Privacy Policy

Last updated: 17 July 2026

In short: we collect what's needed to run lublu and remember you, we don't sell your data, your chats are private, and you can delete everything anytime.

This policy explains how [Operator legal name] ("lublu", "we"), operator of lublu.ai, handles your personal data. We are the data controller under the GDPR.

What we collect

Account: your email, and a password (stored only as a secure hash).
Profile: the name you give, and optionally your gender (used so your companion addresses you correctly).
Conversations: the messages you exchange with your companion, and the facts your companion remembers about you.
Usage & technical: basic logs (e.g. IP address, timestamps) needed to run and protect the service.

How we use it

To provide the service — generating replies and letting your companion remember you.
To personalize your experience (your name, language, and gender preferences).
To handle billing for paid plans.
To keep the service safe, prevent abuse, and comply with the law.

AI processing

To generate your companion's replies, the content of your conversation is sent to our AI model provider (via OpenRouter) for processing. We share only what's needed to produce a reply, and we choose providers under appropriate data terms. Your companion is an AI; conversations are processed by automated systems.

Who we share with

We don't sell your personal data. We share it only with service providers who help us run lublu, under contracts that protect it: our AI/model and hosting providers, and our payment processor / merchant of record (Lemon Squeezy) for paid plans. We may disclose data if required by law.

Where your data is processed

lublu is hosted in the EU (Germany). Some providers may process data outside the EU; where that happens, we rely on appropriate safeguards (such as standard contractual clauses).

How long we keep it

We keep your account and conversation data while your account is active. When you delete your account, we delete your personal data, except where we must keep limited records (e.g. for billing or legal reasons).

Your rights

Under the GDPR you can access, correct, delete, or export your data, object to certain processing, and withdraw consent. To exercise any right, email [email protected]. You can also delete your account from within the app. You have the right to complain to your local data protection authority.

Cookies and local storage

We use your browser's local storage to keep you signed in and remember your language preference. We don't use third-party advertising trackers.

Children

lublu is strictly for adults (18+). We don't knowingly collect data from anyone under 18. If you believe a minor has used lublu, contact us and we'll remove the data.

Changes

We may update this policy. Material changes will be posted here with a new date.

Contact

Privacy questions: [email protected].