LINDIO · Legal information
Privacy Policy
Updated October 5, 2026 · optional website measurement
1. Who operates the service
LINDIO is operated by C R Investments USA LLC, doing business as Lindemann Capital. The operator handles personal information described in this policy. For privacy requests, contact admin@lindio.ai. Please do not send passwords, API keys or payment-card details in a support message.
2. Optional website campaign measurement
This optional feature measures campaign activity on the LINDIO website, not the native iPhone app or Apple purchases. It begins only after you choose Allow in Privacy choices. Refusing does not limit access, purchases or generation. This choice is separate from the service records and existing internal milestones described below. When allowed, we set a random first-party browser identifier in an HttpOnly cookie. The measurement database stores its hash, approved campaign labels, event timestamps and, after verified login or signup, your LINDIO account UUID. Events cover campaign landing visits, signup started/completed, pricing views, website checkout started, the first confirmed website subscription and the first generation started/completed. Opaque payment or generation references verify these facts and prevent duplicates. These account-linked records are not anonymous. They do not include email addresses, IP addresses, user-agent strings, prompts, uploaded media, generated media or advertising click IDs. This feature uses no Meta Pixel or Conversions API and does not send these records to advertising platforms. Campaign attribution lasts 7 days. Optional measurement records are deleted within a maximum of 30 days after collection. Your Allow or No thanks preference is remembered for 7 days in a separate functional cookie. No thanks creates no measurement identifier or account-tracking record; it saves only that preference and removes existing optional records as described next. Open Privacy choices on the website to withdraw and delete optional measurement at any time, including when collection is disabled. Withdrawal deletes records identifiable by the current browser cookie. If signed in, it also deletes optional measurement linked to your account, even in a new browser or after the identifier expired. If signed out with no usable cookie, sign in or contact admin@lindio.ai to request deletion of account-linked records. Withdrawal does not delete operational account, payment, generation or security records retained for their separate purposes. Access to internal measurement reports is restricted to authorized staff.
3. Accounts and authentication
We process your account ID, email, sign-in identity and profile details, including your name when provided by you or Apple/Google. Supabase handles authentication and sessions. Native Sign in with Apple also sends a short-lived authorization code, identity token and nonce to LINDIO for verification and exchange. This feature does not persist the code or identity token; it stores the resulting refresh token encrypted on the server so Apple authorization can be revoked during account deletion.
4. Creations and AI processing
Prompts, settings, reference images, source videos and generated files are associated with your account and generation history. Media can include faces, voices and other personal information. The generation review identifies the AI recipients before you authorize that submission. Selected providers process the content needed for the requested result. Declining does not submit that generation. Permission to generate is not permission to publish your work in advertising or a public showcase.
5. Video Transform price review
A Video Transform price request uploads the selected clip to LINDIO to validate and inspect the media before final generation consent. This price request does not submit a paid AI job or save the source in persistent creation storage. Submitting the transformation then stores the source privately and sends its temporary access URL, prompt and required settings to Higgsfield. The source audio can also be processed by LINDIO to preserve original audio. Do not upload media you lack permission to process.
6. Purchases and credit history
Apple processes purchases offered in the iPhone app; Stripe processes website checkout. LINDIO receives purchase and subscription identifiers, product, amount, currency, status and credit entries to verify ownership, deliver credits, restore purchases and reconcile renewals or refunds. Apple transactions are linked to your LINDIO account ID. The native Apple purchase flow does not give LINDIO your card-entry details. Restricted Sandbox testing uses separate test records and balances, still linked to the test account, not spendable credits for paid generation.
7. Support and service records
Support tickets, replies, content reports and deletion requests contain your contact information and the details you submit, sometimes including a generation reference. Authorized support staff use these records to respond and resolve requests. Transactional email services deliver account and support messages. We also process generation status, service errors and technical request information needed to operate and secure LINDIO. Error records can include generation or provider-job references linked to your account; these records are not necessarily anonymous. Do not include passwords, API keys, payment-card details or unnecessary sensitive content in support requests.
8. Why we use this information
We use this information to authenticate users, generate and store requested content, manage subscriptions and credits, prevent abuse, resolve support requests and improve reliability. Basic internal conversion metrics store your account ID and the dates of your first completed creation and first confirmed website payment. The restricted staff report displays aggregate counts, but the underlying milestones remain linked to your account. These metrics do not contain prompts or add advertising cookies. Where applicable, processing relies on providing the service, legal obligations, legitimate operational interests, or consent for optional uses.
9. Service providers and international processing
LINDIO uses Railway for hosting; Supabase for authentication, database and storage; Apple/Google for their sign-in options; Apple for native iPhone purchases; Stripe for website payments; and Resend for transactional account and support emails. Depending on the selected workflow and model, AI recipients include Google, OpenAI, Runway, Kling, Alibaba Cloud (Qwen), WaveSpeed and its model infrastructure, or Higgsfield for Video Transform. The submission disclosure identifies the applicable recipients, including when Auto selects a model. Processing can occur outside your country. Provider processing and retention are separate from LINDIO library storage; a temporary access link is not a promise of immediate deletion by a provider. Some provider terms permit model improvement or training unless restricted by an applicable agreement or setting. Do not assume that every model excludes these uses; contact admin@lindio.ai before submitting content if this matters to your choice.
10. Cookies and device storage
Website authentication cookies maintain your session; a language cookie remembers your selected interface language. Browser storage can preserve drafts and generation IDs. Where website trial claims are enabled, an anti-abuse cookie and hashed browser-token, IP and email values check trial eligibility; Cloudflare Turnstile receives the verification token and IP for bot checks. Hashing does not make account-linked records anonymous. This website trial flow is separate from native Apple purchases. The native app's main session and preferences use AsyncStorage. On iPhone, a recovery copy of guest session credentials also uses SecureStore in the encrypted device Keychain, configured for this device only. Downloads, previews and user-directed sharing can create local media copies or caches. Shared devices may retain local data; signing out does not delete copies you exported. Internal conversion reporting is described separately above.
11. Storage, access and retention
Saved sources and results use private storage and time-limited access links. Someone who receives a valid link may view its content until expiry, so share carefully. Link expiry restricts access; it does not delete the stored file. You can delete saved creations from your library. Completing account deletion removes LINDIO sign-in access, saved creations, references, stored Apple authorization credentials and support content. Limited transaction and deletion-audit records remain: account ownership identifiers, payment/transaction references, amounts, credit movements and processing timestamps needed for accounting, refunds, disputes and duplicate-purchase prevention. Retained credit-movement records can also include provider, model, quality and external job references. This is not an exception to keep all prompts, media or support messages. Deletion from active LINDIO storage does not prove immediate erasure from processor systems, email mailboxes or backups; contact admin@lindio.ai for a retention request.
12. Requesting account deletion
In the app, open Account → Account deletion to submit a confirmed deletion request, including when using a guest account. A received request is not completed deletion: within 7 days, an authorized operator checks pending processing and billing, removes account data and records completion. Accounts with an email address also receive a completion email; guests without an email address are not required to provide one. You do not need to start a separate email conversation to initiate deletion in the app. Apple authorization is revoked using a usable stored token; if no usable token is available, the completion message explains how to disconnect Apple manually. Account deletion does not cancel an Apple subscription: manage it in your Apple subscription settings. You do not have to wait for the subscription period to end to request deletion. If you cannot access the app, contact admin@lindio.ai for assistance.
13. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, portability or restriction of your personal information, object to certain processing, or withdraw consent for optional uses. Contact admin@lindio.ai; we may need to verify your identity. You may also have a right to complain to your local data-protection authority. We do not automatically publish your creations for promotion. Any such use requires separate permission.
