Privacy Policy

This Policy applies to Lusya websites, web app pages, account features, chat, matching, media, purchases, support, moderation, and related services. It also applies when you contact us or submit a report.

References to "Lusya", "we", "us", and "our" mean the operator of the Lusya service. References to "you" mean a visitor, account holder, user, or other person whose data is processed through Lusya.

If a local legal notice, app-store listing, invoice, or official operator page identifies a specific legal entity or representative for Lusya, that notice supplements this Policy for operator identity and contact details.

Lusya is only for adults who are at least 18 years old, or older if the law where you live requires a higher age. We do not knowingly allow minors to create accounts or use Lusya.

If we learn or reasonably suspect that a user is underage, we may restrict, suspend, or delete the account, request age-related information where lawful, preserve evidence where required, and take additional safety or legal action.

The data we collect depends on how you use Lusya. The main categories are listed below.

We collect data directly from you when you create an account, complete onboarding, update your profile, send messages, upload media, make purchases, contact support, submit reports, or change settings.

We collect some data automatically from your browser, device, Firebase services, RevenueCat, optional external analytics tools used with your consent, basic first-party site statistics unless you disable them, security tools, and logs needed to operate and protect the service.

We may receive limited data from third parties that help us run Lusya, such as authentication, hosting, payment, analytics, fraud prevention, security, moderation, support, and legal-compliance providers.

Where laws such as the GDPR, UK GDPR, Swiss FADP, or similar rules apply, we rely on the following legal bases: performance of our contract with you, our legitimate interests, your consent, compliance with legal obligations, and protection of vital interests where necessary for safety.

Sensitive data may be processed when you choose to provide it, when it is necessary to provide the adult social features you request, when you consent where required, or when processing is necessary for safety, legal compliance, moderation, or legal claims.

Necessary cookies and local storage are used for language, sign-in, security, account settings, onboarding continuity, consent choices, and core web-app behavior.

Optional Google Analytics for Firebase and Yandex Metrika are off until you choose to allow external analytics. Declining them does not disable the separate basic first-party site statistics described here. You can change both choices independently and continue using Lusya.

Method and onboarding measurements contain only predefined method names, step identifiers, event times and error categories; they do not copy field values or credential contents. The server verifies the sign-in provider from the authenticated session. If an email session does not distinguish password from email link, we record an email session without guessing the exact method or inventing a button click. A selected method does not prove successful sign-in, and an unfinished step does not prove that a person permanently left.

Basic site statistics use a random journey number in sessionStorage for this browser tab, with a maximum lifetime of 24 hours. They do not use tracking cookies, a permanent visitor identifier, or a device fingerprint. A new tab or a new journey may count again, so these figures are journeys, not a count of unique people or first-ever visitors.

When you request an email sign-in link during an existing journey, a signed continuation lasting at most one hour may carry that journey into the tab where you use the link. It is restricted to the exact same site origin and contains only the random journey number, site origin and validity times, without your email address or account ID. It can restore only previously recorded landing and button steps; it does not authenticate you or overwrite another existing journey. The continuation is not stored in the statistics records or sent to external analytics. Disabling basic statistics, expiry, or an unavailable continuation does not prevent sign-in.

You can turn basic site statistics off below. This clears the current journey and unsent events in this tab and stops further collection. A separate localStorage preference remembers that choice in this browser; it is not a visitor identifier. Previously received records expire after 90 days and are removed asynchronously by database retention processing.

We do not use analytics consent to allow personalized advertising cookies. If advertising or marketing cookies are added later, we will update this Policy and request consent where required.

We do not sell your personal data. We share data only as needed to operate, secure, improve, monetize, support, moderate, and legally protect Lusya.

Lusya is an adult service, but it is not a place for illegal content, abuse, exploitation, harassment, scams, or non-consensual sexual content. User content and communications may be reviewed when reported, flagged, required for safety, required by law, or necessary to enforce our Terms.

We may use manual review, technical signals, automated systems, hashes, classifiers, risk scores, and specialized providers where available to detect, review, restrict, remove, preserve, or report prohibited content and conduct. Safeguards reduce risk but cannot guarantee that prohibited content will never appear.

If we become aware of apparent child sexual abuse material, grooming, child sexual exploitation, trafficking involving minors, or other serious child-safety risks, we may preserve relevant data, restrict accounts, remove content, and report relevant information to law enforcement, NCMEC/CyberTipline, or another designated reporting body where required or permitted by law.

We keep data only as long as reasonably needed for the purposes described in this Policy, including providing Lusya, account management, safety, fraud prevention, moderation, legal compliance, accounting, tax, dispute resolution, and legal claims.

When you delete your account, Lusya attempts to remove or anonymize profile data, photos, settings, favorites, blocked lists, invites, and other account-linked data. Some records may be retained or transformed where necessary for safety, anti-abuse, legal compliance, accounting, purchase records, audits, dispute resolution, or legal claims.

Chat and media records may remain temporarily or in limited form in backups, logs, partner-side chat history, moderation records, legal holds, or backend cleanup queues. We do not promise instant deletion from every backup, cache, provider system, or legal archive.

Firebase Auth records, purchase history, complaint records, security logs, and evidence related to abuse or illegal activity may be retained where reasonably necessary to prevent repeat abuse, enforce bans, comply with law, cooperate with authorities, or defend legal claims.

We use technical and organizational measures intended to protect data, including Firebase security rules, App Check/reCAPTCHA where configured, access controls, limited permissions, encryption in transit, provider security controls, and abuse-prevention processes.

No internet service can guarantee absolute security. You are responsible for your account credentials, browser/device security, and what you choose to share with other users.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal data. You may also have the right to complain to a data protection authority.

To exercise privacy rights, contact support@lusya.app. We may need to verify your identity before acting on a request. Some rights are subject to limits, including safety, legal compliance, purchase/accounting requirements, fraud prevention, and legal claims.

Lusya is not directed to children and does not knowingly collect personal data from minors. If you believe a minor is using Lusya or that content involving a minor has been shared, report it immediately in the app and contact us at the child-safety contact listed in our Child Safety Standards.

Lusya and its providers may process data in countries other than where you live, including the United States, the European Economic Area, and other locations where our infrastructure, providers, support, security, or moderation teams operate.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, provider data-processing terms, adequacy mechanisms, or other lawful transfer tools.

We may update this Policy when the service, legal requirements, providers, or safety processes change. The updated version will show a new last-updated date. If changes are material, we will provide notice where required.

Questions, privacy requests, safety reports, or legal notices can be sent to support@lusya.app.