Privacy Policy

1. Who We Are

LukaChat ("we", "us", "our") operates the live video chat platform available at lukachat.com. This Privacy Policy explains how we collect, use, store, and share personal data when you use our Platform.

We are committed to compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. If you have questions, contact us via the Support page or by email at [email protected].

2. Data We Collect

Category	Examples	Purpose
Account data	Email address, username, age verification status	Account creation and authentication
Technical data	IP address, browser type, device identifiers, session timestamps	Security, fraud prevention, platform integrity
Usage data	Pages visited, features used, session duration	Product improvement and analytics
Payment data	Transaction ID, subscription tier (no full card data stored by us)	Billing and subscription management
Moderation data	Reports submitted, violations flagged	Community safety enforcement

We do not record or store video or audio from live sessions. All video streams are end-to-end encrypted and transmitted peer-to-peer. We have no access to the content of your calls.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contract performance: to provide the service you have signed up for.
• Legitimate interests: for security, fraud prevention, and platform improvement.
• Legal obligation: to comply with applicable laws, including age verification and reporting obligations.
• Consent: for optional features such as marketing communications.

4. How We Use Your Data

• To provide, maintain, and improve the Platform.
• To verify your age and identity where required.
• To process payments and manage subscriptions.
• To detect and prevent fraud, abuse, and policy violations.
• To respond to support requests.
• To comply with legal and regulatory obligations.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Payment processors: to handle subscription transactions securely.
• Infrastructure providers: cloud hosting and CDN services operating under strict data processing agreements.
• Law enforcement: when required by valid legal process or to protect the safety of users.

6. Data Retention

We retain account data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations. Technical and usage data is retained for up to 12 months. You may request deletion at any time (see Section 8).

7. International Transfers

Your data may be processed on servers located within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

8. Your Rights

Under GDPR and applicable law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data ("right to be forgotten").
• Restriction: request that we limit processing of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: at any time where processing is based on consent.

To exercise any of these rights, contact us via the Support page or by email at [email protected]. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies. See our Cookie Policy for full details.

10. Children

The Platform is strictly for adults aged 18 and over. We do not knowingly collect data from minors. If we become aware that a minor has provided personal data, we will delete it immediately and permanently ban the associated account.

11. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, strict access controls, and regular security audits. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

12. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or in-app notice. The date at the top of this page always reflects the most recent revision.