Privacy Policy

Last updated: March 29, 2026

Rocket Digital Limited ("we," "us," or "our") operates the LUNA AI Art Generator mobile application and the website at www.lunaaiart.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Personal Information

When you create an account or use the Service, we may collect the following personal information:

• Email address
• Display name or username
• Profile picture (if provided)
• Authentication credentials (managed securely through Firebase Authentication)
• Payment and subscription information (processed by RevenueCat, Apple App Store, or Google Play Store)

1.2 User Content

When you use the Service to generate AI art, we collect:

• Text prompts you enter to generate images
• Photos and images you upload for AI processing (e.g., style transfer, image-to-image generation)
• AI-generated images created through the Service
• Generation settings such as selected AI models, styles, aspect ratios, and other parameters

1.3 Usage Data

We automatically collect certain information when you use the Service:

• IP address
• Browser type and version
• Pages visited and features used
• Time and date of visits
• Time spent on pages and features
• Referring URLs
• Crash reports and performance data

1.4 Device Information

We may collect information about your device, including:

• Device type, model, and manufacturer
• Operating system and version
• Unique device identifiers (e.g., advertising ID, device ID)
• Push notification tokens
• Screen resolution and display information
• Language and locale settings

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service
• To process your text prompts and images through AI models to generate artwork
• To manage your account and subscription
• To process payments and transactions
• To send you push notifications (with your consent)
• To monitor and analyse usage patterns and trends
• To detect, prevent, and address technical issues, fraud, and abuse
• To improve and personalise the Service
• To serve relevant advertisements
• To comply with legal obligations

3. Third-Party Services and Data Processing

We use the following third-party services to operate and improve the Service. Each service may collect, process, and store data as described below:

3.1 Firebase (Google LLC)

We use Firebase for backend infrastructure, user authentication, cloud messaging (push notifications), and crash reporting (Crashlytics). Firebase may collect device identifiers, IP addresses, usage data, and crash logs. For more information, see Firebase Privacy Policy.

3.2 RevenueCat

We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat processes transaction data, subscription status, device identifiers, and app user IDs. RevenueCat does not process or store your payment card details. For more information, see RevenueCat Privacy Policy.

3.3 Google AdMob (Google LLC)

We use Google AdMob to display in-app advertisements. AdMob may collect device identifiers, IP addresses, location data, and usage information to serve personalised ads. You can opt out of personalised advertising through your device settings. For more information, see Google Privacy Policy.

3.4 OpenAI

We use OpenAI's DALL-E models to generate AI artwork. When you submit a text prompt or upload an image for processing, that data is sent to OpenAI's servers for inference. OpenAI processes this data in accordance with their API data usage policies. We use the API, which means OpenAI does not use your inputs or outputs to train their models. For more information, see OpenAI Privacy Policy.

3.5 Microsoft Azure

We use Microsoft Azure for cloud computing and AI services. Your prompts and images may be processed on Azure infrastructure. Microsoft processes this data in accordance with their data protection agreements. For more information, see Microsoft Privacy Statement.

3.6 Replicate

We use Replicate for AI model hosting and inference. Your text prompts and uploaded images may be sent to Replicate for processing. Replicate processes inputs and outputs in accordance with their privacy policy and does not use API customer data to train models. For more information, see Replicate Privacy Policy.

3.7 Fal.ai

We use Fal.ai for AI model inference. Your text prompts and uploaded images may be sent to Fal.ai for processing. For more information, see Fal.ai Privacy Policy.

3.8 Google Analytics

We use Google Analytics on our website to collect and analyse usage data such as pages visited, session duration, traffic sources, and demographic information. Google Analytics uses cookies to track interactions. For more information, see Google Privacy Policy.

3.9 Meta Pixel (Meta Platforms, Inc.)

We use Meta Pixel on our website for conversion tracking and advertising purposes. Meta Pixel collects data about your website activity, including pages visited, actions taken, and device information. This data may be used to deliver targeted advertisements on Meta platforms (Facebook, Instagram). For more information, see Meta Privacy Policy.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to collect and store information. These include:

• Essential cookies: Required for the website to function properly.
• Analytics cookies: Used by Google Analytics to collect anonymous usage statistics, including session duration, pages visited, and traffic sources.
• Advertising cookies: Used by Meta Pixel and Google AdMob to track conversions and deliver targeted advertisements.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website. Most browsers allow you to refuse or delete cookies. Please refer to your browser's help documentation for instructions.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data: Retained for the duration of your account. Upon account deletion, your personal data will be deleted within 30 days, except where retention is required by law.
• Text prompts and generation history: Retained for the duration of your account to provide generation history features.
• Uploaded images: Processed in real time for AI generation and may be temporarily cached on our servers. Uploaded images are not retained permanently unless saved to your generation history.
• AI-generated images: Stored on our servers for the duration of your account.
• Usage and analytics data: Retained in aggregate or anonymised form for up to 26 months.
• Crash reports: Retained for up to 90 days.

6. Children's Privacy

The Service is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@rocketdigital.ai so we can take appropriate action.

7. Your Rights

7.1 General Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data, subject to legal obligations.
• Restriction: Request that we restrict the processing of your personal data.
• Portability: Request a machine-readable copy of your personal data.
• Objection: Object to processing of your personal data for certain purposes.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

7.2 Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the rights described above under the General Data Protection Regulation (GDPR) and UK GDPR. Our legal basis for processing your personal information includes:

• Performance of a contract: Processing necessary to provide the Service to you.
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving the Service and preventing fraud.
• Consent: Where you have given consent for specific processing activities, such as marketing communications and personalised advertising.
• Legal obligation: Processing necessary to comply with applicable laws.

You also have the right to lodge a complaint with your local data protection authority.

7.3 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to correct: You may request correction of inaccurate personal information.
• Right to opt out of sale/sharing:We do not sell your personal information. We may share data with advertising partners (e.g., Meta Pixel, Google AdMob) for targeted advertising, which may constitute "sharing" under the CCPA. You may opt out by adjusting your device advertising settings or contacting us.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at hello@rocketdigital.ai. We will respond to your request within the timeframe required by applicable law.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest where applicable
• Regular security assessments and monitoring
• Access controls and authentication for internal systems
• Secure cloud infrastructure provided by Firebase and Microsoft Azure

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other jurisdictions where our third-party service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer your data internationally, we take steps to ensure that appropriate safeguards are in place, including standard contractual clauses, data processing agreements, and compliance with applicable data protection frameworks.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date at the top. We may also notify you via email or in-app notification for significant changes.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Company: Rocket Digital Limited
• Address: 1603, The L Plaza, 367-375 Queens Road Central, Hong Kong
• Email: hello@rocketdigital.ai