Updated and effective: October 24, 2026
Lunara is provided by Beijing Hangxing Future Technology Co., Ltd. ("we"). This policy covers stories, AI chats, photos, voice and in-app purchases. Privacy contact: [email protected].
1. Information and purposes
- Chat content: text, action descriptions, selected photos and recordings, necessary conversation context, memories and character settings, to generate replies, understand images, transcribe recordings, synthesize speech and generate scene images.
- Account and device information: a generated device identifier, user ID, access credentials, language and preferences, to sign in, restore history and associate purchases. Device accounts are available; optional email registration, sign-in or linking also involves an email address and protected password verification information.
- Network and operational information: IP address, request times, errors and necessary usage records, to connect, troubleshoot, prevent abuse and protect the service.
- Purchases: product IDs, transaction proofs, subscriptions, refunds and point records, to verify purchases and deliver benefits. Stores process payments; we do not directly collect full card numbers or payment passwords.
- Support: contact details and information you voluntarily email, to answer requests and exercise privacy rights.
We do not sell personal information or use your chats, photos or recordings to train our own AI models. Choosing a photo does not grant us access to your entire library. We do not continuously record when you are not using recording.
2. AI services and recipients
Our servers provide the service and send necessary information to these providers according to the feature used. Not all providers are called for every chat.
- DeepSeek: chat text, necessary context, memories and character settings for replies; selected images or descriptions when using an image-capable model. Official Privacy Policy.
- MiniMax: recordings for transcription, or text, language and voice settings for speech synthesis. API Privacy Policy and API Terms.
- Alibaba Cloud Wanxiang (Model Studio): scene descriptions, prompts and applicable character reference images for image generation. Official privacy and security notice.
We send information necessary for the feature, rather than full account profiles or purchase proofs as AI conversation content. Providers' retention, processing locations and uses are governed by the applicable API terms. Our storage rules and commitment not to train our own models do not mean every provider offers zero retention or an absolute no-training guarantee. Providers may process requests in locations different from our own servers.
We require recipients to provide protection at least equivalent to this policy: limited purposes, confidentiality, transmission and access safeguards, appropriate retention and assistance with deletion. We verify these requirements through applicable service agreements, data processing terms and security measures, and must stop transfers if equivalent protection cannot be met. Public policy links are not evidence of an independent certification or an undisclosed zero-retention agreement.
3. Consent and choices
Before you first use interactive services, the app summarizes data processing and provides expandable details on data, purposes and current providers, plus a link to this policy. AI processing starts only after you select “Agree and continue” and your permission is successfully saved. Reading a policy is not consent. You may select “Not now” and continue reading stories.
The policy version, choice, timestamp and language are saved to your current user account, across characters. A new account or material change requiring renewed permission prompts again. Withdraw under My Profile → Settings → AI data sharing to stop new AI requests. Withdrawal cannot recall requests already sent and does not automatically delete existing records; see section 5.
Photo and microphone permissions are separate from AI consent and can be managed in device settings. Declining them does not prevent reading.
4. Locations and retention
Our service data is currently stored on servers in Shanghai, China. We plan to migrate to Singapore, but that migration has not been completed. When the actual location changes, we will update this policy and provide notices and other measures required by law. AI providers may process data elsewhere; necessary international transfers follow applicable law and the relevant service terms.
Chat photo and recording attachments currently have a default validity period of 30 days and then follow the existing file recycling process. We plan to change attachment retention to seven days in a future release. That change is not yet in effect, and we will update this policy before implementation. The plan does not cover avatars, chat text, history, memories, purchase records or records independently retained by providers as required by law. Downloaded device copies may remain until local data is cleared.
Chat text, history and necessary memories remain until you clear the chat, delete the account or they are no longer needed to provide the service. Purchase, security and consent records remain as needed for entitlements, evidence of consent and legal obligations, then are deleted or anonymized. Backup remnants are removed through backup rotation and are not used for normal service.
5. Access, withdrawal and account deletion
View or clear chats in the app, or withdraw AI permission in Settings. Clearing chats does not delete an account or all transaction records.
To delete your account and associated personal information, or request access, correction, a copy or deletion, email [email protected] with your request and user ID from Settings. Do not send passwords or full payment details. After necessary identity verification we respond within applicable legal time limits. We explain legally required retention and restrict its use. Uninstalling does not delete the server account or cancel subscriptions; cancel subscriptions through the purchase platform.
6. Security and other providers
We use authentication, necessary access controls and transmission safeguards. Stores and infrastructure, security and operational providers process information only as needed for their services or legal obligations, under corresponding confidentiality and protection duties.
Avoid unnecessary sensitive information and do not submit another person's information without permission. We take remedial measures and provide legally required notices if a personal data security incident occurs.
7. Children and changes
Observe the store age rating and applicable law. The service is not directed at children. If we learn that a child's information was processed without required guardian authorization, we take appropriate measures, including deletion. Guardians may email us.
We update this policy when processing changes. Material changes requiring consent, including new recipients, data types or purposes, are disclosed and authorized before new processing.