Lytta — Privacy Policy

Last updated: 31 August 2026

Lytta™ is a practice app for relationship communication skills. This policy explains what data the app handles, why, and what your rights are. The short version: we store the minimum needed to run the app, we never sell data, and there are no ads.

Who is responsible

The data controller is Sepman AS (Norway). Contact: villu@sepman.net.

What we collect and why

• Account data. You can use Lytta anonymously with a device-bound account. If you register, we store your email address (verified with a one-time code) and a salted, hashed password — never the password itself.
• Practice content. Your practice sessions — the scenario messages, your replies, the feedback you receive — are stored with your account so the app can show your history and progress.
• Derived skill data. Aggregate skill statistics and a short derived summary of your communication patterns, used to personalize practice. The derived summary does not contain transcripts of what you wrote.
• Technical metadata. Operational logs of AI calls (timing, token counts, cost) and safety events. These records never contain message content — this is a deliberate design rule.
• Abuse prevention. To prevent automated abuse and fraud (our legitimate interest under GDPR Art. 6(1)(f)), we record the IP address an account was created from and keep it for at most 30 days, after which it is deleted automatically. Standard server access logs (IP address, request time) are kept briefly for security and troubleshooting.
• Optional profile fields. A practice goal and optional demographic bands, if you choose to provide them.

AI processing

To generate the practice partner's responses and grade your replies, your messages within a session are sent to a third-party AI provider (currently the Google Gemini API) for processing. We send only what is needed for the session and do not permit the provider to use it beyond providing the service; see Google's Gemini API terms.

What we do not do

• No selling or sharing of personal data with third parties for their own purposes.
• No advertising, no ad tracking, no third-party analytics SDKs.
• No use of your practice content to train AI models.

Retention and deletion

You can delete your data at any time in the app (Settings). Deletion takes effect immediately in the app and residual copies are removed from backups within 30 days. Guest (anonymous) data can likewise be deleted from the device's settings screen.

Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, export, and erase your personal data, and to object to or restrict processing. Contact villu@sepman.net to exercise these rights. You may also lodge a complaint with your supervisory authority (in Norway: Datatilsynet).

Not therapy

Lytta is a skills-practice tool, not therapy, counselling, or crisis support. If you are in distress, the app will point you toward real resources — please use them.

Changes

If this policy changes materially, the "last updated" date above changes and the app will point to the new version.