Legal

Privacy Policy

This Policy explains what personal data Lura processes, why we process it, and how you can manage it.

Last updated: May 9, 2026

1) Data controller

The service is provided under the Lura name through cortexcraft.org.

For privacy requests, questions, or deletion requests, contact us at help@cortexcraft.org or through the support/contact flow available in the service.

2) What data we process

Account data: name, email address, authentication provider identifiers, and basic profile information received from Google or another sign-in method you choose.
Self-reflection and profile data: answers to questionnaires, personality-related profile information generated from those answers, and settings connected with your profile.
Chat and request content: messages you send to Lura, conversation history, generated replies, language preferences, and other content you voluntarily provide.
Subscription and payment data: plan, quota, subscription status, payment provider identifiers, transaction status, billing period, and purchase history. We do not store full card details.
Technical and security data: IP address, device/browser information, cookies or similar identifiers, logs, timestamps, diagnostics, and events needed to keep the service reliable and secure.
Support communications: messages, contact details, and any information you send when asking for help.

3) Purposes of processing

to provide and maintain Lura, including the questionnaire, personality profile, AI chat, account features, and subscriptions;
to personalize responses using the information you choose to provide and the profile created from your questionnaire answers;
to process payments, manage quotas, prevent abuse, and provide customer support;
to improve product quality, reliability, safety, analytics, and user experience;
to comply with legal, accounting, tax, security, and dispute-resolution obligations;
to send service messages and, where required, marketing messages only with your consent.

4) Legal bases

Depending on the context, we process data based on performance of a contract, your consent, compliance with legal obligations, and our legitimate interests such as service security, product improvement, fraud prevention, and support.

5) AI, self-reflection, and sensitive content

Lura is an AI self-reflection service. It is not a medical, psychological, psychotherapeutic, legal, financial, or crisis-support service, and it does not provide diagnosis or treatment.

Please do not send information you do not want processed by the service. You should not use Lura for emergencies or situations involving risk of harm to yourself or others. In such cases, contact local emergency services, a qualified professional, or a trusted person immediately.

We share data only when necessary to provide, secure, or operate the service. This may include hosting and infrastructure providers, authentication providers, payment processors, analytics and diagnostics tools, email or messaging providers, professional advisers, and public authorities where required by law.

Payment information is processed by payment providers under their own security standards. We do not store full payment card numbers.

7) Cookies and similar technologies

We may use cookies, local storage, SDKs, and similar technologies for authentication, session continuity, security, analytics, and improving the user experience. You can limit some collection through browser or device settings, but parts of the service may stop working correctly.

8) Storage and deletion

We store data for as long as needed to provide the service, maintain your account and subscription, comply with legal obligations, resolve disputes, prevent abuse, and improve reliability. After that, data is deleted or anonymized where reasonably possible.

You may request deletion of your account and personal data by contacting us. After deletion, you may lose access to your profile, chat history, subscription-related service state, unused quotas, and progress history. Some records may be retained where required for accounting, tax, security, legal, or dispute-resolution purposes.

9) Your rights

Depending on applicable law, you may have the right to access, correct, delete, restrict, object to processing, withdraw consent, receive a copy of your data, or lodge a complaint with a competent authority. To exercise these rights, contact us using the details above.

10) Minors

Lura is intended for users who have the legal capacity to use online services or have consent from a parent or legal representative where such consent is required. We do not knowingly collect data from children where this would be prohibited by law. If you believe a minor has provided data unlawfully, contact us and we will review the request.

11) International transfers

Your data may be processed outside your country of residence by service providers used to operate Lura. Where required, we rely on appropriate safeguards and limit such processing to the purposes described in this Policy.

12) Changes to this Policy

We may update this Privacy Policy from time to time. The current version is published on the website. Continuing to use Lura after an update means you accept the updated Policy where permitted by law.

Questions about your data?

Back to Lura