Loremana is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights regarding that information.
We operate under the Canadian federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. If you are located in the European Union or UK, additional rights under the GDPR apply to you.
The short version: We collect only what we need to run the service. We don't sell your data. We don't use your creative content to train AI models. You can request deletion of your data at any time.
| Data | When Collected | Required? |
|---|---|---|
| Username | Account registration | Yes |
| Email address | Account registration or profile update | Recommended (for password recovery) |
| Password (hashed, never stored in plain text) | Account registration | Yes |
| Creative content (characters, lore, world notes, images) | During use of the Service | No — optional, user-generated |
| Payment information | Subscription purchase | For paid plans — handled by Lemon Squeezy, not stored by us |
We do not collect IP addresses for tracking purposes, use advertising cookies, or build behavioural profiles.
We do not sell, rent, or share your personal information with advertisers or data brokers.
We do not use your creative content (lore, characters, stories, images) to train AI models.
We use the following third-party services to operate Loremana:
| Service | Purpose | Data Shared |
|---|---|---|
| Lemon Squeezy | Payment processing & subscription management | Email, payment details (not stored by us) |
| Resend | Transactional email delivery | Email address, email content |
| OpenRouter | AI text generation (Scribe) | Your prompts and context. Not used for training. |
| fal.ai | AI image generation (Artist) | Your image prompts. Not used for training. |
| Hostinger | Web hosting & database | All Service data is stored on Hostinger servers in the EU. |
Each provider operates under their own privacy policy. We recommend reviewing them if you have concerns about specific data handling.
Under PIPEDA and applicable law, you have the right to:
EU/UK users additionally have rights under GDPR including the right to object to processing and the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at privacy@loremana.com. We will respond within 30 days.
We implement reasonable technical and organisational measures to protect your data, including:
No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
Loremana is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at privacy@loremana.com and we will delete it promptly.
Your data may be processed by our service providers in locations outside Canada, including the United States and European Union. When transferring data outside Canada, we rely on contractual protections consistent with PIPEDA requirements.
We may update this Privacy Policy from time to time. We will notify you of material changes by email (if you have a verified email on file) and by updating the effective date at the top of this page. Continued use of the Service after changes constitutes acceptance.
For privacy questions, data access requests, or deletion requests:
Loremana — Privacy Officer
Email: privacy@loremana.com
We aim to respond to all requests within 30 days.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.