Privacy Policy

At Luno AI (operated by InnoWave SRL), we take your privacy seriously. This Privacy Policy explains our privacy-first approach and how we handle your data when you use our mobile application and web services.

1. Data Collection & Privacy

We are committed to protecting your privacy. All your personal data is stored locally on your device:

• Optional username only (no email required) - stored locally on your device
• Custom habit lists you create - stored locally on your device only
• Nutrition data (food logs, meal photos, calorie tracking) - stored locally on your device
• We track only anonymous action events (button taps, feature usage) - NOT habit names or personal content
• Basic device information only for crash diagnostics (via PostHog)

2. How We Process Your Information

Your data remains on your device and is processed as follows:

• All personalization happens locally on your device
• AI features use OpenAI only for habit analysis and photo scanning (see section 3)
• We track anonymous actions (taps, screen views) but NOT your habit names or personal content
• No email communication (no account email required)
• App improvements are based on anonymous usage patterns and crash reports

3. Third-Party AI Services (OpenAI)

We use OpenAI exclusively for two features: (a) Habit analysis - to provide AI-powered habit suggestions and coaching insights; (b) Food photo scanning - to analyze meal photos and extract nutritional information. When using these features: Your data is sent to OpenAI's API solely for processing your request; Data is NOT stored by OpenAI or used to train their models; User images (food scans) are processed transiently. They are sent securely to the AI provider for immediate analysis and are immediately discarded. We do not 'collect' or save user photos on our servers or the third-party's servers; the data is used strictly for the momentary function of the analysis and is not retained. Processing occurs in accordance with OpenAI's Enterprise Privacy Policy; No personal identifying information is sent - only the specific habit description or food image. You control when AI features are used - they require explicit actions (asking for suggestions or scanning a photo).

4. Data Sharing & Third Parties

We do not collect, store, or sell your personal information. The only third-party services we use are: (a) OpenAI - only when you explicitly use AI habit analysis or food photo scanning features; (b) PostHog - for anonymous crash reporting and tracking anonymous action events. We classify this data usage as 'App Functionality' because monitoring these successful screen loads and button interactions is essential for maintaining the stability and core operation of the application.

5. Data Security

Your data security is paramount: All personal data (username, custom habits, tracking data) is stored locally on your device using secure device storage; Your habit names and personal content never leave your device; Only anonymous action events are sent to PostHog for analytics (no personal identifiers); When you use AI features, only the specific habit description or food image is sent to OpenAI; No account email, no passwords, no cloud storage of your personal data. Your privacy is protected by design.

6. Data Retention

All your data is stored on your device and remains there until you delete it. We do not have cloud sync or account systems - everything stays local. Anonymous analytics data (action events) is retained by PostHog according to their retention policies, but contains no personal identifying information. Deleting the app from your device removes all your personal data immediately and permanently.

7. Your Rights & Control

You have complete control over your data:

• Full access to all your data - it's stored on your device
• Edit or correct any data directly in the app
• Delete the app to remove all local data immediately and permanently
• Export your data in portable format from the app settings
• We only track anonymous actions - no personal content or habit names

8. Cookies & Tracking

Our mobile app does NOT use cookies or tracking technologies. Our website uses minimal cookies only for: Essential functionality (authentication session); No advertising cookies; No analytics cookies; No tracking pixels. We do NOT track your behavior, browsing history, or usage patterns.

9. Children's Privacy

Our Service is not intended for children under 15 years of age. Since we do not collect account information or require registration, we cannot verify the age of our users. Parents and guardians are responsible for monitoring their children's use of the app. If you believe a child under 15 is using our Service, please contact us.

10. International Data Transfers

Since your data is stored locally on your device, there are no international transfers of personal data. Anonymous analytics events are sent to PostHog servers, which may be located internationally, but contain no personal identifying information. When you use AI features, only the specific habit description or food image is sent to OpenAI's API, processed according to OpenAI's data protection standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: