Last updated: October 18, 2026
This Privacy Notice describes how Lunkwill AI (“we”, “us”, “our”) collects, uses, and protects information about you when you use Lunkwill (“the Service”). It applies to app.lunkwill.com, the Lunkwill desktop app, and our site at www.lunkwill.com.
We collect information in four categories:
For users in the EU, UK, or other GDPR jurisdictions, we process your data on the basis of: (a) contract performance — to provide the Service you signed up for; (b) legitimate interests — to keep the Service secure and improve it; and (c) consent — for any processing that goes beyond the above (we will ask explicitly).
We share data only with service providers that operate the Service on our behalf:
www.lunkwill.com) and any transactional email we send.We do not sell your data. We do not share your data for advertising purposes. We do not use your content to train models without your explicit, separate consent.
What it reads from Google is used only to work for you — never for ads, never to train a model — and is deleted when you ask. We never sell it. You can forget it at any time (see §7 and §8). Lunkwill’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
If you provide your own AI provider API key (e.g., Anthropic), we encrypt it at rest using AES-256-GCM with a key managed by us, and decrypt it only when calling the provider on your behalf. Your key is never logged or shared.
We retain your account data and content for as long as your account is active. If you delete your account, we delete or anonymize your content within 30 days, except where retention is required for legal, tax, or security reasons. Operational logs are retained for up to 90 days.
Copies of what you connect stay until you forget them. In Lunkwill you can forget an account, a person or a single line, and Lunkwill tells you what was removed. Disconnecting an account stops the reading at once and removes our access; what was kept stays until you forget it.
The copies of what you connect are yours alone: people in your organisation and their agents cannot read them. What Lunkwill writes from them about your company, its projects and the people you work with is shared with your organisation.
You can:
To exercise any of these, email hello@lunkwill.com. We will respond within 30 days.
We use industry-standard practices: encrypted connections (TLS) for all traffic, encryption at rest for sensitive fields (BYOK keys), and for the copies of your mail, messages, notes and files, each organisation under its own key, short-lived access tokens, and least-privilege access for our team. No system is perfectly secure, but we work to minimize risk.
We are US-based, and our infrastructure providers are US-based. If you use the Service from outside the US, your data will be transferred to and processed in the US under appropriate safeguards (such as Standard Contractual Clauses with our processors).
Lunkwill is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has shared data with us, contact us and we will delete it.
We may update this Privacy Notice as the Service evolves. The “Last updated” date at the top reflects the most recent version. For material changes, we will notify you via email or in-product.
Questions about your privacy or this notice? Reach us at hello@lunkwill.com.