Privacy Policy
Last updated: July 2026.
What we collect
For signed-in users: your email and authentication identifiers, the characters you create, and the messages you send and receive. For anonymous preview visitors: a random visitor ID stored in a browser cookie, the preview conversation itself, and a salted one-way hash of your IP address used only for rate limiting, we never store your raw IP with your conversation. Basic product analytics (page views, feature usage, conversion events) are collected without cross-site tracking. We do not sell personal data.
SMS data
If you opt in to texting with Luna we store your phone number, your opt-in and opt-out timestamps, and the messages exchanged, solely to operate the conversation you asked for. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text STOP at any time to end the program; your STOP is honored permanently unless you explicitly opt back in.
Payments
Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we receive only the payment outcome, the amount, and (if you provide it at checkout) an email address used for your receipt and pass recovery.
How we use your data
To deliver the service: storing your characters, surfacing your conversations, generating responses through model providers, and managing your passes or subscription. Aggregated, non-identifying analytics help us improve LoverLabs.
Model providers
When you send a message, the text of recent conversation history and the character's system prompt are sent to a model provider (e.g., OpenAI, Anthropic) to generate a response. The active provider is configured server-side and can change. Providers do not train on data sent through their commercial APIs.
Retention and deletion
Signed-in users can delete every companion, conversation, and memory at any time from Settings. Anonymous preview conversations are retained to operate the session and may be pruned over time; clearing your cookie disconnects you from the thread. SMS subscribers can text STOP to end messaging and email us to request deletion of the stored thread. Account-level deletion is available on request.
Security
Data is stored in Supabase Postgres with row-level security enabled. Anonymous chat and SMS tables are additionally locked so they are only reachable through our server-side APIs, never directly from a browser. Conversations are not accessible to other users, and staff access is limited to legitimate operational reasons.
Contact
Questions? privacy@loverlabs.io