1 What We Collect
CF only collects what it needs to be a meaningful companion. Nothing more.
| Type | What | Why |
|---|---|---|
| Messages | Text you send to CF, and CF's responses | To remember your story, track your growth, and personalize replies |
| Voice | Audio recordings (only when you press-hold the mic) | Transcribed to text, then the audio is discarded — never stored as audio |
| Preferences | Persona choice (Mother/Teacher/Friend), learning progress, interests | To match CF's tone to your needs and recommend relevant learning paths |
| Usage | First-party product events (for example a course start), sent to our own servers. No analytics cookies. | To see if Classroom and the Show are working — never for ads or selling |
| Consent | Your chosen memory level (None/Soft/Deep) and timestamp | To respect your privacy choice and prove compliance |
We do NOT collect inside CF: real name, exact location, phone number, contacts, browsing history, or anything outside the CF experience. Forms for the Show, campus nominations and partnership requests collect the contact details described in section 7.
2 Why We Collect It
Every piece of data serves one of three purposes:
- To improve CF — Understanding what helps you most so CF gets better at being a companion.
- To personalize — Remembering your journey so CF doesn't ask "How are you?" like a stranger every time.
- To keep you safe — Detecting crisis signals and connecting you to human help when needed.
We do not use your data for advertising, political profiling, or any purpose outside the CF experience.
3 How We Use Your Data
- Never sold. Your data is not a product. We will never sell, rent, or trade your personal information.
- No analytics cookies. We do not run PostHog or any third-party analytics pixel. A few first-party events may go to our own backend when you use Classroom or the Show. They are not advertising profiles.
- No third-party sharing. We don't share your data with advertisers, data brokers, or external partners. The only exception: if required by law (e.g., a valid court order).
- Research. Anonymized patterns may inform academic research on AI companionship and wellbeing, with ethics board approval.
4 How We Protect It
- Encryption at rest and in transit. All data is encrypted with AES-256 (rest) and TLS 1.3 (transit).
- Supabase Row Level Security. Your data can only be accessed by your authenticated session — not even our engineers can read it without a special audit trail.
- No third-party analytics. No PostHog, no ad pixels, no tools that share your browsing with someone else.
- Regular audits. We review access logs quarterly and rotate API keys every 2 weeks.
- Incident response. If a breach occurs, you'll be notified within 72 hours and we'll publish a transparent incident report.
5 Your Rights
You have full control over your data at all times:
- View — Open your Memory Dashboard to see everything CF remembers about you.
- Edit — Change any memory entry if CF misunderstood something.
- Delete — Erase individual memories or your entire history permanently. No questions, no waiting period.
- Export — Download all your data as a JSON file, readable by you and portable to other platforms.
- Revoke — Email info@lns.life and we will change or clear what CF remembers. There is no /settings page yet.
For Indian users: these rights align with the Digital Personal Data Protection (DPDP) Act 2023. For EU users: these rights align with GDPR. For everyone else: we extend these rights to you regardless of where you live.
6 Data Retention
| Data Type | Retention | Why |
|---|---|---|
| Chat messages (Soft consent) | 30 days | Recent context for warm conversations |
| Chat messages (Deep consent) | Until you delete or revoke | Full journey memory |
| Consent records | While account is active + 2 years | Legal compliance and proof of consent |
| First-party product events | Kept only as long as we need them to run the product | To see what is working — no advertising profiles |
| Deleted data | Removed within 48 hours | Your deletion is immediate; cleanup runs daily |
7 Show Registrations, Campus Nominations & Partnership Requests
Separate from CF chat, a few public forms on lns.life collect contact details so we can run the Show and talk to campuses. They are not a newsletter signup.
- What the forms collect. Student Show registration: your name, email, and where you study (WhatsApp and city if you add them). Campus nomination: the coordinator's name, email, institution, role, and optional WhatsApp, city, student count and message. Partnership requests: institution, your name, work email, role, and optional WhatsApp, city, student count and message.
- Purpose. To register you for the Show, confirm a campus coordinator, send the Partnership Brief, and follow up about that request. We do not add these addresses to a marketing list or newsletter.
- Who sees it. LNS. For student Show registrations, the named campus coordinator for your institution may also see that you have registered, so they can organise the campus round. We do not share these forms with sponsors or other campuses.
- Storage. Submissions are stored in our lead database (Supabase) with the same access controls as other LNS operational data.
- Retention. We keep a registration or request for the season it belongs to, and for a reasonable period afterwards if we still need it to run that season or a founding partnership conversation. We then delete or anonymise it.
- Deletion. Email info@lns.life and we will delete your form submission. Cleanup runs within 48 hours, the same as other deletion requests.
8 Contact Us
Questions about your privacy? Want to exercise your rights? Reach us directly:
If you believe we've mishandled your data, you can also file a complaint with India's Data Protection Board (for Indian users) or your local data protection authority (for EU users).