Lunio Privacy Policy

Effective date: April 27, 2026 · Last updated: April 27, 2026

Welcome to Lunio (the "App", "we", "us"). We respect your privacy. This Privacy Policy explains what information we collect when you use the App, how we use and share that information, and the rights you have. Please read this Policy carefully before using the App.

1. Information We Collect

1.1 Information you provide

Account information. If you choose Sign in with Apple, we receive a unique Apple user identifier and the name and email you authorize Apple to share (you may use Apple's Hide My Email feature).
Anonymous use. You may use the App without signing in. In that case we generate a local anonymous identifier and do not collect identifying information.
Profile. Display name, avatar, and preferences you set in the App.
Conversation content. Text and voice chats with AI characters, favorites, and interaction events.

1.2 Automatically collected information

Device information: device model, iOS version, App version, language, and time zone.
Usage logs: access timestamps, feature usage, error and crash diagnostics.
Subscription: StoreKit 2 transaction identifier and subscription status. We do not access your payment card information — payments are handled entirely by Apple.

1.3 Microphone and Speech Recognition

When you use voice input, the App will request microphone access. Speech recognition is performed via Apple's Speech framework; depending on your device, language, and system settings, recognition may run on-device or on Apple's servers. See Apple Privacy Policy. We receive only the text transcript and do not store the raw audio.

2. How We Use Information

To operate and maintain core features (accounts, conversations, relationship system, subscriptions);
To forward your messages to AI providers for response generation;
To detect prohibited content and emotional crisis signals so we can offer supportive responses;
To analyze and improve the product and fix issues;
To process subscriptions, billing, and refunds;
To comply with legal obligations and prevent fraud or abuse.

3. Third-Party Services and Data Sharing

We share data only to the minimum extent necessary, with the following providers:

Service	Purpose	Data shared	Their policy
Apple (Sign in with Apple, StoreKit, Speech, Push)	Authentication, payment, speech recognition, notifications	Apple ID identifier, subscription transactions, device token, (potentially) audio	apple.com/legal/privacy
Supabase	Database, storage, realtime sync, edge functions	Profile, conversation history, relationship data, device metadata	supabase.com/privacy
LLM providers (Anthropic Claude, OpenAI GPT)	Generate AI character replies	Conversation context required for the current turn, character configuration	anthropic.com/privacy · openai.com/privacy

We do not sell or rent your personal information to third parties for advertising or marketing purposes.

4. Data Storage and Security

Core data is stored in databases hosted by Supabase, transmitted over TLS, and protected by row-level security (RLS) policies.
Local caches (including the SwiftData store) reside on your device under iOS sandbox protection.
Sensitive credentials such as auth tokens are stored in iOS Keychain.
We adopt industry-standard technical and organizational measures, but no transmission over the internet or storage system can be guaranteed 100% secure.

5. Data Retention

While your account is active, we retain your profile, conversations, and relationship data to maintain service continuity. After you delete your account, related personal data will be removed from production databases within a reasonable period (typically no more than 30 days). Backups and records required for legal compliance may persist longer.

6. Your Rights

Access and export your personal data;
Correct inaccurate information;
Delete your account and conversation history (Settings → Account → Delete Account in the App);
Revoke previously granted permissions (microphone, notifications) via iOS Settings;
Object to or complain about our data processing.

To exercise these rights or for any questions about this policy, please contact us via GitHub issue: https://github.com/iosliupeng/lunio-legal/issues

7. Children's Privacy

The App is intended for users aged 17 and above. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the data promptly.

8. International Data Transfers

Because our third-party providers (Apple, Supabase, AI providers) may be located outside your jurisdiction, your information may be transferred across regions when processed. We will take reasonable measures consistent with applicable laws to protect that information.

9. AI-Generated Content Disclaimer

Character replies in the App are generated by AI models. AI output may be inaccurate, incomplete, or factually wrong. The App provides emotional companionship and does not constitute and is not a substitute for professional mental-health counseling, medical diagnosis, or treatment. If you are in serious distress or in crisis, please contact a local mental-health hotline or seek professional help immediately.

10. Changes to this Policy

We may update this Policy as laws or services evolve. Material changes will be communicated via in-App notice or other prominent means. Continued use of the App after such changes constitutes acceptance of the updated Policy.