Privacy Policy

Last updated – 19 June 2025

Welcome to Lucrum Ltd

Lucrum Ltd ("Lucrum," "we," "our" or "us") operates the Lucrum mobile and web applications (the "Apps"), the informational website lucrumltd.com, and all related services, tools and content (collectively, the "Services").

We value your privacy and are committed to protecting the information you share with us. This Privacy Policy explains what data we collect, how we use it, with whom we share it, how long we retain it, and what rights and choices you have. Please read it carefully – the structure is designed to reflect the original policy while offering clearer and friendlier language.

Whenever you engage with your Lucrum AI companion, you control how much information you disclose. Our promise is simple: the private content of those interactions – including text, voice, photos, or videos you exchange with the AI – remains between you and the companion. We will never use that conversation data for advertising purposes nor share it with marketers. While we analyze usage patterns, such as how often certain features are used or the duration of visits, the content of your conversations is kept private.

Defined terms not explained in this Policy have the meanings assigned in our Terms of Service. If anything is unclear, you can always reach us at [email protected].


1. Information we collect

1.A Information you provide directly

You may voluntarily provide several types of information:

  • Account details: Name, e-mail address and password. When you sign in with Google or Apple we receive the basic profile data those providers share (such as your verified e-mail or display name) and a unique token so you don't need a separate password.
  • Profile basics: During onboarding, we request your date of birth, pronouns and employment status. These help the AI use appropriate language and content warnings.
  • Messages & media: Everything you type, dictate, record, or upload in the Apps – including text snippets, voice notes, photographs, and videos – is stored to allow the AI to remember context and provide an improved experience.
  • Preferences: You may tell us which topics interest you, set reminder times, or enable profanity filters. Over time, the AI also adapts, offering suggestions tailored to your preferences.
  • Payments & rewards: If you buy premium features, Stripe processes your card details; we only store a payment token, receipt, subscription tier and your reward balance (e.g. free message credits).

1.B Information collected automatically

Like most online services we collect some data automatically whenever you use the Apps or browse our website:

  • Device & network data: Operating system version, browser type, device model, IP address, cookie ID, preferred language, mobile carrier and general location (e.g. city or region).
  • Usage metrics:The screens you open, buttons you press, referral pages, session length, error reports, and diagnostic logs.

We record this data using cookies, pixel tags, and HTML5 local storage. Advertising partners place their own cookies on our marketing site to measure ad performance, but they never receive your chat transcripts or private uploads.


2. How we use information

2.A Purposes – the short version

We use your data to:

  • Run the core functionality of the Apps and websites.
  • Personalize the AI companion's responses.
  • Keep the Services secure, legal and enjoyable.
  • Analyze trends to improve features and create new ones.
  • Send you service announcements, surveys or offers that may interest you.
  • Comply with regulations, enforce our Terms and defend legal claims.

2.B Purposes – the detailed table

PurposeApplication DetailsLegal BasisInformation Categories
Operating and administering the Services To provide and maintain the content and functionality of the Services, create your account, manage payments and transactions (including premium features), and handle inquiries or feedback. We also maintain customer relationships and send administrative updates.Contractual necessityAccount information, Profile information, Messages and content, Interests and preferences, Payments and transactions, Device and network data, Usage data.
Providing the core functionality of the Apps To offer a personalized AI companion experience, allowing customization of profiles, interests, and interactions. This includes syncing your activity across devices to ensure continuity and personalization.Contractual necessityAccount information, Profile information, Messages and content, Interests and preferences, Payments and transactions, Device and network data, Usage data.
Monitoring and protecting the Services To detect and prevent fraud, unauthorized access, or misuse. Ensures the security and integrity of our IT systems and data through maintenance, support, and hosting.Legitimate interestsAccount information, Profile information, Messages and content, Interests and preferences, Payments and transactions, Device and network data, Usage data.
Analyzing trends and improving Services To aggregate and anonymize personal information for usage analysis, feature enhancement, and strategic development. This helps us improve our Services and develop effective marketing strategies.Legitimate interestsAccount information, Profile information, Messages and content, Interests and preferences, Payments and transactions, Device and network data, Usage data.
Marketing and advertising the Services To send promotional emails, surveys, and updates about our Services and features. Also includes targeting and displaying ads online, where permitted by applicable laws.Legitimate interests, Consent (where required)Account information, Device and network data, Usage data.
Enforcing agreements and legal compliance To enforce and comply with our terms and policies, safeguard rights, verify age requirements, resolve disputes, recover payments, and comply with legal obligations.Legitimate interests, Legal obligationAccount information, Profile information, Messages and content, Interests and preferences, Payments and transactions, Device and network data, Usage data.

*Under the General Data Protection Regulation (“GDPR”) and similar laws, we rely on different legal grounds depending on the specific processing activity. “Contract” means the data is necessary to provide the Services you request. “Legitimate interest” means we process data in ways that are expected and do not unduly impact your privacy.

2.C Sensitive information

If you disclose sensitive topics such as health conditions, political views, religious beliefs or sexual orientation, we treat that data as strictly confidential. The AI uses this information only to maintain coherent and supportive conversations. We do not use sensitive data for advertising and will never sell it.


3. How we share information

3.A Service providers: We partner with cloud-hosting platforms, CDNs, customer support suites, e-mail delivery vendors, voice processing engines, and payment processors. They receive only the data necessary to provide their services and are bound by confidentiality agreements. 3.B Professional advisors: Lawyers, auditors, banks and insurers may access data only when reasonably required for their work. 3.C Advertising partners: We share pseudonymized analytics (IP address, ad ID, pages visited, referral URL) with advertising networks, but never share conversation text, images or audio. 3.D Authorities & enforcement: We may disclose information if required by law, court order or to protect rights, property and safety. If possible, we will notify you of such disclosures. 3.E Business transfers: If Lucrum Ltd is involved in a merger, acquisition or asset sale, your information may be transferred as part of the transaction, subject to confidentiality and consent where applicable.


4. Security

We employ multiple layers of defense:

  • TLS 1.3 encryption for data in transit.
  • AES-256-GCM encryption for data at rest.
  • Secure production databases with limited access.
  • Secrets stored in a hardened vault and rotated periodically.
  • Multi-factor authentication and least-privilege access controls for staff accounts.

While no platform can guarantee absolute security, we will inform you and relevant regulators of any breach that impacts your data.


5. Where data are stored

Our infrastructure is hosted in certified data centers located in the United States. These facilities are ISO 27001 and SOC 2 Type II certified. If you reside outside the US, local laws may grant you the right to request further information about cross-border data transfers. Please contact us for more details.


6. How long we keep data

We retain personal data only as long as necessary for the purposes described in this Policy or to comply with legal obligations. For example:

  • Chat messages are stored until you delete them or close your account.
  • Billing records are retained for at least seven years for tax compliance.
  • Aggregated analytics may be kept indefinitely.

We securely delete or anonymize data once retention periods expire.


7. Your Rights & Choices

7.A Opt-out of Marketing

  • You can unsubscribe from marketing emails or adjust your notification settings in the App. Transactional emails (e.g., receipts, security alerts) will still be sent.

7.B Opt-out of “Selling”

  • You can disable targeting cookies via the “Your Privacy Choices” link or through browser settings.

7.C Sensitive Data Controls

  • You control whether you share sensitive information with the AI. If you change your mind, you can delete specific messages or delete your entire account under Settings → Privacy → Delete account.

7.D Access, Correction, Deletion, Portability

  • Receive a copy of the personal information we hold.
  • Request correction of inaccurate or outdated data.
  • Request deletion of data we no longer need.
  • Request data in a structured, machine-readable format.
  • To exercise these rights, send a request to [email protected] We will verify your identity before fulfilling the request.

8. Use by minors

The Services are intended only for individuals aged 18 and older. We do not knowingly collect data from children. If we learn that someone under 18 has an account we will disable it and delete their data.


9. Changes to this Privacy Policy

We may update this Policy from time to time. Any significant changes will be communicated via email or in-app message. The revised Policy is effective upon posting unless otherwise stated.


10. Contact us

For questions, feedback, or complaints, please email [email protected], and our privacy team will respond as quickly as possible.