Privacy Policy
Short version. Lunelo is a voice-first task planner. Your tasks live on your device. When you use voice or AI features, your audio and text are sent to our AI processors (Anthropic, OpenAI) for one-off processing, then discarded. There are no user accounts. We do not sell or share your data with advertisers.
1. Who we are
Lunelo (the “App”) is operated by Sergey Litau (the “Operator”, “we”, “us”). Contact: support@lunelo.app.
This Policy describes how we collect, use, and disclose information when you use the Lunelo mobile application and the website at lunelo.app.
2. Data we collect
2.1 Stored on your device only
- Tasks, notes, completion history, settings. Saved in your device’s local storage (
localStorage). We do not have access to this data. It does not leave your device unless you explicitly enable cloud sync (not yet available). - App preferences: theme, accent color, language, density, onboarding state.
2.2 Sent to third-party AI processors
- Voice audio — when you tap the microphone, your audio is recorded on-device and transmitted to OpenAI for speech-to-text transcription (Whisper API). Audio is not stored long-term by us or, per OpenAI’s API terms, by OpenAI for training.
- Task text (typed or transcribed) — sent to Anthropic (Claude API) to parse free-form input into structured tasks (title, time, recurrence). Per Anthropic’s API terms, API inputs are not used to train their models.
- No account identifier, email, or device identifier is attached to these requests.
2.3 Analytics & product telemetry
- We use PostHog to understand how the App is used (screen views, taps, app open/close, crashes).
- PostHog is identified with a randomly generated, anonymous
distinct_id. It is not linked to your name, email, or phone number. - You can disable analytics in Settings → Privacy.
2.4 Purchases & subscriptions
- In-app purchases are processed by Apple via the App Store. We do not receive your credit card or payment details.
- We use RevenueCat to validate Apple receipts and track entitlements (whether you have an active subscription). RevenueCat assigns an anonymous
appUserID.
2.5 What we do NOT collect
- No contact info (no email, no phone, no name — there is no account).
- No location.
- No contacts or calendar access (unless you explicitly grant it for a future feature).
- No advertising identifiers (IDFA). We do not show ads.
- No cross-app or cross-website tracking. We do not use App Tracking Transparency (ATT) tracking.
3. How we use data
- To provide core features: transcribe your voice, parse your task input, store and display your tasks.
- To process subscriptions: verify and restore purchases via Apple + RevenueCat.
- To improve the App: aggregate, anonymous analytics on which features are used.
- To diagnose crashes and fix bugs.
4. Third-party processors
| Processor | Purpose | Data shared | Policy |
|---|---|---|---|
| Anthropic (Claude API) | AI task parsing | Task text (free-form input) | anthropic.com/legal/privacy |
| OpenAI (Whisper API) | Voice transcription | Voice audio | openai.com/policies/privacy-policy |
| PostHog | Product analytics | Anonymous events, anonymous ID | posthog.com/privacy |
| RevenueCat | Subscription receipts | Apple receipt, anonymous ID | revenuecat.com/privacy |
| Apple | App distribution, IAP | Per Apple App Store | apple.com/legal/privacy |
| Vercel | Website & API hosting | Standard server logs (IP, User-Agent) | vercel.com/legal/privacy-policy |
5. Data retention
- Your tasks remain on your device until you delete them or uninstall the App.
- AI request payloads (audio, text) are processed transiently. We do not retain them on our servers beyond the time required to return a result.
- Analytics events are retained by PostHog for up to 12 months.
- Subscription data is retained by RevenueCat for as long as required by Apple’s receipt validation rules.
6. Your rights
Under GDPR (EEA/UK), CCPA (California), and similar laws, you have the right to access, correct, delete, and port your personal data, and to object to or restrict processing.
- Delete on-device data: Settings → Reset all data, or uninstall the App.
- Disable analytics: Settings → Privacy → Analytics.
- Request deletion of cloud-side data (RevenueCat anonymous ID, PostHog events): email privacy@lunelo.app. Because we have no account, please include your RevenueCat
appUserID(visible in Settings → About). - EU users may lodge a complaint with their national data protection authority.
7. Children
Lunelo is rated 4+ and does not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact privacy@lunelo.app.
8. International transfers
Our processors (Anthropic, OpenAI, PostHog, RevenueCat, Vercel) are based in the United States. By using the App, you consent to the transfer of the data described above to the U.S. for processing under Standard Contractual Clauses where applicable.
9. Security
Data in transit is encrypted with TLS 1.2+. Local data on your device is protected by the operating system’s sandbox. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be announced in-app.
11. Contact
Questions about this Policy or your data:
- General: support@lunelo.app
- Privacy / data requests: privacy@lunelo.app