Privacy Policy | LMSA - LM Studio Assistant

At IslandApps ("we," "us," or "our"), a subsidiary of TechRay Apps LLC, your privacy is of utmost importance. This Privacy Policy explains how we collect, use, store, and share your personal information when you use LMSA (LM Studio Assistant), including both our Android app and the LMSA website (lmsa.app). It also outlines your rights and the measures we take to protect your data. We are committed to complying with all applicable privacy laws and regulations, including but not limited to the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Children's Online Privacy Protection Act (COPPA), and other relevant frameworks.

By accessing or using LMSA or our website, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

⚠️ Security Notice

LMSA connects to LM Studio over your local network using an unencrypted connection. This means other devices on the same network could potentially view or capture data you send (including messages and any shared files/photos). If your network is compromised, someone outside your network may also be able to intercept this data. A malicious device on the network could also impersonate an LM Studio server. Only use LMSA on networks you trust. Use at your own risk.

LMSA Privacy Overview

LMSA Android App: The LMSA Android app is designed to minimize data collection while providing essential functionality and monetization through advertising.

The LMSA Android app collects limited data for the following purposes:

Advertising: We use Google AdMob to display advertisements, which may collect device information, advertising identifiers, and usage data for ad personalization and measurement
App Functionality: Basic app usage data may be collected to ensure proper functionality and performance
Conversations: Your conversations with AI models remain on your devices and are not transmitted to or stored on our servers
Local Data: Character data, chat history, and settings are stored locally on your device

LMSA is designed to connect directly to your local LM Studio server, keeping your AI conversations on your own devices. The app functions as a client interface and does not route your conversation data through our servers.

LMSA Website: Our website (lmsa.app) uses analytics and customer support tools:

Umami Analytics: We use Umami, a privacy-focused analytics platform, to collect anonymous usage data about how visitors interact with our website. Umami does not use cookies and does not track users across websites.
Crisp Chat: We use Crisp for our customer support chat functionality. If you choose to use the chat feature, Crisp may collect information you provide during the conversation.

Important Security Information: LMSA does not currently encrypt communications between your Android device and the LM Studio server on your local network. This means that if someone is monitoring your network (through packet sniffing or other network surveillance techniques), they could potentially intercept and view your conversations with AI models. Please be aware of this limitation when using LMSA on public, shared, or potentially compromised networks.

Additional data collection may occur through the Google Play Store for basic app functionality (such as app downloads, updates, and crash reports), which is standard for all Android applications.

1. Information We Collect

We collect very limited information through our LMSA services. Here's a breakdown of what information is collected through the LMSA app and website:

1.1 LMSA Android App

The LMSA Android app collects limited data for advertising and functionality purposes:

Advertising Data: We use Google AdMob to display advertisements. AdMob may collect device information, advertising identifiers (such as Google Advertising ID), IP address, and app usage data for ad personalization and measurement.
Device Information: Basic device information such as device model, operating system version, and app version may be collected for functionality and troubleshooting purposes.
No Personal Information: We do not directly collect your name, email address, or other personal identifiers through the app.
No Account Required: LMSA does not require you to create an account or register to use the app.
No AI Conversation Storage: Your conversations with AI models remain on your devices and are not transmitted to or stored on our servers.
Google Play Store Data: Additional data collection occurs through the Google Play Store for basic app functionality (such as app downloads, updates, and crash reports), which is standard for all Android applications.
Payment Processing: When you purchase the app, payment processing is handled entirely by Google Play, and we do not have access to your full payment details.

1.2 LMSA Website

Our website (lmsa.app) collects limited information through two services:

Umami Analytics: We use Umami, a privacy-focused analytics platform, to collect anonymous usage data about how visitors interact with our website. This includes:
- Pages visited
- Referral sources
- Time spent on site
- Browser and device information
Umami is configured to respect privacy and does not use cookies to track users across websites.
Crisp Chat: If you use our customer support chat feature, Crisp may collect:
- Any information you voluntarily provide during the conversation
- Basic device and browser information
- IP address
Contact Information: If you contact us via email or through our website, we will collect the information you provide, such as your name and email address, solely for the purpose of responding to your inquiry.

2. Purpose of Data Collection

Given our minimal data collection practices, we use the limited information we collect for very specific purposes:

2.1 LMSA Android App

For the LMSA Android app, the data collected is used for:

Advertising: Google AdMob uses collected data to display relevant advertisements and measure ad performance
App Functionality: Enabling basic app operations, updates, and crash reporting
Payment Processing: Facilitating your purchase of the app through Google Play
Performance Optimization: Device information helps us optimize app performance and troubleshoot issues

2.2 LMSA Website

For the LMSA website, we use the collected information for:

Website Improvement: Analyzing anonymous usage data through Umami to understand how visitors interact with our website and improve the user experience
Customer Support: Using information provided through Crisp Chat to respond to your inquiries and provide assistance
Communication: Responding to emails or contact form submissions

2.3 Legal Compliance

In rare circumstances, we may use information to:

Comply with legal obligations
Protect our rights or property
Respond to valid legal requests from authorities

3. Legal Basis for Processing

Our legal basis for the limited data processing we perform is:

Legitimate Interests: For the LMSA website, we use Umami analytics based on our legitimate interest in understanding how users interact with our website to improve it. For the LMSA app, we use Google AdMob based on our legitimate interest in monetizing the app through advertising
Consent: For Crisp Chat on our website, which is only activated when you choose to use the chat feature. For advertising personalization, where applicable based on your device settings
Contractual Necessity: To fulfill our obligations in providing the LMSA app service after purchase
Legal Obligations: To comply with applicable laws and regulations when required

4. Data Sharing and Third-Party Services

4.1 LMSA Android App

For the LMSA Android app:

Google AdMob: We share data with Google AdMob for advertising purposes. AdMob may share data with advertising partners according to Google's privacy policy
Google Play Store: Google Play Store collects standard app usage information according to Google's privacy policy
Conversation Data: Your AI conversations connect directly to your local LM Studio server without routing through our servers
No Direct Data Sales: We do not directly sell user data to third parties

4.2 LMSA Website

For the LMSA website, we use the following third-party services:

Umami Analytics: A privacy-focused analytics platform that collects anonymous usage data
Crisp Chat: A customer support chat service that may collect information you provide during conversations

We do not sell your personal information to third parties under any circumstances.

5. Data Retention

Our data retention practices reflect our minimal data collection approach:

5.1 LMSA Android App

AdMob Data: Google AdMob retains advertising data according to Google's data retention policies
Local Data: Data stored locally on your device (such as app settings or conversation history) remains on your device and is under your control
Google Play Store: Google Play Store retains purchase records and app usage data according to Google's data retention policies
Our Servers: We do not retain conversation data on our servers as conversations connect directly to your local LM Studio server

5.2 LMSA Website

Umami Analytics: Anonymous usage data is retained for 90 days
Crisp Chat: Chat conversations are retained for 6 months to provide ongoing support
Contact Information: Information provided through contact forms or email is retained for up to 1 year to address ongoing inquiries

6. Data Security

We take appropriate measures to protect the limited data we collect:

6.1 Website Security

Our website uses HTTPS encryption for secure data transmission
We regularly update our website software to address security vulnerabilities
Access to analytics data is restricted to authorized personnel only

6.2 App Security

LMSA Network Security Disclosure

Please note that LMSA (LM Studio Assistant) currently does not implement encryption for communications between your Android device and the LM Studio server running on your computer.

This means:

Data transmitted over your local network is not encrypted
If someone has access to your network and is using network monitoring tools, they could potentially intercept and view your conversations with AI models
This vulnerability primarily exists on shared, public, or compromised networks

For maximum security, we recommend using LMSA only on private, secure networks that you trust, and avoiding use on public Wi-Fi networks or networks you don't control.

7. User Rights

Even though we collect minimal data, you still have important rights regarding your personal information:

Right to Access: You can request information about what data we have about you
Right to Correction: You can request that we correct any inaccurate information
Right to Deletion: You can request that we delete your personal information
Right to Object: You can object to our processing of your data
Right to Restrict Processing: You can request that we limit how we use your data

To exercise any of these rights, please contact us at privacy@techray.dev.

8. International Data Transfers

The limited data we collect may be processed in countries outside your country of residence:

Our website analytics and chat services may process data in the United States or European Union
We ensure that any international transfers comply with applicable data protection laws
For transfers to countries without adequate data protection laws, we implement appropriate safeguards

9. Children's Privacy

LMSA and our website are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

Posting the new policy on this page
Updating the "Last Updated" date
For significant changes, we may also display a notice on our website

11. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us at:

Company: IslandApps, a subsidiary of TechRay Apps LLC

Email: privacy@techray.dev

Address: Plymouth, Michigan USA

Data Protection Officer: dpo@techray.dev

LMSA Privacy Commitment

We want to emphasize our approach to privacy with LMSA:

LMSA Android App: Uses Google AdMob for advertising, which may collect device and usage data. Your conversations with AI models remain on your devices and are not transmitted to or stored on our servers.
LMSA Website: Uses minimal analytics (Umami) and customer support tools (Crisp) that respect user privacy.

Network Security Consideration: Please be aware that communications between your Android device and the LM Studio server on your local network are not encrypted. This means your conversations could potentially be intercepted if someone is monitoring your network. We recommend using LMSA only on secure, trusted networks.

If you have any specific questions about LMSA's privacy practices or security considerations, please contact us using the information provided above.