LUNA AI Art GeneratorLUNA
Privacy

Privacy Policy

Last updated: March 2026

1. Introduction

Welcome to LUNA - AI Art Generator ("LUNA," "we," "us," or "our"). LUNA is operated by Rocket Digital Limited, a company registered in Hong Kong with its principal office at 1603, The L Plaza, 367-375 Queens Road Central, Hong Kong.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (available on iOS and Android) and our website at https://www.luna-art.app (collectively, the "Service"). Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

We collect information in several ways depending on how you interact with our Service. The types of information we collect include:

2.1 Personal Information

When you create an account or interact with the Service, we may collect the following personal information:

  • Account information: email address, display name, and profile picture (if provided).
  • Authentication data: login credentials managed through Firebase Authentication, including data from third-party sign-in providers (such as Apple Sign-In or Google Sign-In) if you choose to use them.
  • Contact information: your email address when you contact us for support or inquiries.

2.2 Payment and Subscription Information

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat processes your subscription status, purchase history, and transaction identifiers on our behalf. We do not directly collect or store your credit card numbers, banking details, or other financial payment information. Payments are processed through the Apple App Store or Google Play Store.

2.3 Photos and User-Uploaded Content

When you use features that involve photo uploads (for example, AI portrait generation, style transfer, or image-to-image generation), we temporarily process the images you provide. This may include:

  • Photographs and images you upload for AI processing.
  • Text prompts and parameters you enter to generate artwork.
  • AI-generated images created based on your inputs.

2.4 Usage Data

We automatically collect certain information about your use of the Service, including:

  • Device information: device type, operating system and version, unique device identifiers, device language, and time zone.
  • App usage data: features used, AI models selected, generation counts, session duration, and interaction patterns.
  • Log data: IP address, access times, pages viewed, app crashes, and other diagnostic data.
  • Advertising identifiers: IDFA (iOS) or GAID (Android) for personalized advertising, subject to your device settings and consent.

2.5 Cookies and Tracking Technologies

On our website, we use cookies, pixels, and similar tracking technologies to collect information about your browsing activity. This includes data collected by Google Analytics and Meta Pixel (described further in Section 4).

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing the Service: to operate the app, process your text prompts and uploaded images through AI models, generate artwork, and deliver the results to you.
  • Account management: to create and manage your account, authenticate your identity, and manage your subscription status.
  • Payment processing: to facilitate subscriptions and in-app purchases through RevenueCat and the respective app stores.
  • Improvement and development: to understand how users interact with our Service, identify usage trends, diagnose technical issues, and develop new features.
  • Personalization: to tailor the experience, including suggesting styles, models, and features relevant to your usage patterns.
  • Advertising: to serve advertisements within the app through Google AdMob, including personalized ads where permitted.
  • Analytics: to measure the effectiveness of our marketing campaigns, understand user acquisition channels, and optimize our website and app.
  • Communication: to send you service-related notifications, respond to your inquiries, and provide customer support.
  • Safety and security: to detect, prevent, and address fraud, abuse, security risks, and technical issues.
  • Legal compliance: to comply with applicable laws, regulations, and legal processes.

4. Third-Party Services and Data Sharing

We work with trusted third-party service providers to operate and improve our Service. We share information with these providers only to the extent necessary for them to perform services on our behalf. Below is a summary of the third-party services we use:

4.1 AI Processing Services

To generate AI artwork, your text prompts and uploaded images are sent to one or more of the following AI service providers for processing:

These providers process your data solely to fulfill image generation requests. We do not authorize them to use your content for training their AI models.

4.2 Backend and Authentication

  • Firebase (Google)— We use Firebase for backend infrastructure, user authentication, cloud messaging (push notifications), and crash reporting (Firebase Crashlytics). Firebase may collect device identifiers, IP addresses, and crash/diagnostic data. Privacy policy: firebase.google.com/support/privacy

4.3 Subscription and Payment Processing

  • RevenueCat— We use RevenueCat to manage in-app subscriptions and purchases. RevenueCat processes your subscription status, purchase receipts, and anonymous app user IDs. Privacy policy: revenuecat.com/privacy

4.4 Advertising

  • Google AdMob— We display advertisements in the free tier of our app using Google AdMob. AdMob may collect and use device identifiers, advertising IDs, IP addresses, and usage data to serve personalized or contextual advertisements. You can opt out of personalized advertising through your device settings. Privacy policy: policies.google.com/privacy

4.5 Analytics and Tracking

  • Google Analytics— We use Google Analytics on our website to analyze visitor traffic, user behavior, and marketing performance. Google Analytics uses cookies and collects anonymized usage data, IP addresses (with IP anonymization enabled), and interaction data. Privacy policy: policies.google.com/privacy
  • Meta Pixel (Facebook)— We use Meta Pixel on our website to measure advertising effectiveness, understand user actions, and build audiences for ad targeting. Meta Pixel may collect data about your website visits, pages viewed, and actions taken, and link this information with your Meta account (if applicable). Privacy policy: facebook.com/privacy/policy

4.6 Other Disclosures

We may also disclose your information in the following circumstances:

  • Legal requirements: when required by law, regulation, legal process, or enforceable governmental request.
  • Protection of rights: to enforce our terms of service, protect our rights, privacy, safety, or property, or that of our users or the public.
  • Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred as part of that transaction.

5. AI-Generated Content and Uploaded Photos

When you use LUNA to generate artwork, your text prompts and any uploaded images are transmitted to third-party AI providers (listed in Section 4.1) for processing. Here is how we handle this content:

  • Processing: uploaded photos and text prompts are sent to AI service providers solely for the purpose of generating your requested artwork.
  • Temporary storage: uploaded images are stored temporarily on our servers and those of our AI providers for the duration needed to complete the generation process. They are typically deleted within 24 hours of processing.
  • No training use: we do not use your uploaded photos or generated images to train our own AI models. We contractually require our AI providers not to use your content for their model training purposes.
  • Generated images: AI-generated images are stored in your account so that you can access them within the app. You may delete your generated images at any time.
  • Content moderation: we may review content to enforce our content policies and ensure compliance with applicable laws. Automated systems may flag content that appears to violate our policies.

6. Advertising

LUNA's free tier displays advertisements served by Google AdMob. These ads may be personalized based on your interests, demographics, and app activity, or they may be contextual (non-personalized), depending on your consent and device settings.

To manage your advertising preferences:

  • iOS:go to Settings > Privacy & Security > Tracking, and disable tracking for LUNA. You can also enable "Limit Ad Tracking" in your device settings.
  • Android:go to Settings > Google > Ads, and opt out of personalized ads or reset your advertising ID.

Subscribers on paid plans (LUNA Pro) do not see advertisements.

7. Cookie Policy

Our website uses cookies and similar tracking technologies. A cookie is a small data file placed on your device when you visit a website.

Types of Cookies We Use

  • Strictly necessary cookies: essential for the website to function properly. These cannot be disabled.
  • Analytics cookies: used by Google Analytics to collect information about how visitors use our website. These cookies collect data in an aggregated and anonymized form.
  • Advertising/tracking cookies: used by Meta Pixel and Google services to deliver relevant advertisements and measure campaign effectiveness.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

  • Account data: retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, unless retention is required by law.
  • Uploaded photos: temporarily stored for processing and typically deleted within 24 hours. Generated images in your account are retained until you delete them or your account is closed.
  • Usage and analytics data: retained in aggregated or anonymized form for up to 26 months for analytics purposes.
  • Subscription data: retained as necessary for billing, refund, and legal compliance purposes, typically for up to 7 years as required by applicable tax and financial regulations.
  • Crash and diagnostic logs: retained for up to 90 days for debugging and performance improvement.

9. Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using TLS/SSL.
  • Encryption of sensitive data at rest.
  • Access controls limiting who within our organization can access personal data.
  • Regular security reviews and monitoring of our systems.

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

10. Your Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information.

10.1 Rights Under the GDPR (European Economic Area, UK)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete personal data.
  • Right to erasure:request deletion of your personal data ("right to be forgotten").
  • Right to restriction: request that we restrict the processing of your personal data.
  • Right to data portability: receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object: object to the processing of your personal data, including for direct marketing purposes.
  • Right to withdraw consent: withdraw your consent at any time where processing is based on consent.

To exercise these rights, please contact us at hello@rocketdigital.ai. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10.2 Rights Under the CCPA (California, USA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to know: request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we share your data.
  • Right to delete: request deletion of your personal information, subject to certain exceptions.
  • Right to correct: request correction of inaccurate personal information.
  • Right to opt out:opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.
  • Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights.

We do not sell your personal information in the traditional sense. However, certain data sharing activities (such as the use of advertising cookies by Meta Pixel and Google AdMob) may constitute a "sale" or "sharing" under the CCPA. You can opt out of this by adjusting your cookie preferences and device advertising settings.

To submit a CCPA request, please contact us at hello@rocketdigital.ai. We will verify your identity and respond within 45 days.

10.3 Other Jurisdictions

If you are located in another jurisdiction with data protection laws, you may have similar rights. Please contact us and we will address your request in accordance with applicable local laws.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our third-party service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer your data internationally, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or reliance on the service provider's participation in recognized data protection frameworks.

12. Children's Privacy

Our Service is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such information as soon as possible.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at hello@rocketdigital.ai so that we can take appropriate action.

13. Push Notifications

We may send push notifications through Firebase Cloud Messaging to inform you about your generation status, new features, promotional offers, or important service updates. You can manage your notification preferences through your device settings at any time.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by providing notice through the app or by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all inquiries within 30 days.