Privacy Policy

LuluLabs Inc. (“LuluLabs,” “we,” or “us”) respects the privacy of people who use MOA (the “Service”). This policy explains what information the Service processes, why it is processed, and how you can manage it.

1. Core principles

• Links, images, notes, and organized results are saved on your device first.
• If you enable iCloud sync, data syncs to the private iCloud database for your Apple Account. LuluLabs cannot view that database.
• When you run AI organization, required content is sent to our processing service and AI provider. LuluLabs does not retain source scrap content in its database after processing.
• We do not display advertising, sell user data, or use advertising identifiers or behavioral-tracking SDKs.

2. Information we process

Information stored on your device or in your iCloud

• Saved link addresses and text retrieved from those links
• Images and screenshots you select
• Notes you enter
• AI-generated or user-edited titles, summaries, full text, and classifications
• App settings, backups, and sync status

Information processed temporarily for AI organization

• Link addresses and public text or metadata retrieved from those links
• Processing copies of selected images and text extracted on your device
• Notes you include with an AI organization request

Information used for subscriptions and abuse prevention

• Product, receipt, subscription status, and anonymous app user identifier provided by Apple App Store and RevenueCat
• A one-way hashed IP value, date, and request count used to enforce AI request limits. The original IP address is not stored in the application database.

3. How we use information

• Generate titles, summaries, and classifications for links and images
• Provide scrap storage, search, editing, backup, and iCloud sync
• Verify free usage limits and Premium subscription status
• Prevent abnormal high-volume requests and maintain service reliability
• Respond to support requests

4. Storage location and retention

• On-device storage: Data remains on your device until you delete it in the app or delete the app data.
• iCloud: If sync is enabled, data remains in your private iCloud. You can delete that copy with “Delete iCloud Data” in the app.
• AI processing content: Our relay function does not store source scrap content in the LuluLabs database after processing. OpenAI API inputs and outputs are not used for model training by default. OpenAI may retain abuse-monitoring records for up to 30 days under its policies.
• Rate-limit records: Hashed values, dates, and counts may be retained for up to 30 days for abuse prevention and are then deleted.
• Subscription records: Apple and RevenueCat process these records for the period needed to provide subscriptions and meet legal obligations.

5. Processors and international transfers

We use the following processors and transfer information only as needed to perform our contract with you. Information is transmitted over encrypted networks when you choose to use AI organization, iCloud sync, or subscription features.

You may decline an international transfer by not using the related optional feature. If you do not want content transferred for AI organization, do not use AI organization. If you do not want iCloud or subscription processing, do not enable sync or purchase a subscription. You can continue to view, search, and edit scraps on your device and use manual backups.

6. Third-party disclosure and automatic collection

• We do not sell personal information or disclose it to unrelated third parties, except where required by law.
• The providers listed above process information only to perform the requested service under our instructions and may not use it for their own advertising.
• The app and our website do not use personalized advertising, advertising identifiers, analytics cookies, or behavioral-tracking cookies.

7. Your choices and rights

• View, edit, and delete scraps and notes in the app.
• Turn off iCloud sync or delete MOA data stored in iCloud.
• Export or restore a manual backup from Settings.
• Change photo access in iOS Settings.
• Manage or cancel subscriptions in Apple Account subscription settings.
• Request access, correction, deletion, restriction or suspension of processing, or withdrawal of consent by email or phone.

We may verify your identity before acting on a request. We respond within the period required by applicable law. If a lawful restriction prevents us from completing a request, we explain the reason and available review process. Privacy requests are generally free of charge.

8. Children’s privacy

MOA is a general productivity app for organizing links and screenshots and is not directed to children under 14. We do not knowingly collect personal information from children under 14.

9. Deletion

We delete information without undue delay when its retention period ends or the processing purpose is complete. Electronic files are deleted using methods designed to prevent recovery. You can delete scraps and iCloud data using the controls provided in the app.

10. Security measures

• Encrypted transmission using HTTPS
• AI API keys managed in server environments rather than embedded in the app
• Request limits based on one-way hashed values instead of stored source IP addresses
• A local-first architecture that does not store source scraps on LuluLabs servers

11. Changes to this policy

If this policy changes, we will post the effective date and a description of the change on this page or in the app. We will provide notice before applying a material change that affects user rights.

Change history: August 4, 2026 — clarified processors, transfers, privacy rights, and automatic collection.