Privacy Policy
The short version
Lynu exists to help you and, if you choose, your partner understand a hard conversation. That means it handles some of the most personal material you have: your voice, your words, your fights. So we hold ourselves to a simple standard in this document: we tell you what the system actually does, not what sounds reassuring. Where the honest answer is imperfect, we say so.
In brief:
- We delete our copy of your voice recordings right after they are transcribed.
- We keep the transcript of a conversation for as long as the conversation lives in the app — there is no automatic expiry date. You can delete it, and there are events (withdrawing consent, unpairing, deleting your account) that erase it.
- Two outside companies process your content on our behalf: Deepgram (transcription) and Anthropic (analysis). Nothing is sent to them until you are shown a disclosure in the app and agree to it.
- We collect no contacts, no location, no advertising identifiers, and use no third-party analytics. The microphone is the only device permission we ask for.
- Your reports are for understanding, not for court. They are not designed or verified for legal use.
- Lynu never records phone calls, and never will.
The rest of this policy is the detail behind those sentences.
What Lynu does
You record a spoken account of a difficult conversation (a "debrief"), record a live conversation together with your partner on one phone, or paste in text. The audio is transcribed, the text is screened for safety, and an AI analysis produces a report. If you are paired with a partner, some report content is shared between you and some is private to each of you — your partner never sees your private part, and you never see theirs. There is also an "appreciations" feature: short voice or typed notes you can choose to share with your partner.
What we collect
Content you give us. Voice recordings (debriefs, live sessions, voice appreciations), and text you type or paste. This is the heart of the app and the most sensitive thing we hold; everything below is mostly about how we limit what happens to it.
Account information. You can use the app as a guest, without giving us an email address. A guest account is a real account: it has real data in it, and deleting it deletes that data — this surprises people, so we say it plainly. You can later attach an email address or Sign in with Apple to the same account so you can recover it.
Usage counters. We keep simple, first-party counters in our own database (for example, that an analysis ran) so the app works and we can operate it. These counters carry no conversation content.
Device permissions. The microphone, for recording. That is the only device permission the app requests.
What we deliberately do not collect
No contacts. No location. No advertising SDKs or advertising identifiers. No third-party analytics of any kind — no analytics company receives anything about how you use this app. We built it that way on purpose, because of what this app is for.
Who processes your content
Two companies process your content on our behalf, and your phone never talks to either of them directly — everything goes through our servers. Before your first analysis, the app shows you a disclosure naming them and asks you to agree; nothing is sent until you do.
| Who | What they receive | Why |
|---|---|---|
| Deepgram | The audio of a debrief, live session, or voice appreciation | Turning speech into a transcript, with speakers separated |
| Anthropic | The transcript, or the text you typed or pasted | A safety screen, then the analysis that produces your report |
How long they keep it — stated as measured, not as assumed.
- Anthropic keeps inputs and outputs for 30 days by default, and may access them for safety and security purposes. We checked this setting on our own account; zero-data-retention is not applied to our organization.
- Deepgram gives us no way to see or control how long they keep audio or transcripts — their console exposes no retention setting for our account. The honest answer is unknown. Not zero: unknown. We checked.
We will not tell you "zero retention where available" or similar conditional phrases, because they read as a promise and aren't one.
How long we keep your content
Your voice recordings. Our copy of the audio is deleted from our storage right after a successful transcription. The recording exists with us for minutes, not days. In the rare case that this automatic deletion fails, the leftover recording is removed when you delete your account. We are building a scheduled cleanup that shortens that; this policy will change when it is live.
Transcripts. We keep the transcript of a conversation from the moment it is made. There is no time-based expiry: it lives as long as the conversation does. We keep it so that an analysis that fails partway can be finished without recording — and paying — a second time, and so you can come back to it. It is erased when you delete the conversation, when the consent behind it is withdrawn, when a couple unpairs, or when the account is deleted.
Reports. Kept in your account until you delete the report, the conversation it came from, or your account.
Appreciations. The text of an appreciation — the transcript of your voice note, or what you typed — is the appreciation. It is kept until you delete that entry or your account. Once you share an appreciation, your partner can read it; if you unpair, a shared appreciation stops being shared, but is not deleted from your own account.
Pasted text. Original pasted material is processed and then handled under the same lifecycle as everything above.
Couples: what is shared, and what unpairing does
- Shared report content is visible to both partners. Private parts are private: each partner's private content is never visible to the other.
- Unpairing makes shared reports and sessions inaccessible to both of you immediately. The underlying data is then deleted within 8 days (the deletion job runs nightly; "immediately inaccessible, physically deleted within days" is the honest description). The conversation transcript is deleted on the same schedule.
- A joint report dies with either account. If either partner deletes their account, shared content is removed for both of you. Each person's private parts stay with their own account.
Deleting a conversation
You can delete a conversation from the app whenever you want: the transcript, the working notes, and the report all go.
One honest exception: we cannot delete a conversation while an analysis of it is still running. If you tap delete at that moment, the deletion will not go through, and you can delete it as soon as the analysis is done — usually a minute or two later. We refuse honestly rather than pretending to queue a deletion we haven't done.
Deleting your account
When you delete your account:
- Access ends immediately. Your content stops being available to anyone, including a paired partner, right away.
- Physical deletion completes within 30 days. Copies in backups age out on our backup rotation within that window. We say "within 30 days" rather than "instantly" because instant physical erasure across storage and backups is not something we can truthfully promise — and companies that promise it generally can't either.
- Deletion at our processors follows their terms. We delete our copies; Deepgram and Anthropic handle data under their own data-processing terms (see their retention above).
- Two kinds of records survive account deletion, and neither contains your words:
- A minimized consent record — who agreed to what, and when (for example, that both partners consented to a recording session). We keep it for three years as evidence that consent existed, because in a product like this, proof of consent protects both partners. It contains no conversation content, no audio, and no reports.
- Billing records for work that was already paid for. These contain no conversation content.
Your choices
Everything above is available to you inside the app, without asking us: you can read every report and appreciation we hold for you, delete your own conversations, withdraw your consent from a shared one, unpair, and delete your account. If you cannot do something from the app, write to info@immersivepeaks.com and we will do it for you.
Security
Your data is protected in transit and at rest by platform encryption, and by strict access controls that limit every piece of data to the account — and, for shared content, the paired partner — it belongs to. We do not claim end-to-end or per-couple encryption, because we have not built it, and we won't market security we don't have.
Recording laws are real, and they are yours to follow
Lynu is built consent-first: a live session records only after both partners confirm on their own phones, a recording banner stays on screen, and either of you can stop it at any moment.
But the law of the state you are in may require the consent of everyone being recorded, and you are responsible for recording lawfully. This policy is not legal advice, and the app's consent flow does not substitute for the law of your state.
Lynu never records phone calls. Not as a feature, not through a workaround, not ever.
What the reports are — and are not
Reports are a communication analysis, not therapy and not a verdict. They are not designed or verified for legal use. If you are in a legal proceeding, talk to your lawyer about what evidence actually requires — Lynu is built for understanding, not for court.
Where Lynu is available
The app is offered in the United States only at this time. We have not done the work required to serve people in the EU/UK under GDPR, so we don't offer the app there, and this policy does not claim rights frameworks we don't yet operate under.
If you are using Lynu through Apple's TestFlight beta program, Apple's TestFlight terms and privacy policy also apply to that program.
Children
Lynu is for adults dealing with adult relationships. It is not directed to anyone under 18, and it is rated 17+ on the App Store.
This website
lynu.app is a static site hosted on GitHub Pages. It sets no cookies, runs no analytics, and loads nothing from advertising or tracking companies. GitHub, as the host, logs visitors' IP addresses for security purposes under its own privacy statement. The App Store badge on this site links to Apple.
Changes to this policy
When we change this policy in a way that matters, we will say so in the app and ask you to look again — and where a change affects what happens to your content, the app asks for your agreement again before processing anything new.
Contact
Immersive Peaks — info@immersivepeaks.com