Privacy Policy

LanyGames, Inc. ("LanyGames," "we," "us," or "our"), operating through its Lumithyon subdivision, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites or use Frosthyon on the web, iOS, Android, or desktop (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

We may collect information about you in a variety of ways. The information we may collect via the Services includes:

Personal Data. Personally identifiable information, such as your name, email address, phone number, address, and account credentials that you voluntarily provide when you register or update your profile.

Usage Data. Information our servers automatically collect when you access the Services, such as your IP address, browser or app type, operating system, device type, access times, pages or screens viewed, and feature usage.

Interaction Data. When you use AI-powered features such as Frosthyon, we collect data about your interactions including text inputs, voice inputs (when applicable), generated outputs, session duration, feature usage patterns, and feedback signals. This data is essential for the operation and improvement of our AI systems.

Audio. If you use voice features, we collect microphone audio and related transcripts for that session, as described under Voice below.

Location data. If you use maps or nearby-place features, we may collect precise or approximate location with your permission, as described under Maps and location below.

Photos, files, and images. Profile photos, camera or library images, documents (such as PDFs), and AI-generated images you create or attach, as described under Photos, files, and image generation below.

Device identifiers. Push notification tokens and similar device identifiers when you enable notifications, as described under Notifications below.

We use Amazon Cognito to create and authenticate Frosthyon accounts. If you sign in with email and password, we collect those credentials (passwords are stored by Cognito in hashed form, not as plain text we can read). If you sign in with Google or Apple, those providers share with us identifiers and profile details you authorize (typically name and email). One Frosthyon account works across web, iOS, Android, and desktop.

If you use Frosthyon voice features, we collect microphone audio and related transcripts or session data you provide during that session. Audio is processed to provide the voice conversation and may be sent to third-party AI and speech providers that host models on our behalf. Voice is optional; you can use Frosthyon without enabling the microphone. You can withdraw microphone permission in device settings.

If you set a profile photo, attach photos or documents to chat, or generate images, we collect those files and related prompts. They are stored as needed to provide the conversation and may be sent to third-party AI or image providers. Camera, photo library, and file access are optional and controlled in device settings. Do not upload content you do not have the right to use.

If you use maps or nearby-place features, we may collect precise or approximate location (with your permission) and place search queries. Location and map usage data may be shared with Mapbox, Inc. and, where used, other mapping or places providers (including Google Places for place photos or details) to render maps, geocode, and show points of interest. Location is optional. You can deny or revoke location permission in device settings; some map features will not work without it. Mapbox processes data under its own privacy policy (https://www.mapbox.com/legal/privacy).

If you use Trip or travel booking features, we may collect trip details you enter (such as names of travelers, dates, origin and destination, and contact information) to search and display offers. Payment for travel bookings is processed by Duffel (and its payment partners), not by LanyGames. Card details for travel may be tokenized through Evervault or similar PCI providers so that LanyGames does not collect or store your full payment card number. Duffel and the travel suppliers are independent controllers or processors of booking and payment data as described in their policies. We may retain booking references and itinerary summaries needed to show your trip in Frosthyon and to provide support.

If you subscribe or buy credits for Frosthyon, we collect plan, entitlement, and purchase-history data needed to provide the paid features. Payment card processing for subscriptions and credit packs is handled by Stripe and/or PayPal, not by LanyGames. We do not store your full card number. This is separate from travel payments processed by Duffel.

On iOS and Android, if you enable push notifications we collect a device push token and deliver it to Apple or Google (FCM) so we can send service messages you choose (for example account or usage notices). Notifications are optional. You can disable them in system settings or in Frosthyon notification preferences.

If you connect Instagram, TikTok, LinkedIn, Threads, or similar networks to publish from Frosthyon, we collect OAuth tokens and the draft content you choose to post. That content and those tokens are shared with the corresponding platform under their terms. You can disconnect accounts in Frosthyon. We do not sell your social tokens.

If you save assistant name, tone, or memory notes, we store them to personalize Frosthyon. In Account → Privacy you can opt in or out of using your interactions to help improve AI models. The default is off unless you enable it.

The Frosthyon desktop app may offer optional local integrations (for example MCP tools such as Blender). Those tools can access files or applications on your computer that you choose to connect. That local activity stays on your device except where you send content into a Frosthyon chat, in which case it is treated as Interaction Data above.

If you use Pulse or other community features on the web, we collect profile information, posts, comments, and media you publish so other users can see them as you intend. You can delete your posts where the product allows; copies may remain in backups for a limited period as described under Data Retention.

If you join the referral program we collect your referral code, related usage counts, and messages you submit when requesting a code. Separate Referral Program Terms apply (https://lumithyon.com/en/referral-program-terms/).

LanyGames uses data collected through the Services, including interaction data from Frosthyon and other AI-powered features, for the following purposes related to artificial intelligence development:

Model Training. We use aggregated, anonymized, and de-identified data derived from user interactions to train, fine-tune, and improve our machine learning models. This process helps us enhance the accuracy, relevance, safety, and overall quality of our AI-generated responses and services.

Quality Assurance. Interaction data may be reviewed — in anonymized form — to identify and correct errors, biases, or harmful patterns in AI outputs, ensuring our systems meet safety and quality standards.

Research and Development. We may use anonymized and aggregated usage patterns to conduct internal research aimed at developing new features, improving existing functionality, and advancing our AI capabilities.

De-identification Practices. Before any data is used for training purposes, we apply industry-standard techniques to remove or obscure personally identifiable information. We do not use raw, identifiable personal data for model training without your explicit consent (see Account → Privacy).

In addition to AI training purposes described above, we may use information collected about you to: (a) create and manage your account; (b) provide, operate, and maintain our Services; (c) process transactions and send related information; (d) send administrative information such as updates, security alerts, and support messages; (e) respond to your comments, questions, and requests; (f) monitor and analyze usage and trends to improve your experience; (g) protect against, identify, and prevent fraud and other illegal activity; (h) comply with legal obligations.

We use essential cookies and similar technologies for authentication, session security, and remembering language or similar preferences. The website and apps cannot function correctly without some of these. We do not use advertising cookies to sell your data. You can block non-essential cookies in your browser, but sign-in and some features may stop working.

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights. If we believe the release of information is necessary to respond to legal process, investigate potential violations of our policies, or protect the rights, property, and safety of others, we may share your information as permitted or required by applicable law.

Third-Party Service Providers. We may share your information with third parties that perform services for us or on our behalf, including Amazon Cognito (accounts), Google and Apple (optional social sign-in and push delivery), Stripe and PayPal (Frosthyon subscriptions and credits), Duffel and Evervault (travel booking and travel-card tokenization), Mapbox and Google Places (maps), AI and speech or image model hosts, email and cloud infrastructure, and social networks you connect for publishing. LanyGames does not process travel card payments; Duffel does. These parties process data under their policies and/or contracts with us.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We and our providers (including Amazon Web Services and other processors named in this policy) may process your information in the United States and other countries that may not have the same data-protection laws as your country of residence. Where required, we use appropriate safeguards for such transfers.

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Anonymized and aggregated data used for AI training may be retained indefinitely as it cannot be associated with any individual user.

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Depending on your jurisdiction, you may have certain rights regarding your personal information, including: (a) the right to access the personal data we hold about you; (b) the right to request correction of inaccurate data; (c) the right to request deletion of your personal data; (d) the right to object to or restrict processing of your data; (e) the right to data portability; (f) the right to opt-out of the use of your data for AI training purposes in Account → Privacy.

To delete some of your data without closing the account, or to delete your Frosthyon account, follow the steps at https://lumithyon.com/en/delete-account/. For other requests, contact us using the information below. We will respond within a reasonable timeframe and in accordance with applicable law.

The Services are not directed to children. Frosthyon is intended for users 16 years of age or older. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly. If you believe we might have any information from or about a child under 16, please contact us.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have questions or comments about this Privacy Policy, or if you wish to exercise your data rights, please contact us at lanygamesinc@lanygames.com.