--- url: https://lettuceai.app/privacy title: "Privacy Policy — LettuceAI" description: "LettuceAI Privacy Policy — learn how your data stays local and what we do and do not collect." --- Legal # Privacy Policy Effective Date: March 29, 2026 This Privacy Policy explains what LettuceAI ("we," "us," or "our") does and does not collect in connection with LettuceAI. LettuceAI is an open source, local-first app. In ordinary use, your chats, characters, prompts, images, settings, API keys, and similar app content are stored on your device, not on our servers. ## 1\. Contact If you have privacy questions, contact: LettuceAI [lettuceai.app@gmail.com](mailto:lettuceai.app@gmail.com) ## 2\. What We Generally Do Not Collect We do not operate LettuceAI as a hosted account service. As a result, we generally do not receive or store: - Your chats or roleplay history - Your characters, personas, lorebooks, prompts, or templates - Your locally stored images, avatars, or attachments - Your provider API keys or model settings, unless you separately send them to us - Your local backups, unless you separately send them to us Because we generally do not possess that information, we usually cannot access it, export it, correct it, delete it for you, or provide it to third parties. ## 3\. Information Stored Locally On Your Device LettuceAI stores most app data locally on your device. Depending on how you use the app, that may include: - Chats, prompts, memory data, and message history - Characters, personas, lorebooks, scenes, and templates - Images, avatars, attachments, generated media, and downloaded models - App settings, accessibility settings, and appearance preferences - Provider credentials, including API keys, base URLs, headers, and model selections - Voice provider settings and cached preview audio - Local logs, usage records, and app activity data That local device data is controlled by you, subject to your device security, backups, and the policies of any third-party services you choose to use. ## 4\. No App Payments We do not charge users for access to the LettuceAI app itself. If you choose to connect third-party AI, voice, or other providers through the app, those providers may charge you directly under their own pricing and terms. We do not process those payments and do not receive those usage charges on behalf of those providers. ## 5\. Information We May Receive We may receive limited information in the following cases: #### A. Optional analytics If the app build includes analytics and analytics are enabled in your copy of the app, we may receive limited, non-identifying usage analytics through Aptabase. As configured by us, this is intended to be limited to aggregate product analytics, such as daily user counts and basic app usage totals, rather than personally identifying user profiles. If analytics are available in your build, you may be able to disable them in the app settings. #### B. Support communications If you email us or otherwise contact us, we will receive the information you choose to provide, such as: - Your email address - The contents of your message - Any attachments, screenshots, logs, or other materials you send us #### C. Website and download page traffic If you visit lettuceai.app or any page we operate, standard web server, hosting, or CDN logs may collect technical information such as IP address, user agent, referrer, and request timestamps. ## 6\. Information Sent To Third Parties At Your Direction LettuceAI allows you to connect third-party services. When you use those features, data may be sent directly from your device to the provider you selected. If you use local models or other on-device features, your content may be processed locally on your device without being sent to a third-party provider. Depending on the feature, that may include: - Prompts and chat messages - Character definitions, persona details, lorebook content, and system prompts - Images or attachments - Model settings and inference parameters - Voice generation input - API keys or authentication headers needed to call the provider Third-party providers are not governed by this Privacy Policy. Their own terms and privacy policies apply. ## 7\. External Services Used By The App Depending on which features you use, LettuceAI may connect to external services such as: - AI, image, speech, or voice providers you configure - Character Tavern for discovery browsing and character imports - Hugging Face for model browsing and model downloads - GitHub and our download pages for app update checks - Optional analytics providers - User-configured custom endpoints or self-hosted services We do not control how those third parties process data. If you use only local models and local features, some or all of those external connections may not be used for your content generation at all. ## 8\. Backups, Sync, And Local Transfers LettuceAI includes local backup, restore, export, import, and local-network sync features. Please note: - Exported backups may contain sensitive local app data, including chats, settings, API keys, secrets, media, and other app content - Backups are stored where you choose to store them, such as your device, cloud storage, or file system - Local-network sync transfers data directly between devices you connect We do not receive those backups or sync transfers unless you separately send them to us. ## 9\. Camera Access On supported mobile builds, the app may request camera access for QR or barcode scanning used in device sync flows. We do not use the camera for remote collection or background surveillance. ## 10\. How We Use Information We Actually Receive If we receive information described in this Privacy Policy, we may use it to: - Operate and improve the app, website, and download experience - Understand app stability and product usage, where analytics are enabled - Respond to support requests - Maintain security and prevent abuse of the website or services we operate - Comply with legal obligations ## 11\. How We Share Information We do not sell your personal information. We may share information that we actually possess only in limited circumstances, such as: - With service providers that help us operate analytics, hosting, support, or download infrastructure - If you ask us to assist with a support issue and provide materials for that purpose - If required by law, legal process, or a valid governmental request, but only as to information we actually have We cannot disclose local app content we do not have. ## 12\. Data Retention Local app data remains on your device until you delete it, overwrite it, uninstall the app, or move it elsewhere. For information we actually receive: - Support emails and support materials may be retained as reasonably necessary to respond and maintain records - Analytics data may be retained according to the analytics provider's retention settings - Website traffic logs may be retained according to hosting or infrastructure retention practices ## 13\. Security No system is perfectly secure, but LettuceAI is designed to keep most user content local to the device. You are responsible for: - Securing your device - Protecting your backups - Choosing strong backup passwords - Protecting your API keys and third-party accounts - Reviewing the privacy and security practices of the providers you connect ## 14\. International Processing If you use third-party providers or services, your data may be processed in countries other than your own according to those providers' practices. If we use third-party hosting, analytics, or support tools, information we actually receive may also be processed in other countries where those providers operate. ## 15\. Your Rights Depending on your jurisdiction, you may have rights regarding personal information we control. Those rights may include the right to request access, correction, deletion, restriction, objection, or portability, subject to applicable law. Because we usually do not control your local app data, many requests about chats, characters, prompts, or other on-device content will need to be handled by you on your own device. To make a request regarding information we actually control, contact [lettuceai.app@gmail.com](mailto:lettuceai.app@gmail.com). ## 16\. Children's Privacy LettuceAI is not directed to children under 18, and we do not knowingly collect personal information from children under that age. If you believe a child has sent us personal information directly, contact [lettuceai.app@gmail.com](mailto:lettuceai.app@gmail.com). ## 17\. Changes To This Privacy Policy We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version and update the Effective Date above. [Terms of Service](/terms)[License (AGPL-3.0)](/license)