Privacy

Effective 2026-07-24

Short version

No trackers, no analytics, no fingerprinting. We never log your prompts and we never train models on your data. How much stays on your device depends on which way you run LU:

• Local mode (desktop app on your own hardware): your prompts, generations, chats and files never leave your machine. LU talks straight to whichever AI backend you have installed (Ollama, LM Studio, ComfyUI). Nothing in that path touches our cloud.
• LU Cloud (the hosted service): generation runs on our managed GPUs, so your prompts and inputs are processed off-device. What that means, and how briefly we keep anything, is spelled out below.

How LU Cloud processes your requests

Chat, image and video run on managed NVIDIA H100, A100 and B200 class GPUs operated by our infrastructure partners, not on your device. Your prompts and any inputs are sent to those partners solely to produce your result and are returned to you. We do not sell them, and we do not train models on them. We do not claim confidential-compute / TEE guarantees on this path.

What we store, in the cloud

• Your email address (for account login).
• A Stripe customer and subscription reference. Stripe processes the payment; we never see your full card details.
• The desktop app’s public key (used to verify it’s really your app when you connect it to the cloud).
• The media you generate, in a private, per-account library only you can read (auto-deleted — see Retention).
• Trained character models you create, on your private shelf, until you delete them or your account.
• Your chat history only if you turn on cross-device sync (off by default) — then it is stored in a private, per-account row only you can read. With sync off, your conversations never leave your browser.

What we explicitly do not do

• No product analytics, telemetry, session replay, or ad pixels.
• No device fingerprinting.
• No logging of prompt or reply content. Our server logs are operational metadata only (event, model, status code, token counts — never message content).
• No storing of your IP address. It is used only in-memory, for the moment it takes to rate-limit a request, then discarded.
• No training on your data. No selling of your data.

Retention

• Prompts & uploaded inputs: discarded as soon as the generation finishes.
• Generated media: automatically deleted after 7 days. (Media that briefly transits a GPU partner’s own store is likewise dropped by them within 7 days.)
• Trained character models & synced chat history: kept until you delete them, or your account.
• Account data: as long as your account exists. Stripe billing records: 7 years (German tax law). Consent records: 1 year after the last update.

Delete your account any time from the app (Account → Danger zone) or by emailing us. It cancels your subscription and purges everything we hold — database rows and stored media alike.

Sub-processors

• DigitalOcean: website + API hosting.
• Supabase: auth + database (EU region).
• Managed GPU inference & render partners: cloud LLM inference and image/video rendering; they process your chat and Create prompts and inputs when you use LU Cloud.
• Stripe: payment processor (Stripe Payments Europe, Ireland).
• Zoho / Resend: transactional and auth email.
• Cloudflare: DNS (global).

Cookies

We split cookies into three categories. You can change your choice any time from the banner that appears at the bottom of the page on your first visit.

• Essential: Supabase auth session, CSRF protection, and the consent record itself. Cannot be switched off; without them you can’t log in.
• Analytics: LU currently loads no analytics of any kind. The toggle exists so this notice stays honest if that ever changes; today, turning it on loads nothing.
• Marketing: LU does not currently load any marketing pixels; the toggle exists so this notice stays honest if that changes.

Your rights (GDPR)

Email privacy@lu-labs.ai to get a data export, correct, or delete your account. We’ll act within 30 days. You also have the right to lodge a complaint with your data-protection authority (Art. 77 GDPR).

Lawful basis

Account + license data and serving the cloud requests you make: Art. 6 (1) (b) GDPR, performance of a contract. Any future optional analytics would run only on Art. 6 (1) (a) GDPR, your consent, revocable at any time via the banner.

Data-processing agreements

Where required, we have signed data-processing agreements (AVV) with the sub-processors listed above per Art. 28 GDPR.

Plain-language summary. The legally binding text is in the Terms.