1) Summary of what we collect
We may collect:
A. Information you provide:
- Account information: name, username, email address
- Support communications: the content you send to customer support (including attachments you choose to provide)
- Content you choose to upload for AI features (e.g., beverage photos and text prompts), as described in Section 6
B. Information collected automatically:
- Device information: device model, operating system, language, unique device identifiers (as permitted by your device settings), network information
- Usage data and analytics: in-app interactions, feature usage, approximate timestamps, performance metrics
- Crash logs and diagnostics
- Location data: approximate or precise location, only if you grant permission
C. Cookies and similar technologies (when applicable):
- Cookies or similar identifiers for login sessions and preferences
- We may also use web beacons or similar technologies in connection with our web-based content
2) Location information
If you allow location access, we may collect approximate or precise location information to support features, improve the Service, and help protect against fraud and abuse. You can turn off location permissions at any time in your device settings. If you do not allow location, the Service may still work but some features may be limited.
3) Photos, face data, and biometrics
- We do not perform facial recognition.
- We do not collect or process biometric identifiers or biometric information for identification purposes.
- Beverage photos you upload for AI features are used only to provide the requested analysis and content generation, and are handled as described in Section 6.
- We do not use uploaded photos to build marketing profiles or for advertising targeting.
- We do not use your uploaded photos to train machine learning models.
4) How we use information
We use information to:
- Provide, operate, and maintain the Service
- Create and manage accounts, authenticate users, and remember preferences
- Personalize the Service and improve user experience
- Develop, improve, and test features (including reliability and performance)
- Monitor, prevent, detect, and address security incidents, fraud, abuse, or technical issues
- Provide customer support and respond to requests
- Comply with applicable laws and enforce our terms and policies
We do not sell your personal information.
5) Disclosure / sharing of information
We disclose information only as necessary and in the following situations:
- With your consent or at your direction
- With service providers (processors) who help us operate the Service (e.g., infrastructure, storage, security, customer support tooling), under contractual obligations to process data only on our instructions and to protect it
- For legal reasons: to comply with law, lawful requests, court orders, or to protect the rights, property, and safety of users, the public, or Lussi Team
- To protect our rights: to detect, prevent, or address fraud, security, or technical issues
AI input/output sharing: As described in Section 6, we do not share the images or text you submit for AI processing with third-party AI providers.
6) AI-powered features: uploads, processing, deletion, and user control
Lussi includes AI-powered beverage analysis and content generation. To use these features, you may choose to upload a beverage photo and/or provide text prompts (“AI Inputs”). We process AI Inputs on servers controlled by Lussi Team.
Important points:
- Optional: You fully control whether to upload AI Inputs and whether to generate content. You can use other parts of the Service without uploading, where available.
- Processing location: AI Inputs are processed on our own servers. We do not send AI Inputs to third-party AI providers for processing.
- No third-party sharing: We do not share AI Inputs or the generated results with third parties, except if you explicitly share them yourself (e.g., exporting or posting) or if required by law.
- No training / marketing use: We do not use AI Inputs to train machine learning models, and we do not use them for advertising or marketing profiling.
- Deletion: After processing is complete, AI Inputs and generated results are deleted from our servers promptly and are not retained for any longer than necessary to deliver the result to you. (If you choose to save/export content, it may remain on your device or wherever you save it.)
- Local storage by default: Where supported, results are stored on your device by default. If you choose to sync or back up content, you control that choice through your device or third-party settings.
7) Data retention
We keep information only for as long as needed for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Our typical retention periods:
- Account data: kept while your account is active
- After account deletion: we delete or anonymize personal data within 30 days (unless we must keep certain information for legal, security, or dispute-resolution purposes)
- Usage analytics: up to 12 months, then deleted or aggregated/anonymized
- Customer support content: up to 6 months, unless a longer period is needed to resolve an issue or comply with legal obligations
- AI Inputs and generated outputs: deleted promptly after processing as described in Section 6
8) Security
We use reasonable administrative, technical, and physical safeguards designed to protect information, including:
- Encryption in transit and, where appropriate, encryption at rest
- Access controls and least-privilege policies
- Regular security reviews/audits and monitoring
- Backups and recovery practices
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9) International data transfers
Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.
10) Your rights and choices
Depending on your location, you may have rights such as:
- Access: request a copy of your personal information
- Correction: request correction of inaccurate information
- Deletion: request deletion of your information
- Restriction/objection: request restriction of processing or object to certain processing
- Withdrawal of consent: where processing is based on consent, you may withdraw consent at any time
How to exercise rights:
- Email us at hathithuy52@outlook.com with your request and the email address associated with your account.
- We will respond within 5 business days, subject to verification and applicable law.
Location choices:
- You can enable/disable location permissions in your device settings.
11) Children / age requirement
The Service is intended for users who are at least 17 years old. We do not knowingly collect personal information from anyone under 17. If you believe a user under 17 has provided personal information, please contact us and we will take appropriate steps to delete it.
12) Changes to this privacy policy
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date. If changes are material, we may provide additional notice as required by law.
13) Contact us
If you have questions or requests about this Privacy Policy, contact:
- Lussi Team
- Email: hathithuy52@outlook.com