Who operates Lustra
Lustra is operated by 18075298 Canada Inc. in British Columbia, Canada. This notice describes the planned Lustra web, iOS, and Android applications.
Lustra is currently a private engineering beta. Public accounts, paid trials, and payments are not open.
Information Lustra uses
When access opens, Lustra may use account details, age-eligibility and consent records, onboarding answers, appearance goals, routine and fitness preferences, plan activity, check-ins, optional selfies, optional progress photos, generated profile and plan content, and subscription evidence needed for features you choose.
Some answers, photos, fitness information, and generated observations may be treated as sensitive or consumer health data in some places. The Consumer Health Privacy Notice describes that information conservatively.
Lustra does not receive payment card numbers. Apple or Google handles native payment details. Stripe may handle web payment details if web billing is activated later.
Optional photos and AI features
Profile and plan features require an explicit health-profile choice. Optional AI personalization requires a separate choice before Lustra sends the minimum disclosed context needed for the selected feature to OpenAI.
A selfie is optional and requires photo-specific consent. If selected, the prepared selfie and disclosed quiz categories are sent to OpenAI. The image is normalized to JPEG, source metadata is removed, and the Lustra copy is stored privately.
Progress photos are optional, private, and used for progress history. The current progress-photo design does not send those photos to OpenAI.
Generated observations are estimates for personal planning. They are not medical, diagnostic, or professional advice. Lustra does not use these features to identify you or infer ethnicity, a diagnosis, or another protected trait.
Analytics and advertising
This public website does not use analytics, advertising pixels, cookies, forms, or cross-site tracking.
The application design includes optional first-party product analytics that is off by default. If enabled with consent, it records fixed, coarse product events and excludes photos, quiz answers, generated content, names, email addresses, payment details, access tokens, full URLs, and free text.
Lustra does not sell personal information or consumer health data. The current build contains no advertising SDK, data broker integration, or targeted-advertising feed.
Service providers and processing locations
Supabase provides authentication, database, private storage, and server functions. OpenAI processes only the disclosed information after the required feature-specific consent. Apple, Google, RevenueCat, and Stripe may process subscription evidence when their respective billing paths are activated.
These providers may process data in Canada, the United States, or another location described in their service terms. The final processor list and transfer disclosures remain subject to release review.
Security and retention
Lustra uses authenticated access, row-level database policies, private storage, bounded uploads, short-lived signed image links, and server-side provider boundaries. No system can guarantee absolute security.
Optional product analytics has a 90-day engineering maximum. Product records and private media remain until an available deletion control is used or the account is deleted, unless a shorter approved rule applies. Limited payment, refund, dispute, security, and deletion evidence may be retained where required for legal, fraud, or financial reconciliation.
Your controls
The application provides account export, optional analytics controls, consent withdrawal, targeted selfie deletion, individual progress-photo deletion, and permanent account deletion.
Withdrawing consent stops future processing covered by that consent. It does not itself delete information already stored. The relevant deletion control must also be used.
Deleting a Lustra account does not cancel a subscription or stop renewal charges. Billing must be managed separately through the applicable store or payment provider.
Contact and changes
Contact the privacy team at privacy@lustraapp.com. Material changes to this notice will use a new effective date and, where required, renewed acknowledgement.
This notice describes the current engineering boundary. Final public launch remains subject to owner, provider, store, and qualified legal review.