In short
AiTodo stores your account and your conversations with the bots on our servers, and sends each message to the AI provider behind the bot to generate the reply. We use no analytics or advertising.
01Controller
The data controller is Lur Apps. You can contact us about any privacy matter at soporte.lur.apps@gmail.com.
02What data we process
- Your Google account data when you sign in: email, name and profile picture.
- Session and Google authentication tokens needed to keep you signed in.
- The full content of your conversations with each bot, and the summaries we generate so the bot can “remember” what you talked about.
- Credit and token usage, subscription plan, and Stripe customer and subscription IDs.
03What we use it for
- Give you access to your account and keep each conversation's history.
- Generate the bots' replies and their memory of previous conversations.
- Manage credits, subscriptions and payments.
04Where it is stored
In AiTodo's PostgreSQL database, on servers under our control.
05Third-party services
| Service | What it receives and why |
|---|---|
| Sign-in with your Google account. | |
| OpenAI, Anthropic, Google Gemini, Mistral, OpenRouter | Depending on the bot, one of these providers receives your messages and the conversation context to generate the reply. Some are outside the EU (USA). |
| Stripe | Billing for subscriptions and credit packs. Stripe handles your card details; we never see them. |
06Device permissions
None.
07Retention and deletion
We keep your data while you have an account. If you ask us to delete it, your profile, all your conversations, memory summaries and wallet are erased. Payment records required by tax law are kept for the legal period.
08Children
Adults only (18+). We do not allow accounts for minors and will delete any we detect.
09Other notes
- Do not share in chats anything you do not want an AI provider to process (for example health data or passwords).
- The bots are AI-generated characters: their replies are not professional advice (medical, legal, etc.).
10Your rights
- You can ask us to access, correct or delete your data, object to or restrict its processing, and request its portability.
- Where processing is based on your consent, you can withdraw it at any time without affecting prior processing.
- We only process data on a legal basis: providing the service you request, your consent, a legal obligation or our legitimate interest in keeping the service secure.
- If you believe we have mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
To exercise your rights, email us at soporte.lur.apps@gmail.com from the address linked to your account, if you have one. We reply within one month.
11Security
We use encrypted connections (HTTPS) for all communication with our servers, restrict access to data and store passwords hashed. We never sell your data or share it with third parties other than the providers listed, who only use it to provide their service to us.
12Changes to this policy
If we change how an app handles data, we will update its policy and revision date. If the change is significant, we will let you know in the app.