Privacy Policy

Luzzy is operated by Sylphx Limited, registered in England and Wales (company number 16438428), registered office: 128 City Road, London EC1V 2NX, United Kingdom. Sylphx Limited is the controller of your personal data. Contact us about privacy at hi@luzzy.chat.

Account data: your name, email address, a securely hashed password, and your date of birth, which we use only to confirm you are 18 or over (we store the result of that check and when it was made).

Practice data: the scenarios you choose, everything you and your AI practice partner write in each session, and the feedback and scores for each session.

Spoken replies, only if you use the microphone: what you say becomes text in your reply box, and only the text you send is kept, like a typed reply. We never store a recording.

First session without an account: if you try a session before signing up, we store the session (your messages, your partner’s replies and the feedback), the date of birth you confirmed and when, a random value from a cookie in your browser (we keep only a scrambled, one-way copy of it), and a keyed one-way hash of your IP address (we never keep the address itself). We use the last two only to allow one trial session per browser, three per network and a daily total for the service, not to identify you or to advertise.

Subscription and payment data: whether you have Luzzy Pro, the billing period, and for each payment or refund its amount, currency, date and the reference numbers our payment provider gives us. We never see or store your full card details.

Technical data: sign-in sessions (including IP address and browser type, for security), server logs kept for a short time to run and protect the service, and error reports (what went wrong and on which page, with email addresses and query strings removed), which go to our own error monitoring service, run by Sylphx Limited, so we can fix faults.

Measurement data, only if you accept: sign-up, trial start and purchase events (amount, currency and plan, never your name or email), page views of our public pages, and your Google Ads click id and campaign tags, which we keep in a cookie and attach to your checkout to match a purchase to an ad.

To provide Luzzy to you under our contract with you: running practice sessions, generating your feedback, showing your progress, managing your subscription, and answering your requests.

For our legitimate interests in running a safe, working and improving service: security, preventing abuse and fraud, fixing faults, understanding and improving Luzzy, recognising messages that suggest someone may be at risk so we can show support resources, and establishing, exercising or defending legal claims.

To meet legal obligations, such as tax and accounting records for payments.

We do not sell your data, we do not show advertising inside Luzzy, and we do not use your transcripts to train AI models. Our own advertising is measured only with your consent and never uses what you write in practice.

Our cloud hosting provider, which runs our servers and databases.

AI model providers, reached through our AI gateway, which generate your partner’s replies and your feedback from the conversation text. They process it only to return a response to us.

Speech-to-text, only if you use the microphone. Where your browser has its own speech recognition, Luzzy uses it: it is run by the company that makes your browser (for example Google for Chrome, or Apple for Safari), which may receive the audio under its own privacy terms, not ours, and our promises about your transcripts cover only what reaches Luzzy. Where your browser has none, your recording is sent through our AI gateway to a speech-to-text provider, which processes it only to return the text and does not use it to train AI models; Luzzy never stores the recording.

Stripe, which processes payments for Luzzy Pro as an independent controller of payment data, and Sylphx Money, the payments service run by Sylphx Limited, which records your subscription and what it entitles you to.

An email provider, used only to send account emails such as sign-in codes and password resets.

We may also share data with professional advisers, authorities where the law requires it, and a buyer or successor if our business or Luzzy is sold or reorganised.

Some of these providers are outside the UK. Where data leaves the UK, we rely on UK adequacy regulations or safeguards the law approves, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Contact us for a copy.

Google Ireland Limited and Google LLC (Google Analytics and Google Ads), which receive the measurement events above only if you accept them, to tell us which advertising works. They are not given practice conversations, feedback or your email.

We keep your account and practice history while your account is open. When you delete your account it is deactivated at once and erased permanently 30 days later, including every transcript and all feedback. Records of payments and refunds are kept for as long as tax and accounting law requires; when your account is erased, your account id is removed from them, and Stripe keeps its own payment records. We may keep other data for longer only where we need it to meet a legal obligation, prevent fraud or abuse, or establish or defend legal claims. Server logs and backups are overwritten in the normal course of operation.

A session tried without an account, and the records that limit trial sessions, are deleted 24 hours after the session starts, unless you save it by signing in to an account, when it becomes part of your practice history. Our daily clean-up run performs the deletion, so a session can still be stored for a little longer than 24 hours, but it can no longer be opened after that.

You can access, correct, download and delete your data. Download everything from Settings (Download my data) and delete your account from Settings (Delete account). You can also ask us to restrict processing, and withdraw consent where we rely on it.

You have the right to object at any time to processing based on our legitimate interests, and to any direct marketing.

Write to hi@luzzy.chat for any request. We reply within one month, which the law allows us to extend by up to two further months for complex or numerous requests. We make reasonable and proportionate searches, and we may charge a reasonable fee for, or refuse, a request that is manifestly unfounded or excessive.

If you are unhappy with how we handle your data, you can complain to us at hi@luzzy.chat, and to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

Luzzy is only for people aged 18 and over. If we learn that an account belongs to someone under 18, we may close it and erase its data.

We protect your data with appropriate technical and organisational measures, but no service is completely secure. If a personal data breach occurs, we notify the Information Commissioner’s Office where the law requires, and we tell you directly where the breach is likely to result in a high risk to your rights and freedoms.

Before September 2026, Luzzy was a dating and chat app. Its matching, chat, coins and gifts have been closed and their records removed from the service.

We may update this policy and will post the new version here with a new date. If we plan to use your personal data for a new purpose, we will tell you before we do.