated, anonymized usage patterns)
- Communicate with you about service updates or moderation actions
What We Do NOT Do With Your Data
- We never sell your personal data.
- We never use your photos to train AI or machine learning models.
- We do not share your data with advertisers.
- We do not use your information to build profiles for advertising networks.
Other Users
- Other users see your profile fields, photos, age, city, and moments you post (visibility settings apply — you can set moments to “matches only” vs “public”).
- Once matched, the other party can read messages you send them in chat.
- Other users do not see your email, push token, or activity data (tosses sent, etc.) unless they are the other party in a match.
Service Providers
We share data with these third parties only to operate the service:
Law Enforcement
We may disclose information when required by law (subpoena, court order, etc.) or when we believe in good faith that disclosure is necessary to prevent imminent harm.
5. Photo Storage and Use
Your profile photos and moment photos are stored in our private storage bucket. Access is restricted such that:
- Profile photos are visible to other Lomi users in feeds and matches per normal visibility rules.
- Moment photos are visible only to the audience you choose (“matches only” or “public”).
- Verification selfies are visible only to our moderation team for the purpose of confirming your account.
Photos are never used for AI/ML training, advertising, or anything outside of operating the Lomi service.
6. Data Retention
We retain your data as long as your account is active. You can request deletion at any time (see Section 7).
After account deletion:
- Profile data and photos: deleted within 30 days.
- Messages: deleted along with the matched conversation.
- Activity records (anonymized): may be retained for up to 12 months for fraud prevention and aggregate analytics.
- Moments: deleted on expiry (24 hours) or on account deletion, whichever comes first.
We may retain certain information longer if required by law (e.g. for tax records on purchases) or to enforce these terms.
7. Your Rights
You have the right to:
- Access the data we hold about you. Email us at lomiteam@outlook.com.
- Correct inaccurate data via the Edit Profile screen, or by emailing us.
- Delete your account and data. Use the in-app account deletion option in Settings, or email lomiteam@outlook.com. We will complete deletion within 30 days.
- Export your data (data portability). Email us and we’ll provide a copy of your account data.
- Block another user, which removes them from your feeds in both directions.
- Report another user’s profile or moment content. Reports are reviewed by our moderation team.
8. Children’s Privacy
Lomi is a dating app and is restricted to users 18 years of age or older. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has used Lomi, we will delete their account and all associated data.
If you are a parent or guardian and believe your child has provided us with information, please email lomiteam@outlook.com immediately.
9. Security
We use industry-standard practices to protect your information:
- All connections to our backend are encrypted via HTTPS/TLS.
- Authentication uses standard token-based systems (no plaintext passwords stored).
- Backend access is restricted to operators and authorized personnel.
- Database access is governed by Row-Level Security (RLS) policies that prevent users from accessing data they shouldn’t see.
No system is 100% secure. If we become aware of a security incident affecting your data, we will notify you and any required authorities within a reasonable timeframe.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do:
- We will update the “Last updated” date at the top.
- For significant changes, we will notify users via in-app message or email.
- Continued use of Lomi after changes constitutes acceptance of the updated policy.
For privacy questions, data requests, or to report a concern:
Email: lomiteam@outlook.com
Operator: Bruck Assefa
Jurisdiction: Washington State, United States
We aim to respond within 7 business days.
Lomi — Made with care for the Ethiopian and Eritrean diaspora.
← Back to Legal home