Privacy Policy

Last updated: 1 September 2026

In short: we collect what's needed to run lublu and remember you, we don't sell your data, your chats are private, and you can delete everything anytime.

This policy explains how Belov Digital Agency, Inc. (a Delaware corporation, USA) ("lublu", "we"), operator of lublu.ai, handles your personal data. We are the data controller under the GDPR.

What we collect

Account: your email and a password (stored only as a secure hash). You can also use LUBLU as a guest — a guest account has no email until you choose to save it.
Profile: the name you give, and optionally your gender (used so your companion addresses you correctly).
Conversations & memory: the messages you exchange with your companion, and the memory built from them — facts, moments, open threads and summarized "memories". You can view, correct, pin, delete and export all of it on the Our story screen in the app.
Photos: if you request a photo from your companion, we generate and store that AI image so it stays in your chat.
Push notifications: if you enable them, we store your browser's push subscription so your companion can reach out first. You can disable this in your browser at any time.
Usage & technical: basic logs (e.g. IP address, timestamps) needed to run and protect the service.

How we use it

To provide the service — generating replies and letting your companion remember you.
To personalize your experience (your name, language, and gender preferences).
To handle billing for paid plans.
To keep the service safe, prevent abuse, and comply with the law.

AI processing

To generate your companion's replies, the content of your conversation is sent to our AI model providers (routed via OpenRouter; currently Anthropic for conversation, and fal.ai for photo generation when you request a photo) for processing. We share only what's needed to produce a reply, and we choose providers under appropriate data terms. Your companion is an AI; conversations are processed by automated systems.

Who we share with

We don't sell your personal data. We share it only with service providers who help us run lublu, under contracts that protect it: our AI/model and hosting providers, and our payment processor for paid plans (Stripe — it receives your payment details directly; we never see your full card number). We may disclose data if required by law.

Where your data is processed

LUBLU is hosted in the United States, with content delivery and security by Cloudflare. Some providers may process data outside the EU; where that happens, we rely on appropriate safeguards (such as standard contractual clauses).

How long we keep it

We keep your account and conversation data while your account is active. When you delete your account, we delete your personal data, except where we must keep limited records (e.g. for billing or legal reasons).

Your rights

Under the GDPR you can access, correct, delete, or export your data, object to certain processing, and withdraw consent. To exercise any right, use the Our story screen in the app (view, correct, export, delete — including full account deletion), or email [email protected]. You have the right to complain to your local data protection authority.

Cookies and local storage

We use your browser's local storage to keep you signed in and remember your preferences. Google Analytics runs only after you accept it in the cookie banner; declining keeps it fully off. We don't use third-party advertising trackers.

Children

lublu is strictly for adults (18+). We don't knowingly collect data from anyone under 18. If you believe a minor has used lublu, contact us and we'll remove the data.

Changes

We may update this policy. Material changes will be posted here with a new date.

Contact

Privacy questions: [email protected].