Luona is operated by Daniel Blazhevski (see the Imprint for the full address). This policy explains what the Luona app collects, why, and what you can do about it. It is written to be read, not to be survived.
When you run a decode, the screenshots (or pasted text) you choose are sent over an encrypted connection to our analysis function, which passes them to Google's Gemini model. They exist in memory for the few seconds the analysis takes and are then gone. They are never written to our database or file storage, and they are not used to train any model.
A conversation has two people in it. We treat the other person's messages with the same rule as yours: read once, discarded, never stored, never used for anything but your decode. We never identify, profile or contact anyone who appears in a conversation.
The website offers one-line reads of pasted text without an account. The text goes the same way as in the app — to the analysis function, then to Gemini, then gone. We do not store the text or the result. We keep only the time of the request and your IP address, for 48 hours, to limit how many free reads one connection can take in a day; and, if you arrived through a creator's link, that creator's code, so we can pay them.
If you ask to be told when the app is out, we store the address, the date, and the creator code you arrived with. We send one email when the app is live. We do not add you to a newsletter and we do not share the address. Write to hello@luona.app and we delete it.
The answers you give during onboarding, and the decode results, are stored against your account so the app can show your history and, if you name the person you are texting, his pattern across your own decodes. That name or nickname is a label you chose — we do nothing with it beyond grouping your own history.
The app creates an anonymous account on first launch — no email, no name. If you choose Sign in with Apple, we receive the identifier Apple gives us and, if you allow it, your email address, so your history survives a change of phone.
We store a per-device identifier — Android's ANDROID_ID, or Apple's identifier for vendor — to enforce the one-free-decode limit. It is not an advertising identifier, it is not shared with anyone, and it is deleted with your account.
We record which screens you reach and which actions you take — for example, that a decode completed or a reply was copied — so we can tell where the app is confusing. These events never contain your conversations, the content of a decode, or anyone's name.
Subscriptions are processed by Apple or Google. We never see your payment details. Our subscription provider tells us only whether your subscription is active and when it renews.
If you allow notifications, we store a push token so we can send the daily tip. Turn it off in your phone settings at any time.
When something in the app fails, we record what failed and on which screen, with the app version and your account identifier. These reports never contain your conversations or your decodes — only enough to tell us something is broken and where.
Some of these providers are based in the United States. Transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework, as applicable.
Screenshots and pasted chats: not kept. Your account, quiz answers and decodes: until you delete your account. Analytics events: up to 12 months. Purchase records: as long as tax law requires us to keep them.
You can ask for access to your data, correction, deletion, restriction, portability, or object to processing. The fastest route to deletion is in the app: Settings → Delete account and all data. For anything else, write to hello@luona.app. You also have the right to complain to a supervisory authority in your country.
Luona is for adults — 18 and over, on both sides of the conversation. We ask you to confirm this before your first decode, and the analysis refuses conversations that appear to involve minors.
If this policy changes in a way that matters, we will say so in the app before the change takes effect.