Privacy policy (translation for information; the German version is authoritative)
Last updated: 5 August 2026.
1. Controller. Priscilla Hidalgo Solís, Großenhainer Str. 98, 01127 Dresden, Germany. Email: phidalgosol@gmail.com
2. The most important thing first: your content stays on your device. LightenAI works without an account and without a server database. Everything you enter — names, tasks, notes, settings, progress — is stored only locally in your browser (localStorage) and is never transmitted to us or to anyone else. We cannot see, analyse or recover it. You can delete it at any time via the app's reset function or your browser's site-data settings. If you enter another person's name (e.g. your partner), the same applies: it stays in your browser only. We recommend using first names or nicknames. Local storage is strictly necessary for the app to function (§ 25 (2) no. 2 TDDDG); no advertising or tracking cookies are set.
3. Hosting. The app is delivered via Lovable (Lovable Labs AB, Stockholm, Sweden) and its content delivery network Cloudflare (Cloudflare, Inc., San Francisco, USA). When you open the app, both process technically necessary data (IP address, time of access, requested resource, browser type) to deliver the app securely and protect it against abuse. Cloudflare sets the technically necessary cookie __cf_bm (bot management); it does not track you across websites. Cloudflare is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Legal basis: Art. 6 (1) (f) GDPR.
4. Analytics. The hosting platform includes simple, cookieless usage analytics (Tinybird Web Analytics): page paths, referrer, user agent and performance metrics. No cookies, no cross-device profiles. Legal basis: Art. 6 (1) (f) GDPR. You may object at any time (contact above).
5. Error diagnostics. If a technical error occurs, technical details (error message, affected page, browser info) are sent to the hosting platform. Your local app content is not included. Legal basis: Art. 6 (1) (f) GDPR.
6. Audio ("Alma" voice). Voice audio files are delivered via Netlify (Netlify, Inc., San Francisco, USA). When you play audio, Netlify technically receives your IP address. Netlify is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Audio loads only when you actively play it.
7. Fonts. All fonts are self-hosted; no connection to third-party font servers is made.
8. Your rights. You have the rights of access, rectification, erasure, restriction, data portability and objection under Arts. 15-21 GDPR, and the right to lodge a complaint with a supervisory authority (for Saxony: Sächsische Datenschutz- und Transparenzbeauftragte, Dresden). Note: because your app content exists only on your device, only you can access or delete it.
9. What happens when you follow our steps. From Step 3 on, the app helps you write prompts that you then paste into an AI chat of your choice, export to your calendar provider, or route through automation services (Render, Activepieces, WhatsApp). Anything you send there leaves your device and is processed by those providers under their own terms and privacy policies. We are not the controller for that processing and have no access to it. Some of this content can be special-category data under Art. 9 GDPR (for example health or cycle information) and deserves particular care: use nicknames, leave out details you do not need, and never paste anything about another person that you would not say in front of them. The checklist at the top of Step 3 walks you through these questions.
10. Changes. This policy will be updated as the app or the law changes.