Privacy Policy

1. Introduction

Lunadeck (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform to publish web applications to Android (and, in the future, iOS). Please read this policy carefully. If you do not agree with its terms, please discontinue use of our services.

2. Information We Collect

We may collect the following categories of information:

• Account information: Name, email address, and any OAuth identifiers (e.g. Google) you use to register. Authentication is handled by our identity provider, Clerk — we never see or store your password.
• Billing information: Payment details are processed securely by our payment provider, Stripe. We do not store full card numbers; we retain only a Stripe customer identifier.
• Usage data: Pages visited, features used, build logs, and interaction events to help us improve the platform.
• Device and browser data: IP address, browser type, operating system, and referring URLs collected automatically via cookies and server logs.
• Communications: Messages you send us via support channels or feedback forms.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our services.
• Process transactions and send related information such as receipts and invoices.
• Respond to your comments, questions, and support requests.
• Send administrative emails, such as account confirmations and security notices.
• Send marketing communications where you have opted in (you may opt out at any time).
• Monitor and analyze usage patterns to improve user experience and platform stability.
• Detect, prevent, and address fraud, abuse, or security incidents.
• Comply with applicable legal obligations.

4. Cookies and Tracking Technologies

We use only the cookies strictly necessary to run the platform: authentication cookies set by our identity provider (Clerk) to maintain your signed-in session, plus a single themepreference stored in your browser's local storage to remember light or dark mode. You can control or clear these through your browser settings, though clearing the authentication cookies will sign you out.

We do not use analytics, advertising, or third-party tracking cookies, and we do not run a web analytics product at launch. For more detail, see our Cookie Policy.

5. Sharing Your Information

We do not sell your personal information. We rely on the following sub-processors to operate the Service, each contractually bound to protect your data and to use it only to provide their service to us:

• Clerk — authentication and identity. Stores your name, email address, OAuth identifiers, and hashed password.
• Stripe — subscription billing and payment processing. Handles your payment method and invoice data.
• OpenRouter — AI-powered checks on your project. Receives slices of your uploaded source at build time to generate findings; the content is not retained by OpenRouter or by us beyond the original source archive.
• Amazon Web Services (SES) — delivery of transactional and notification email. Receives your email address and message contents.
• Hetzner — cloud hosting. Our databases, object storage, and application servers run on Hetzner infrastructure, where your data is stored at rest.

We may also share information in these circumstances:

• App stores: When you publish an application, certain metadata is shared with Google Play (and, in the future, the Apple App Store) as required to complete the submission.
• Legal authorities: If required to do so by law or in response to valid legal process (e.g., a court order or subpoena).
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention and financial record-keeping.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable export of your data.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please email privacy@lunadeck.io. We respond to verified data subject access and deletion requests within 30 days.

9. Children's Privacy

Our services are intended only for users aged 18 and over, consistent with our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. International Data Transfers

Lunadeck operates globally. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws, including Standard Contractual Clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you via email or a prominent notice on our platform. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: