Privacy Policy

Effective date: February 28, 2026

Last updated: February 28, 2026

This Privacy Policy describes how Lobb ("we," "us," or "our") collects, uses, stores, and shares information when you use the Lobb mobile application, website, and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you create an account, we collect your name and email address through Apple Sign-In or Google Sign-In. We do not collect or store your password; authentication is handled by your identity provider.
• Conversation Data: Text messages and conversation content that you paste or type into the Service for analysis and coaching.
• Screenshots: Images of conversations that you upload for AI-powered analysis. These images are processed to extract text and are not shared publicly.
• Tone Preferences: Your selected tone settings and coaching preferences.
• Support Communications: Any messages you send to our support team.

1.2 Information Collected Automatically

• Usage Data: How you interact with the Service, including features used, screens viewed, actions taken, and timestamps.
• Device Information: Device type, operating system version, unique device identifiers, and app version.
• Performance Data: Crash logs, error reports, and diagnostic data to maintain and improve service reliability.
• API Usage Metrics: Records of API calls made on your behalf for cost monitoring and abuse prevention.

1.3 Information from Third Parties

• Authentication Providers: When you sign in with Apple or Google, we receive your name and email address (or a relay email address in the case of Apple's Hide My Email feature).
• Payment Processors: We receive subscription status and transaction identifiers from Apple (via RevenueCat) to manage your subscription. We do not receive or store your payment card details.

2. How We Use Your Information

• Provide the Service: Analyze your conversations, generate message suggestions, deliver coaching insights, and track conversation progress.
• AI Processing: Your conversation data and screenshots are sent to third-party AI providers (currently OpenAI) for analysis and message generation. This data is sent via encrypted API calls and is subject to the AI provider's data usage policies. We do not use your data to train AI models.
• Personalization: Tailor coaching advice, tone, and suggestions to your preferences and conversation context.
• Subscription Management: Process and manage your subscription status, usage limits, and in-app purchases.
• Improve the Service: Analyze aggregated usage patterns to develop new features, fix bugs, and improve performance.
• Safety and Security: Detect and prevent fraud, abuse, spam, and security threats.
• Communications: Send push notifications related to your conversations (e.g., ghost risk alerts, daily challenges) if you opt in. We do not send marketing emails without your consent.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

• AI Service Providers: Conversation text and screenshot content are transmitted to OpenAI for AI-powered analysis and message generation. OpenAI processes this data under their API data usage policy, which prohibits using API inputs to train their models.
• Infrastructure Providers: We use cloud hosting (for our servers and database) and content delivery services to operate the Service. These providers process data on our behalf under contractual obligations.
• Payment Processing: Subscription and purchase data is processed by Apple through their in-app purchase system and by RevenueCat for subscription management. We do not handle payment card information directly.
• Analytics Providers: We may use analytics tools to understand usage patterns in aggregate. Analytics data is de-identified where possible.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this policy.

4. Data Retention

• Account Data: Retained for as long as your account is active. You may request deletion at any time (see Section 7).
• Conversation Data: Stored for as long as you maintain the associated chat in the app. When you delete a chat, the associated conversation data is deleted from our servers.
• Screenshots: Processed for text extraction and analysis. Uploaded images are retained only as long as needed to provide the Service and are not stored indefinitely.
• Usage and Analytics Data: Retained in aggregate form for up to 12 months for service improvement purposes.
• API Logs: API call records are retained for up to 90 days for cost tracking and abuse prevention.

When data is deleted, we make commercially reasonable efforts to remove it from our active systems. Residual copies may persist in backup systems for a limited period before being overwritten.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS/HTTPS.
• Authentication via secure token-based systems (JWT).
• Rate limiting and abuse detection on all API endpoints.
• Access controls limiting employee access to personal data on a need-to-know basis.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your device and account credentials.

6. Children's Privacy

The Service is intended for users who are at least 16 years old. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected data from a child under 16, we will promptly delete that information. If you believe a child under 16 has provided us with personal information, please contact us at the address below.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data and account. You can delete your account within the app or by contacting us.
• Data Portability: Request a machine-readable copy of your data.
• Opt-Out of Push Notifications: Manage notification preferences through your device settings.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@lobb.ai. We will respond to requests within 30 days or as required by applicable law.

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information is collected, used, and shared.
• The right to delete personal information held by us.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

7.2 European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, our legal bases for processing your data include:

• Contract Performance: Processing necessary to provide the Service you requested.
• Legitimate Interests: Improving the Service, preventing fraud, and ensuring security.
• Consent: Where you have provided explicit consent (e.g., push notifications).

You also have the right to lodge a complaint with your local data protection supervisory authority.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and third-party service providers are located. These countries may have different data protection laws. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

9. Third-Party Links and Services

The Service may reference third-party dating platforms (such as Tinder, Bumble, or Hinge) but is not affiliated with, endorsed by, or connected to any of them. We are not responsible for the privacy practices of any third-party services. We encourage you to review the privacy policies of any third-party services you use.

10. Cookies and Tracking (Website Only)

Our website may use cookies and similar technologies for analytics and functionality purposes. You can control cookie preferences through your browser settings. The mobile app does not use cookies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, through an in-app notification. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Email: support@lobb.ai