← lovingscience.com

Privacy Policy

Loving Science Ltd · Last updated: 8 May 2026

This Privacy Policy explains how Loving Science Ltd (“we”, “us”, or “our”) collects, uses, and protects personal data when you use any of our scientific tools and applications (collectively, “the Services”). This policy applies to all applications hosted on lovingscience.com and its subdomains (including, but not limited to, pan-sci.lovingscience.com), as well as our main website at lovingscience.com.

We are registered in England and Wales (Company No. 17199550), with our registered office at 124 City Road, London, EC1V 2NX. We are the data controller for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. Our ICO registration is currently pending.

1. What We Collect

Depending on how you use the Services, we may collect:

Account & Identity Data

  • Name and email address (collected at registration via Clerk)
  • Authentication credentials and session tokens
  • Account preferences and settings

User-Uploaded Content

  • PDFs, datasets, and scientific documents you upload for processing
  • Queries, prompts, and messages you submit to our tools
  • Outputs and results generated during your sessions

Usage & Technical Data

  • IP address and browser/device information
  • Pages visited, features used, and interaction logs
  • Error reports and diagnostic data

2. How We Use Your Data

We use your data to:

  • Provide, operate, and improve the Services
  • Authenticate your identity and manage your account
  • Process scientific content you upload using AI analysis tools
  • Respond to support requests and communications
  • Comply with legal obligations and enforce our terms of service

Our lawful bases under UK GDPR are: contract performance (providing the Services you signed up for), legitimate interests (improving our tools, preventing fraud), and legal obligation where applicable.

3. How We Use AI

Our Services use artificial intelligence to analyse scientific content and generate insights. We want to be transparent about how this works:

  • AI processing is performed via the Google Gemini API. Content you submit is sent to Google's API for analysis and is subject to Google's data processing terms.
  • We do not use your personal data or uploaded content to train third-party foundation AI models without your explicit consent.
  • Data is processed per-user and per-application — your content in one Loving Science app is not accessible to or shared with other users or other applications in our ecosystem.
  • AI-generated outputs are provided for informational and research purposes. They do not constitute professional scientific, medical, or legal advice.

4. Sub-processors

We work with the following third-party sub-processors who handle personal data on our behalf:

  • Clerk (clerk.com) — Identity and authentication management. Clerk processes your email address and account credentials to provide secure login across our Services.
  • Google Gemini API (cloud.google.com)— AI-powered content analysis. Content you submit for processing is handled according to Google Cloud's data processing addendum.
  • Stripe (stripe.com) — Payment processing. If you subscribe to a paid plan, Stripe handles your payment information (card details, billing address, transaction history) on our behalf. We do not store card details on our own servers. Stripe is PCI-DSS compliant and processes payments under its own privacy policy.
  • Supabase (supabase.com) — Database and storage. User account data, uploaded content, and application data are stored in Supabase-managed databases hosted on AWS infrastructure. Data is stored per-user and per-application and is not shared across applications.
  • Vercel (vercel.com)— Hosting and infrastructure. Our applications and website are deployed on Vercel's platform.

We require all sub-processors to maintain appropriate security standards and process data only as instructed by us.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Uploaded content (e.g. PDFs) may be stored temporarily to deliver the Services and is deleted according to the retention schedule of each individual application.

6. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Access to personal data is restricted to personnel who need it to operate the Services.

However, no system is completely secure. If you believe your data has been compromised, please contact us immediately at admin@lovingscience.com.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — ask us to correct inaccurate or incomplete data
  • Right to erasure— request deletion of your personal data (“right to be forgotten”)
  • Right to restriction — ask us to limit how we process your data in certain circumstances
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at admin@lovingscience.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data lawfully: ico.org.uk/make-a-complaint.

8. Cookies

We use essential cookies necessary for authentication and session management (provided by Clerk). We do not currently use advertising or tracking cookies. If this changes, we will update this policy and obtain consent where required.

9. International Transfers

Some of our sub-processors (including Google and Vercel) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms — to protect your data to UK GDPR standards.

10. Changes to This Policy

We may update this policy as our Services evolve. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of the Services after any changes constitutes acceptance of the revised policy.

As we expand our suite of applications, this policy will automatically extend to cover any new tools hosted on lovingscience.com and its subdomains, unless a separate policy is published for a specific application.

11. Contact Us

For any privacy-related questions or to exercise your rights, please contact:

Loving Science Ltd
124 City Road, London, EC1V 2NX
admin@lovingscience.com