Privacy Policy

1About This Policy

This Privacy Policy describes how Luna AI ("we", "us", "our" — operated by Luna AI) collects, uses, stores, and protects the personal information of users ("you") of our mobile application available on Google Play and the App Store.

By using Luna AI, you agree to the practices described in this policy. If you do not agree, please discontinue use of the application.

2Information We Collect

We collect only the information necessary to provide our services:

• Account Information: Name, email address, profile photo, and authentication tokens when you sign in with Google or create an account.
• Chat Messages: Messages you send to AI characters, conversation history, and emotional-bond progress data. These are stored to provide continuity across sessions.
• AI Character Data: Characters you create including their name, appearance descriptions, personality settings, and uploaded reference images.
• Generated Images: Images generated during character creation sessions. Images saved locally on your device are stored on your device only and are not uploaded to our servers unless you explicitly choose to make them public.
• Coin & Purchase Data: Your coin balance, transaction history, and purchase records (via Stripe). We do not store full card numbers — payment processing is handled entirely by Stripe.
• Usage Data: App interactions, feature usage, and crash/error reports to improve the service.
• Device Information: Device type, OS version, and push notification tokens for delivering notifications.

3How We Use Your Information

• To create and manage your account and authenticate your identity.
• To provide AI companion chat features, maintain character personalities, and manage emotional-bond progression.
• To generate AI images based on your prompts, subject to our content safety policies.
• To process coin purchases and manage your in-app balance.
• To send push notifications you have opted into (new messages, events, etc.).
• To detect and prevent prohibited content, fraud, or abuse.
• To improve the app's features, fix bugs, and analyse aggregate usage trends (no individual profiling).
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4Sharing & Third-Party Services

We share data only with the following trusted service providers, strictly for the purpose of operating the app:

• Google (Authentication & Firebase): Google Sign-In for authentication; Firebase for push notifications. Subject to Google's Privacy Policy.
• Stripe: Payment processing for in-app coin purchases. We share only the minimum required payment information. Subject to Stripe's Privacy Policy.
• Replicate / AI Model Providers: Image generation prompts are sent to third-party AI inference APIs (e.g., Replicate). Prompts are screened by our content safety system before transmission. No personally identifiable information is included in prompts.
• ElevenLabs: Text-to-speech voice synthesis for AI character voices. Text sent for synthesis contains only AI character dialogue, not personal user data.
• OpenRouter / OpenAI-compatible APIs: AI chat responses. Conversation history sent to generate replies contains only in-app dialogue — no real personal information unless you voluntarily share it in chat.
• Render / Cloud Hosting: Our server infrastructure. Data is stored in encrypted databases on secured servers.

5Data Retention

• Account data is retained as long as your account is active.
• Chat history is retained for up to 12 months, then automatically purged from our servers.
• Generated images saved locally on your device are stored only on your device and are controlled entirely by you.
• Payment records are retained for 7 years as required by financial regulations.
• On account deletion, all personal data is permanently deleted within 30 days, except financial records retained for legal compliance.

6Security

We take data security seriously and implement the following measures:

• HTTPS encryption for all data in transit.
• Encrypted passwords and authentication tokens — we never store plain-text passwords.
• Rate limiting and abuse detection on all API endpoints.
• Regular security reviews of our codebase and third-party dependencies.
• Input validation and content safety scanning to prevent injection attacks and prohibited content.

No system is 100% secure. If you believe your account has been compromised, please contact us immediately.

7Your Rights (GDPR & Global)

If you are located in the European Union, the United Kingdom, or another jurisdiction with data protection laws, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data. You can delete your account directly in the app, or contact us to request full data erasure.
• Right to Restriction: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Request your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at pixelhearttech@gmail.com. We will respond within 30 days.

8Children & Age Restrictions

All AI characters on Luna AI are adults (18+). Our content safety systems actively block any attempt to create minor characters or generate inappropriate content involving minors. If we become aware that a user under 18 has created an account, we will immediately delete their account and all associated data.

If you believe a minor is using the service, please contact us immediately at pixelhearttech@gmail.com.

9In-App Purchases & Payments

Luna AI offers in-app coin purchases to unlock features such as sending messages and creating characters. All payments are processed securely through Stripe.

• All prices are displayed in your local currency before purchase.
• Purchases are non-refundable unless required by applicable law.
• We do not store your credit card details — all payment data is handled by Stripe.
• For refund requests or billing disputes, contact us at pixelhearttech@gmail.com.
• Coins are virtual currency with no real-world monetary value and cannot be exchanged for cash.

10AI-Generated Content

Luna AI uses artificial intelligence to generate chat responses, character voices, and images. Please be aware:

• AI characters are entirely fictional. Any resemblance to real persons is coincidental.
• Conversations with AI characters are not real relationships. Luna AI is an entertainment and companionship application.
• All image generation prompts pass through our content safety system, which blocks prohibited content (including anything involving minors) before any API call is made.
• We reserve the right to review and remove content that violates our Terms of Service.
• Do not share real personal information (address, phone number, financial details) in AI chats — this information is not protected by end-to-end encryption.

11Push Notifications

Luna AI may send push notifications to your device for AI character messages, app events, and updates. You can opt out of push notifications at any time through your device settings. Notification permission is optional and the app functions without it.

12Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notice or email (where possible) at least 14 days before changes take effect.

Continued use of the app after changes take effect constitutes acceptance of the updated policy. The "Last updated" date at the top of this page will always reflect when the policy was last revised.