lightlynIn short
- We process your email address and sign-in details, the prompts and images you submit, your credits, subscription and usage records, and necessary technical logs.
- To generate images, your prompts and reference images are sent to OpenAI. Payments are handled by Dodo Payments; we never see your full card number.
- We don’t sell personal information, don’t run targeted advertising and don’t use your content to train models.
- You can download your work at any time, and email us to access, correct or delete your data.
1. Who is responsible
Lightlyn is operated by Linger, an individual developer, who is the controller of the personal information described in this policy. This policy covers lightlyn.com, image.lightlyn.com, the Lightlyn account, Lightlyn Images and, once released, the Lightlyn desktop app. For privacy questions and requests, contact help@lightlyn.com.
2. Information we process
| Category | What it includes |
|---|---|
| Account information | Email address, account ID, sign-in methods and sign-in history. If you sign in with Google, Google shares the basic profile you authorize (which may include your name and picture). We do not access your Gmail, Drive or contacts. |
| Your creations | Prompts, uploaded reference images, generated images and thumbnails, conversation history, the model, aspect ratio and resolution you chose, and how each edit relates to the previous ones. |
| Credits, subscriptions and orders | Credit balance and records of check-ins, reservations, charges, expiries and returns; library usage; order and subscription IDs, amounts, currencies, dates, billing periods and status. Card numbers and other payment details are collected directly by Dodo Payments. |
| Usage and technical information | Task status and duration, error messages, IP address, browser and device information, security events and diagnostic logs. |
| Safety review records | The outcome of automated checks on prompts, reference images and results, violation categories and records of manual handling. |
| What you send us | Emails, reports, appeals and attachments. |
Please don’t include sensitive personal information unrelated to your creation in prompts or images, such as ID numbers, health information or private photos of other people.
3. Purposes and legal bases
- Providing the services: signing you in, generating and editing images, keeping conversation context and your library, charging and returning credits. Basis: performance of our contract with you.
- Payments and accounting: recording orders and subscriptions, granting and reconciling credits, handling refunds and payment disputes, and meeting tax and accounting obligations. Basis: performance of contract and legal obligations.
- Safety and compliance: enforcing the Acceptable Use Policy, preventing abuse and fraud, and protecting the services and other users. Basis: our legitimate interests and legal obligations.
- Support and notices: answering your requests, and sending service messages such as sign-in emails and notices about subscriptions, price changes and updates to our terms. Basis: performance of contract and legitimate interests.
- Improving the services: improving features and reliability based on aggregated or de-identified usage statistics. Basis: legitimate interests.
We do not sell your personal information, use it for cross-context targeted advertising, or use your prompts, uploaded images or generated images to train any AI model. If we ever need to process information based on consent (for example marketing emails or optional analytics), we will ask for your consent first, and you can withdraw it at any time.
4. Service providers and sharing
We share information with the following providers only as far as needed to provide the services. Each processes data under its own agreements and privacy policy.
| Provider | Purpose | Information involved |
|---|---|---|
| Supabase | Account sign-in and authentication (US region) | Email address, account ID, sign-in history, third-party sign-in profile |
| Verifying your identity when you choose Google sign-in | The basic profile you authorize with Google; not your creations | |
| Cloudflare | Website hosting, network security, request forwarding (AI Gateway), database, task queues, private image storage and image compression, and sending service emails such as sign-in emails (Email Service) | Technical information, your creations, credit and task records, email addresses and email content |
| OpenAI | Generating and editing images | Prompts, reference images, the context needed for edits, and results |
| Dodo Payments | Processing payments, subscriptions, taxes, receipts, refunds and payment disputes as Merchant of Record | Name, email address, billing address and country, payment details, order and subscription information |
About OpenAI: to support continued editing, our requests enable response storage, so OpenAI keeps application state under its policies (currently 30 days by default) and may retain request records for abuse monitoring. Under OpenAI’s API data policy, data submitted through the API is not used to train its models by default. See OpenAI’s data controls.
Apart from the above, we disclose information only when required by law, a court order or a lawful request from a public authority; to investigate and stop illegal activity or violations and protect the safety of users and others; or with your consent.
5. Lightlyn for Mac
Lightlyn for Mac has not been released yet. As currently designed, features such as file preview and format conversion run on your computer and upload nothing. Only when you choose a cloud feature (such as asking a question, transcription or read-aloud) does the app send the minimum content needed for that feature to our services and the relevant model provider. When the app is released, we will add the specific information it processes to this policy.
6. Retention and deletion
- Your work and conversations: kept while your account is active, and you can download them at any time. By default, work is never deleted automatically for going over your library storage. If you turn on “When the library is full, remove the oldest images”, then whenever you go over, images and their reference images are permanently deleted starting from the oldest, while conversation text is kept. If we ever need to clean up accounts that stay over their storage for a long time, we will give at least 30 days’ notice.
- Account information: kept while your account is active. When you ask us to delete your account, we delete the account, your work and conversations within 30 days, except for the records listed below.
- Order and credit records: kept for the periods required by law, to meet tax and accounting obligations and handle payment disputes.
- Safety review and violation records: kept for a reasonable period after a case is closed, to handle appeals and prevent repeat violations, or longer where the law requires.
- Technical logs: used for troubleshooting and security, and kept for no more than 30 days. Records of forwarded model requests keep only usage, cost, duration and status, not prompts or images.
After you delete images or your account, providers’ backups and logs may take some time to clear; we cannot guarantee that every copy disappears immediately. To request deletion, contact help@lightlyn.com from your account email address. We may need to verify your identity first.
7. International processing and security
We and our providers run servers in several countries and regions, including the United States, so your information may be processed outside the place where you live. Where the law requires, we rely on safeguards such as standard contractual clauses offered by our providers for international transfers.
We use encrypted connections to transfer data, private images can only be read after your account is verified, and we limit who can access data. No system is perfectly secure, however. If a security incident occurs that the law requires us to report, we will notify you as required.
8. Cookies and local storage
We use necessary cookies and browser local storage to keep you signed in, keep the services secure and remember your language and appearance settings. Cloudflare may set cookies for security. We do not currently use advertising cookies or third-party analytics; before we do, we will update this policy and ask for your consent where the law requires.
9. Your rights
Depending on the law where you live (for example the GDPR in the EU and UK, or the CCPA in California), you may have the right to access the information we hold about you and get a copy; correct inaccurate information; delete information; restrict or object to certain processing; receive a portable copy of your data; and withdraw consent you have given. You can also complain to your local data protection authority.
To exercise these rights, email help@lightlyn.com. We will reply within 30 days and may need to verify your identity first. You will not be treated differently for exercising your rights.
10. Minors
The Lightlyn services are for users aged 18 and over, and we do not knowingly collect personal information from minors. If you believe a minor has given us information, please contact us and we will delete it.
11. Updates to this policy
We may update this policy and will show the version and date on this page. We will tell you about important changes in advance by email or in the service. This policy may be offered in several languages. The English version is the official version; if a translation differs from it, the English version prevails.