Privacy Policy

Introduction

This Privacy Policy explains how Laittern Limited ("Laittern", "we", "us") collects, uses, and protects personal data when you use the Laittern website and application (the "Service").

By accessing or using the Service, you acknowledge that your information will be processed as described in this Privacy Policy. If you do not agree, please do not use the Service.

Information We Collect

We may collect the following categories of information:

• Account information: when you sign in with Google OAuth, we receive identifiers and profile information made available by Google (such as your email address and display name).
• Journal and goal content: text you write in journal entries, goal titles and descriptions, comments, life context notes, and related metadata you choose to store in the Service.
• Usage and plan data: information about feature usage, plan quotas, virtual credit (crystal) wallet transactions, and similar operational records needed to provide the Service.
• Technical data: server logs, session identifiers, IP addresses, browser type, and similar technical information required for security, authentication, and reliability.
• Communications: if you contact us by email, we retain the content of that correspondence.
• Payment and billing information: if you purchase a subscription, virtual credits, or other paid features, payments may be processed by third-party payment processors. Laittern does not store full payment card details. We may receive limited payment-related information such as transaction identifiers, payment status, amount, currency, billing country, and purchase history.
• Public content and profile information: content or profile information you choose to make public, including public posts, comments, usernames, profile details, and related metadata.

Sensitive Personal Data

Users are responsible for the information they choose to submit to the Service. We do not intentionally request or require special categories of personal data (such as health, biometric, or financial data) unless voluntarily provided by users.

How We Use Information

We use personal data to:

• Provide, maintain, operate, and improve the Service.
• Authenticate you and keep your account secure.
• Process AI-assisted features you explicitly request (such as insights, goal analysis, or goal advice).
• Manage virtual credit balances, plan entitlements, and usage quotas.
• Display public content and profile information within the Service, including in feeds, recommendations, public pages, and search-accessible pages.
• Detect, investigate, and prevent abuse, fraud, and violations of our Terms of Service or policies.
• Comply with applicable legal obligations.
• Communicate with you about the Service, including material changes to these policies.

Legal Basis for Processing

We process personal data where necessary to:

• Provide the Service requested by users.
• Comply with legal obligations.
• Pursue legitimate interests such as security, fraud prevention, and service improvement.
• Perform processing based on user consent where required by applicable law.

Cookies

We use cookies and similar technologies to maintain your authenticated session. A session cookie is set when you sign in and is required to use the Service.

We do not use advertising or cross-site tracking cookies. You may delete session cookies at any time by signing out or clearing your browser storage; however, doing so will end your session.

Third-Party Services

Some features send portions of your content to AI providers (currently accessed through OpenRouter and its underlying model providers) to generate the output you request. These providers may process content as necessary to generate the output you request. We do not sell personal data to third parties.

Google OAuth is used for authentication. When you sign in with Google, we receive identifiers and profile information made available by Google, such as your email address and display name. We use Google account information only to authenticate users, create and maintain user accounts, and provide access to the Service. We do not receive or store your Google password. Google's handling of your data during sign-in is governed by Google's own privacy policy.

Payments may be processed by third-party payment processors. These processors may collect and process payment information according to their own terms and privacy policies. Laittern does not store full payment card details.

We use infrastructure, hosting, monitoring, and security providers necessary to operate and protect the Service. These providers process data only as necessary to provide their services to us and are subject to contractual or legal obligations regarding data protection.

Public Content

If you choose to make content public, that content may be visible to other users and visitors, appear in feeds or recommendations, and be indexed by search engines.

Public content may remain accessible through search engines or third-party caches even after it is removed from the Service. We do not control third-party caching or indexing behaviour.

International Data Transfers

Your information may be processed and stored in countries other than your country of residence, including countries where data protection laws may differ from those in your jurisdiction.

By accessing or using the Service, you understand that such transfers may occur where necessary to provide the Service. Where required by applicable law, we take steps to ensure that adequate safeguards are in place to protect your personal data.

Data Retention

We retain your account data and content for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

If you request deletion of your account, we will take steps to remove or anonymize your personal data. We may retain certain information where necessary to comply with legal obligations, maintain security records, prevent fraud, enforce our agreements, preserve system integrity, or maintain transaction and audit records.

User Rights

Depending on your location, you may have rights under applicable data protection law, including rights to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Restrict or object to certain processing activities.
• Receive a copy of your data in a portable format.

To exercise these rights, contact us at official@laittern.com.

Children's Privacy

The Service is not intended for individuals under the age of 13 (or such higher age as required by applicable local law). We do not knowingly collect personal information from children.

If you believe we have inadvertently collected information from a child, please contact us at official@laittern.com and we will take steps to delete such information promptly.

Security

We implement technical and organisational measures designed to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted communications (HTTPS), access controls, and session management.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

For material changes, we will provide additional notice within the Service where practicable.

Contact Information

Questions, requests, or complaints regarding this Privacy Policy may be sent to official@laittern.com.

Laittern Limited, Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong.

Learn more about Laittern on our About page .