This Privacy Policy explains how Luckora collects, uses, discloses, and protects your information when you use our app. By using Luckora, you agree to the practices described in this policy.
01 Information we collect
We collect information you provide directly so we can create your personal experience:
- Account details — your email address and nickname. If you choose Sign in with Apple, we receive the name, email address (or Apple's private relay email), and provider account identifier you authorize Apple to share, used to create and authenticate your account.
- Birth details — your birth date, time, and place, used to personalize your profile, app experience, and lucky images.
- Profile photo — an optional picture you upload or take for your profile.
- Content you create — the wishes you make and the lucky images you generate or save.
- Notification and device data — a push notification token, device platform, app version, and related delivery information used to send notifications you enable.
- Subscription and purchase data — the app store, product identifier, transaction identifier or purchase token, subscription status, and entitlement information needed to validate purchases and provide paid features. Apple or Google processes the payment; we do not receive your full payment card or bank account details.
- Reports and support requests — information you choose to send when you report a generated image, contact support, or request account or data deletion.
- Shared image links — if you choose to share a generated image, we create a share link so people with that link can view the image preview.
We also collect basic technical information needed to run and protect the service, such as device and browser type, IP address, request time, error logs, and similar diagnostic data. Luckora does not use third-party advertising networks or behavioral analytics tracking SDKs.
02 How we use information
We use your information to create and authenticate your account, provide and maintain Luckora, generate and personalize your lucky images, save or share images at your request, deliver notifications you enable, validate purchases and manage subscription entitlements, respond to support and deletion requests, process safety reports, protect the service from fraud or abuse, diagnose technical issues, and improve our features. We do not sell your personal information, and we do not use it for third-party advertising.
03 Information sharing
We do not sell your personal information or share it for advertising. We share information only with service providers that help us run Luckora, and only so they can deliver the service on our behalf:
- AI image-generation provider — to create your lucky image, we send a prompt derived from your chosen wish theme and profile details to a third-party AI image service. We do not send your email, name, or photo.
- Profile personalization service — your birth date, time, and place may be processed to derive personalization attributes for the app experience.
- Cloud hosting & storage — to run our backend and store your account details, generated images, support requests, reports, share links, and service logs.
- Sign-in provider — Apple may process account identifiers and information needed for Sign in with Apple under its own terms and privacy policy.
- App-store providers — Apple and Google process information needed for purchases, subscription management, billing, and refunds under their own terms and privacy policies.
- Push notification provider — Firebase Cloud Messaging processes a device notification token and related delivery information so we can send notifications you enable.
Service providers acting on our behalf are permitted to process information only to deliver the relevant service. Apple and Google handle information under their own terms and privacy policies. These providers may process information in countries other than your own; where that happens, we take steps to keep it protected in line with this policy. We may also disclose information when required by law. When a verified account-deletion request is completed, we instruct providers acting on our behalf to delete associated personal data where applicable, subject to lawful retention obligations.
04 Data security
We use industry-standard measures to protect your data in transit and at rest. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
05 Your choices
You're in control of your information. From your account settings, you can edit your details, delete individual generated images, or request deletion of your account and associated data. You can also request deletion without access to the app by following our Account & Data Deletion instructions.
You can disable notifications in your device settings. You can manage or cancel a subscription through the Apple App Store or Google Play account used for the purchase. Deleting the app does not delete your account, and deleting your account does not automatically cancel an active app-store subscription.
06 Data retention
We keep personal information while your account is active and for as long as needed to provide Luckora. When a verified account-deletion request is completed, we delete or anonymize associated personal data from our active systems, including profile information, birth details, generated content, share links, device notification tokens, and other user-linked service data.
We may retain only limited information where reasonably necessary for legal, regulatory, tax, accounting, security, fraud-prevention, dispute-resolution, enforcement, support, or child-safety purposes. Records retained for these purposes are restricted to the relevant purpose and kept only for as long as that purpose or applicable law requires. Information that has been irreversibly anonymized and can no longer be linked to you may also be retained. More information is available on our Account & Data Deletion page.
07 Your privacy rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise the core of these rights directly in the app, through our Account & Data Deletion page, or by contacting us at contactus@toosweetapp.com. We may take reasonable steps to verify account ownership before acting on a request. We do not sell your personal information or share it for cross-context behavioral advertising.
08 Children's privacy
Luckora is not directed to children under 13 or the higher minimum age required in their region. We do not knowingly collect personal information from users below the applicable minimum age. If you believe a child below that age has provided personal information to Luckora, please contact us so we can investigate and take appropriate action.
Luckora prohibits child sexual abuse and exploitation and child sexual abuse material. See our Child Safety Standards for reporting instructions and additional information.
09 Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app. Continued use of Luckora after changes means you accept the updated policy.
10 Contact us
If you have questions about this policy or your data, reach us through the Support page or email contactus@toosweetapp.com. Account deletion requests can also be started from our Account & Data Deletion page.