Privacy Notice

1. Who we are

This Privacy Notice describes how Lunkwill AI ("we", "us", "our") collects, uses, and protects information about you when you use Lunkwill ("the Service"). It applies to app.lunkwill.ai, the Lunkwill desktop app, and our marketing site at lunkwill.ai.

2. Information we collect

We collect information in three categories:

• Account information — when you sign in via Google OAuth, we receive your email address, name, and profile photo from Google. We do not receive your Google password.
• Content you create — files you upload, projects you create, messages you send to AI agents, and outputs the agents produce. This is the working content of the Service.
• Operational data — minimal logs we use to operate the Service: timestamps of actions, error messages, and usage counters. We do not run third-party trackers, advertising pixels, or fingerprinting on the in-product surfaces.

3. How we use it

• To provide the core Service — running AI agents, storing your projects, syncing across devices.
• To send instructions and content you generate to AI model providers on your behalf (see §5).
• To respond to support requests you send us.
• To detect abuse, fraud, or unauthorized access.
• To send you transactional product emails (e.g., security alerts, account changes). We do not send marketing emails without separate consent.

4. Legal basis (EU/UK users)

For users in the EU, UK, or other GDPR jurisdictions, we process your data on the basis of: (a) contract performance — to provide the Service you signed up for; (b) legitimate interests — to keep the Service secure and improve it; and (c) consent — for any processing that goes beyond the above (we will ask explicitly).

5. Sharing with third parties

We share data only with service providers that operate the Service on our behalf:

• AI model providers (currently Anthropic): to fulfill agent tasks, the content of your messages and any tool outputs are sent to the provider. We pass the minimum content needed to complete the task.
• Infrastructure providers — Railway (compute, database), GitHub (release hosting, auto-update). All US-based; data may transit through their networks.
• Email and waitlist — Loops handles waitlist signups for the marketing site (lunkwill.ai) and any transactional email we send.
• Authentication — Google OAuth for sign-in.

We do not sell your data. We do not share your data for advertising purposes. We do not use your content to train models without your explicit, separate consent.

6. Bring-your-own-key (BYOK)

If you provide your own AI provider API key (e.g., Anthropic), we encrypt it at rest using AES-256-GCM with a key managed by us, and decrypt it only when calling the provider on your behalf. Your key is never logged or shared.

7. Data retention

We retain your account data and content for as long as your account is active. If you delete your account, we delete or anonymize your content within 30 days, except where retention is required for legal, tax, or security reasons. Operational logs are retained for up to 90 days.

8. Your rights

You can:

• Access the data we hold about you
• Request correction of inaccurate data
• Export your projects and messages in a machine-readable format
• Delete your account and have your data removed (subject to §7)
• Object to certain processing or withdraw consent at any time

To exercise any of these, email hello@lunkwill.ai. We will respond within 30 days.

9. Security

We use industry-standard practices: encrypted connections (TLS) for all traffic, encryption at rest for sensitive fields (BYOK keys), short-lived access tokens, and least-privilege access for our team. No system is perfectly secure, but we work to minimize risk.

10. International transfers

We are US-based, and our infrastructure providers are US-based. If you use the Service from outside the US, your data will be transferred to and processed in the US under appropriate safeguards (such as Standard Contractual Clauses with our processors).

11. Children

Lunkwill is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has shared data with us, contact us and we will delete it.

12. Changes to this notice

We may update this Privacy Notice as the Service evolves. The "Last updated" date at the top reflects the most recent version. For material changes, we will notify you via email or in-product.

13. Contact

Questions about your privacy or this notice? Reach us at hello@lunkwill.ai.