Privacy Policy

This Privacy Policy describes how Lofy AI collects, uses, stores, discloses, and otherwise processes personal information when you access our website, create an account, use our AI assistant, connect third-party services, purchase a subscription, or communicate with us.

For purposes of this Policy, "Lofy," "we," "our," and "us" refer to Lofy AI. "You" and "your" refer to the person or entity using the Services.

• Account and identity information, such as your phone number, email address, display name, account identifiers, and verification status.
• Authentication and session information, including session tokens, login activity, security checks, and related device or browser metadata.
• User content you choose to submit, including prompts, messages, memories, reminders, calendar details, feedback, uploaded audio, uploaded images, and related instructions.
• Integration data associated with connected services, including Google Calendar authorization details, calendar event references, and settings needed to operate approved integrations.
• Billing and transaction information associated with subscriptions and payments, including subscription status, plan identifiers, Stripe customer references, and payment metadata received from our billing providers.
• Usage, operational, and diagnostic information, such as feature interactions, logs, analytics events, token-usage records, and service performance or reliability data.

• To provide, maintain, secure, and improve the Services.
• To authenticate users, manage accounts, enforce access controls, and prevent abuse, fraud, or unauthorized activity.
• To process prompts and generate AI-assisted responses, scheduling actions, memory retrieval, summaries, or related outputs requested through the Services.
• To operate reminders, events, notifications, memory features, sharing features, and connected-service workflows.
• To process subscription purchases, manage billing, and administer service eligibility tied to paid plans.
• To measure performance, understand product usage, debug failures, and improve reliability, safety, and user experience.
• To comply with legal obligations, resolve disputes, and enforce our agreements.

Lofy is an AI-powered assistant. In order to generate responses and perform requested assistant functions, we may send prompts, instructions, relevant conversation context, uploaded media, or structured task data to third-party model providers or compatible inference providers used to operate the Services.

These providers process data on our behalf or as independent service providers for the purpose of delivering requested AI functionality. Because model routing may vary by environment and configuration, the specific provider used for a request may differ across deployments or features.

• AI processing may include text prompts, conversation context, memory retrieval context, scheduling details, and uploaded media submitted for assistant features.
• We do not describe all provider practices in this Policy; third-party providers may maintain their own terms and privacy notices.
• You should not submit highly sensitive information unless you are comfortable with that information being processed to provide the requested feature.

We may disclose personal information to third parties where reasonably necessary to operate the Services or where required by law.

• Infrastructure, hosting, database, caching, storage, and security vendors that support the operation of the Services.
• AI and machine-learning providers used to generate responses or support assistant functionality.
• Analytics and telemetry providers used to understand service performance and product usage.
• Payment processors and billing vendors, including Stripe, for subscription and payment administration.
• Email or communications providers for verification, transactional notices, and support-related messages.
• Google or other third-party integration providers when you choose to connect your account and request related functionality.
• Professional advisers, regulators, law enforcement, courts, or counterparties in connection with legal requirements, investigations, or dispute resolution.

We use cookies and similar technologies for account authentication, session continuity, security, user-interface preferences, and service analytics. Some cookies are necessary for the Services to function properly, while others help us understand usage and improve performance.

Additional details are available in our Cookie Policy.

We retain personal information for as long as reasonably necessary to provide the Services, maintain legitimate business and security records, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods may vary depending on the type of data, the feature involved, the sensitivity of the information, operational needs, and applicable legal requirements. We may also retain limited backup, logging, or archival data for a period of time after live records are changed or deleted.

Lofy relies on service providers and technical infrastructure that may process personal information in jurisdictions other than the country in which you reside. By using the Services, you understand that your information may be transferred to and processed in other jurisdictions, subject to applicable legal requirements.

Where required by applicable law, we will use appropriate safeguards for cross-border transfers.

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access restrictions, monitoring, authentication controls, and related safeguards appropriate to the nature of the Services.

No method of transmission, storage, or processing is completely secure. Accordingly, we cannot guarantee absolute security.

• You may access, update, or correct certain account information through the Services where those controls are available.
• You may request deletion of your account or personal information, subject to applicable legal, contractual, security, fraud-prevention, and recordkeeping requirements.
• You may disconnect Google or other approved integrations through the applicable provider settings or by contacting us where needed.
• Depending on your location, you may have additional rights under applicable privacy laws, including rights to access, portability, restriction, objection, or complaint.

The Services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us, please contact us so we can review the matter and take appropriate steps.

We may update this Privacy Policy from time to time. If we make changes, we will post the revised version on this page and update the "Last updated" date. Your continued use of the Services after the effective date of an updated Policy is subject to the revised Policy.

Questions, privacy requests, and notices regarding this Privacy Policy may be sent to us at the address below.