Privacy Policy

Welcome to LUNA — AI Art Generator (“LUNA,” “we,” “our,” or “us”), a mobile application developed and operated by Rocket Digital Limited, a company incorporated in Hong Kong. LUNA enables users to create, edit, and explore AI-generated artwork using state-of-the-art machine learning models.

This Privacy Policy explains what information we collect when you use the LUNA mobile app and our website at https://www.lunaaiart.app (collectively, the “Services”), how we use and share that information, and the choices you have regarding your data.

By using LUNA, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please discontinue use of our Services.

We use the information we collect for the following purposes:

• Providing the Services: To create and manage your account, process AI art generation requests, and deliver the core features of LUNA.
• Subscription management: To process payments, manage your subscription tier, and fulfil purchases through RevenueCat.
• Personalisation: To remember your preferences, saved styles, and generation history.
• Analytics and improvement: To understand how users engage with LUNA so we can improve features, fix bugs, and optimise performance.
• Advertising: To serve relevant ads to free-tier users via Google AdMob and to measure the effectiveness of our marketing campaigns via Google Analytics and Meta Pixel.
• Safety and security: To detect and prevent fraud, abuse, and violations of our Terms of Service.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.
• Communications: To send you important service notifications, security alerts, and, where you have opted in, marketing messages.

We retain your personal information for as long as your account is active or as needed to provide you with the Services. Specifically:

• Account data is retained while your account exists and for up to 90 days after account deletion to allow for account recovery and to resolve any outstanding disputes.
• Generated images are retained in your account until you delete them. Upon account deletion, your images are removed from our active systems within 30 days and from backups within 90 days.
• Crash reports and logs are retained for up to 90 days for debugging purposes.
• Analytics data is retained in aggregated, anonymised form and may be kept indefinitely.
• Transaction records are retained for a minimum of 7 years in accordance with applicable financial and tax regulations in Hong Kong.

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest using AES-256
• Role-based access controls limiting employee access to personal data
• Regular security audits and vulnerability assessments
• Multi-factor authentication for internal systems
• Use of industry-standard cloud security practices through Firebase and Google Cloud

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

LUNA is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use LUNA or provide any information to us.

If you are between 13 and 18 years of age, you should review this Privacy Policy with a parent or guardian and use LUNA only with their consent where required by local law.

If we become aware that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information from our systems. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@rocketdigital.ai.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure:You may request deletion of your personal data. You can delete your account directly within the LUNA app (Settings → Account → Delete Account).
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to object: You may object to our processing of your data for direct marketing purposes at any time.
• Opt-out of personalised ads: You can limit ad tracking through your device settings or by subscribing to a paid LUNA plan to remove ads entirely.
• California residents (CCPA): You have the right to know what personal information we collect, to opt out of the sale of your personal information (we do not sell personal information), and to non-discrimination for exercising your rights.
• EEA / UK residents (GDPR): You have the rights listed above and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at hello@rocketdigital.ai. We will respond to your request within 30 days. We may need to verify your identity before fulfilling certain requests.

Rocket Digital Limited is based in Hong Kong. Our third-party service providers, including Google (Firebase, AdMob, Google Analytics), Meta, OpenAI, Microsoft, RevenueCat, Replicate, and Fal.ai, are primarily based in the United States and operate infrastructure globally. Your personal data may therefore be transferred to and processed in countries outside your country of residence, including the United States.

Where data is transferred from the European Economic Area (EEA) or United Kingdom to countries that do not provide an equivalent level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the UK International Data Transfer Agreement (IDTA), as applicable. Our third-party processors maintain their own transfer mechanisms in accordance with applicable data protection law.

By using LUNA, you acknowledge that your data may be processed internationally as described in this section.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a revised “Last updated” date
• Sending a push notification or in-app message if you have notifications enabled
• Displaying a prominent notice within the LUNA app

We encourage you to review this Privacy Policy periodically. Your continued use of LUNA after any changes constitutes your acceptance of the updated policy. If you do not agree with the revised policy, please discontinue use of the Services and delete your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days.