Lovable

Lovable · Coding agent · SE · lovable.dev

Last verified 2026-09-16
Entry services/lovable.yaml
Training on your data (default tier)
Prompts, code, project files and outputs are used to train Lovable's models by default; opt-out in account settings on any plan, effective going forward
Retention
Kept as long as needed for the stated purposes, then deleted or de-identified; deletion does not retract content already used in training
Data residency
Swedish main establishment; processing in several countries including the United States

Vendor data-handling terms

Training on your data (default tier)
Prompts, code, project files and outputs are used to train Lovable's models by default; opt-out in account settings on any plan, effective going forward
We use Customer Content and Usage Data — which may include Personal Data — to train, develop, fine-tune, and improve our AI models and AI-powered features, including models we operate within the Services and models we may make available to customers through Lovable products such as the AI Gateway. / You can opt out of model training at any time in your account settings, on any plan, at no cost, and it does not affect your use of AI features.
checked 2026-09-16
Lovable Privacy Policy
Training on your data (business tiers)
Business and Enterprise customer content and usage data excluded from training under the DPA
Business and Enterprise Customer Content or Usage Data. We set out this prohibition in our Data Processing Agreement.
checked 2026-09-16
Lovable Privacy Policy
Retention
Kept as long as needed for the stated purposes, then deleted or de-identified; deletion does not retract content already used in training
Data Retention We keep Personal Data only as long as needed for the purposes described in this Policy or as the law requires, then delete or de-identify it. / Deletion does not retract content from training datasets assembled, or models trained, before your request took effect (see Section 5).
checked 2026-09-16
Lovable Privacy Policy
Data residency
Swedish main establishment; processing in several countries including the United States
Our main establishment is in Stockholm, Sweden and Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection, is our lead supervisory authority. We and our service providers process Personal Data in a number of countries, including the United States.
checked 2026-09-16
Lovable Privacy Policy

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
lovable.devappobserved

Assessment

Free and Pro: highBusiness and Enterprise: medium

Reasoning: An app builder that generates and hosts full applications from prompts. On individual plans, prompts, code and project files train Lovable's models unless the user opts out, and prompts also go to third-party model providers. Business and Enterprise content is excluded by the DPA. Projects often contain credentials and customer data.

Flags: Trains on prompts and code by default, opt-out · Third-party model providers · Hosted apps hold live data · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Training, retention and transfer terms verified against the Lovable privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub