☣ PRIVACY POLICY ☣
// YOUR DATA. YOUR RULES.
Effective: October 11, 2026 | Contact: hello@lunchiesworld.com
1. The Short Version
LUNCHIE'SWORLD is local-first. Your PC's data — crash logs, health metrics, file contents, browsing history, keystrokes, microphone input — never leaves your machine unless you explicitly choose to send it (e.g., by using a cloud AI provider with your own API key).
We do not collect, store, sell, share, or monetize your personal data. Period.
2. Data We Process (and Why)
A. License & Trial Validation (Required for the app to function)
| Data | Source | Purpose | Retention |
|---|---|---|---|
| Machine ID (SHA-256 hash of Windows MachineGuid) | Your PC (local) | Bind trial/license to this device; prevent trial reset via reinstall | Until license expires + 90 days |
| License key (if entered) | You (input) | Verify Pro/Max subscription status | Active subscription + 90 days |
| Trial start timestamp | Our server (first check) | Enforce 30-day trial window | 30 days + 90 days |
| Subscription status (active/canceled/expired) | Stripe webhook | Gate Pro/Max features | Active subscription + 90 days |
No PC diagnostics, crash data, file contents, or usage behavior is ever sent.
B. Email Signup (Optional — Landing Page Only)
| Data | Source | Purpose | Retention |
|---|---|---|---|
| Email address | You (landing page form) | Send download link, trial instructions, occasional product updates | Until you unsubscribe |
| Referral code (if used) | URL parameter | Attribute referral credit | 12 months |
| Country (from Cloudflare) | Request header | Basic geographic aggregate (no IP stored) | Not stored |
Unsubscribe anytime via email link or emailing hello@lunchiesworld.com.
C. Cloud AI Providers (Your Choice, Your Keys)
If you add your own API keys (Groq, OpenRouter, Gemini, OpenAI, Anthropic, etc.):
- Requests go directly from your PC to the provider — not through our servers.
- We never see your prompts, responses, or provider usage.
- Your keys are stored locally in
%LOCALAPPDATA%\LunchiesWorld\keys.env(encrypted at rest by Windows). - You control which providers are used via the "Local AI Only" toggle.
D. Stripe Billing (Pro/Max Subscribers Only)
| Data | Purpose | Handler |
|---|---|---|
| Name, email, billing address, payment method | Process subscription payments | Stripe (PCI DSS Level 1) |
| Subscription metadata (tier, machine ID) | Feature gating, license issuance | Our KV store (encrypted) |
We never see your full card number. Stripe handles all payment data per their Privacy Policy.
3. Data We Never Collect
- ❌ Crash logs, event logs, diagnostic data
- ❌ File contents, filenames, directory structures
- ❌ Browsing history, cookies, passwords
- ❌ Keystrokes, clipboard contents, microphone audio
- ❌ IP addresses (beyond transient Cloudflare request routing)
- ❌ Unique advertising IDs, fingerprinting data
- ❌ Usage analytics, feature adoption metrics, funnel tracking
- ❌ Error reports with context (unless you manually submit feedback)
4. Local Storage (Your Machine Only)
The following stays entirely on your PC in %LOCALAPPDATA%\LunchiesWorld\:
| File | Contents |
|---|---|
license.txt | Your license key (if entered) |
license_cache.json | Cached license status (tier, expiry, features) |
trial_start.txt | Trial start timestamp |
keys.env | Your AI provider API keys (protected by Windows ACLs) |
pcfix/scans.json | Last 20 scan snapshots (health score, findings, disk space) |
privacy/settings.enc | Your privacy suite configuration, encrypted |
privacy/audit.enc | Encrypted local audit log of privacy actions you took |
vault/*.enc | Your encrypted notes (AES-256, passphrase-derived key) |
private_memory/ | Your encrypted private memory (AES-256, your passphrase) |
You own this data. Delete the folder and it's gone. We cannot access it.
5. The Privacy Suite — What It Actually Touches
The privacy tools ship in the app and run on your machine. None of them reports anything back to us.
| Tool | What It Does | What Leaves Your PC |
|---|---|---|
| Tor integration | Routes supported traffic through a Tor circuit | Nothing to us. Traffic goes to the Tor network |
| Encrypted DNS | Switches your resolver to DoH/DoT | DNS queries to the resolver you chose |
| VPN kill switch | Creates a local Windows Firewall rule that blocks outbound traffic if your VPN drops | Nothing — it's a local firewall rule you own |
| 3-pass secure delete | Overwrites a file three times, then unlinks it | Nothing — purely a local filesystem operation |
| Privacy audit log | Records the privacy actions you took into an encrypted local file | Nothing — the log never syncs |
| Data sweep | Clears the local search cache, usage metrics and audit log | Nothing |
These tools change local settings on your system. You can inspect every setting the app writes under %LOCALAPPDATA%\LunchiesWorld\privacy\, and you can reverse or wipe all of them from the app or by deleting that folder.
6. AI Content Detection — What Gets Sent
When you run an AI-detection check, the text you submit is the only thing involved. Depending on which detectors you enable, that text is sent to the detector's own service:
- GPTZero — text is sent to the GPTZero API. We do not receive or store a copy.
- GLTR, DetectGPT, Binoculars — these run locally against a local model where available; if they require a hosted model, the text goes to that provider directly from your PC.
- Watermark scanner — inspects the submitted text locally for provider watermark signatures.
- Deepfake signals — analysis is performed on media you explicitly point it at.
We never store submitted detection text, never log detector results, and never train anything on it.
7. Regional Threat Research — What's Sent
Regional research issues live web searches using a region-appropriate search engine and locale, then translates and summarizes the results. In doing so:
- Your search query text is sent to the search engine you invoke — the same as typing it into a browser.
- Your IP address is visible to that search engine as it is to any website.
- We receive no copy of the query, the results, or your IP. Nothing is logged to our servers.
If you prefer no external calls at all, use Local AI Only mode — regional research and cloud detectors are unavailable then, by design.
8. Third-Party Services
| Service | Purpose | Data Shared | Policy |
|---|---|---|---|
| Cloudflare (Pages, Workers, KV) | Hosting, API, edge caching | Transient request metadata (no IP stored by us) | Cloudflare Privacy |
| Stripe | Subscription billing | Name, email, billing info, payment token | Stripe Privacy |
| Google Apps Script (welcome email) | Send trial welcome email | Email, signup timestamp, referral code | Google Privacy |
| Your AI Provider | Cloud AI inference | Your prompts/responses (direct from your PC) | Provider's policy |
No analytics, tracking, or marketing pixels. No Google Analytics, Mixpanel, Amplitude, PostHog, etc.
9. Your Rights (GDPR, CCPA, and Beyond)
| Right | How to Exercise |
|---|---|
| Access — See what data we hold | Email hello@lunchiesworld.com with "Data Access Request" |
| Rectification — Correct inaccurate data | Same email; we'll update within 30 days |
| Erasure — Delete your data | Same email with "Delete My Data"; done within 30 days |
| Portability — Get your data in portable format | JSON export via email request |
| Restriction — Limit processing | Email request; we'll cease non-essential processing |
| Objection — Opt out of marketing | Unsubscribe link in any email, or email us |
| Withdraw Consent — Revoke any consent | Email request; immediate effect |
No automated decision-making or profiling occurs.
10. Data Retention & Deletion
| Data Type | Retention | Deletion Trigger |
|---|---|---|
| Trial records | 30 days after expiry | Auto-purge via KV TTL |
| License records | 90 days after expiration | Auto-purge |
| Email signups | Until unsubscribe | Immediate on unsubscribe |
| Referral records | 12 months | Auto-purge |
| Stripe customer data | Per Stripe retention (7 years for tax) | Stripe controls |
Your local data: You control it. Delete %LOCALAPPDATA%\LunchiesWorld\ anytime.
11. Security
- TLS 1.3 for all network communication (enforced by Cloudflare).
- EV Code Signing on Windows installer — verifies publisher identity.
- System Restore Points created before every system-modifying fix.
- Local-first architecture — attack surface minimized by design.
- No server-side database of user data — KV store only holds license/trial metadata.
- Regular dependency updates via automated security scanning.
12. Children's Privacy
LUNCHIE'SWORLD is not directed at children under 13 (or 16 in EU). We do not knowingly collect data from minors. If you believe a child has provided data, contact us immediately.
13. International Transfers
Our infrastructure (Cloudflare Workers, KV) runs globally. License validation requests may route through any Cloudflare data center. No personal data is stored outside the request lifecycle — KV entries are metadata only, encrypted at rest by Cloudflare. Stripe processes payments in the US (PCI DSS certified). Standard Contractual Clauses apply where required.
14. Changes to This Policy
We'll update the "Effective" date above. Material changes announced via in-app notification, email to subscribers, and blog post at lunchiesworld.com/changelog. Continued use after changes constitutes acceptance.
15. Contact
Data Protection / Privacy Inquiries:
hello@lunchiesworld.com
Postal Address (for legal service):
LUNCHIE'SWORLD
c/o Boyd Wentworth (Registered Agent)
6 City Center, 3rd Floor
Portland, ME 04101
(207) 536-7147
Response Time: We aim to respond to all privacy requests within 30 days (GDPR/CCPA requirement).
16. Legal Basis (GDPR Article 6)
| Processing | Lawful Basis |
|---|---|
| License/trial validation | Contract performance (Art 6(1)(b)) |
| Email signup (welcome email) | Consent (Art 6(1)(a)) |
| Email marketing (opt-in) | Consent (Art 6(1)(a)) |
| Stripe billing | Contract performance (Art 6(1)(b)) |
| Security/fraud prevention | Legitimate interest (Art 6(1)(f)) |
| Legal compliance | Legal obligation (Art 6(1)(c)) |
This policy is written in plain English, not legalese. If something's unclear, email us — we'll clarify and update it.