Privacy Policy

Last updated September 2, 2026

1. The short version

LustAI is built so that there is as little to leak as possible. Strangers never learn who you are. We never store photos, videos or call content. Text sent through the bot is relayed, not kept. Mini App chats are end-to-end encrypted on your device. Session records self-destruct after 72 hours.

2. What we store

  • Account: your Telegram user ID, your language code, your age confirmation, your plan and its expiry, and the settings you choose (interests, NSFW filter, gender and language preferences). We do not receive your phone number.
  • Sessions: for each chat, a throwaway session code, the two account IDs, the mode (text or video) and the timestamps. These are deleted automatically 72 hours after the chat ends. They exist only so that reports work and so that a paid chat recovery can find the right person in time.
  • Safety: reports you send or receive, with their reason and time, and any resulting suspension. Bans are tied to the Telegram account.
  • Payments: the plan, amount, method and a payment reference from Telegram Stars, Stripe or the crypto network. Card numbers never reach us; Stripe handles them.
  • Aggregate counters: the number of chats started and people online, with no user data attached.

3. What we never store

  • No photos, videos, voice or call content. Video and voice go peer to peer over WebRTC (DTLS-SRTP); a TURN relay is used only for connectivity and cannot read the stream.
  • No Mini App messages: they are encrypted with keys made on your device (ECDH P-256, HKDF, AES-256-GCM) and are only readable on the two devices in the chat.
  • No copies of bot messages: the bot relays them once, with Telegram’s forwarding and saving protections turned on.
  • No NSFW analysis on our servers: the explicit-content classifier runs on your device.

4. Who can see what

The person you are matched with sees only what you send them and, in video chat, what your camera shows. They never see your name, username, phone number, Telegram ID or photo unless you reveal them yourself (for example with /link). Telegram sees the traffic that passes through its platform under its own privacy policy. Stripe and the crypto networks see the payment data they need.

5. Your choices

  • /profile changes or clears your interests and preferences.
  • /clear deletes the bot conversation from your Telegram chat.
  • /remove deletes your account and its settings; sessions expire on their own within 72 hours.
  • Blocking the bot in Telegram stops all processing.

6. Legal bases and retention

We process account and session data to provide the service you asked for, safety data to protect other users, and payment data to fulfil the contract and meet accounting rules. Session data lives 72 hours; account data lives until you delete it; payment records are kept as long as accounting law requires; ban records are kept while the ban is in force.

7. Contact

Privacy requests: message @heylustbot on Telegram and use /support.