Privacy Policy

At TechMitten LLC, we care deeply about your privacy and respect your right to keep your conversations private. TechMitten LLC does not see or collect your local server chat data, nor can we see your data if you optionally use cloud APIs like OpenRouter. We will never share your chats with advertisers, and other apps on your device cannot access your stored chat data. LMSA is engineered from the ground up for complete data sovereignty, meaning you remain in full control of your information when using local servers.

This Privacy Policy explains exactly how we protect your data across the LMSA Android app and our website (lmsa.app). We are fully committed to complying with GDPR, CCPA, COPPA, and modern privacy standards. By using our services, you agree to these practices. Your use is also subject to our Terms of Service.

We believe in data sovereignty: we don't own your chats

Zero Data Retention (ZDR) – How LMSA respects your privacy when using OpenRouter

LMSA enforces Zero Data Retention (ZDR) when you chat with any OpenRouter model that qualifies for this feature. This gives you the highest level of privacy available from cloud‑based AI providers.

What ZDR means (as defined by OpenRouter)

"Zero Data Retention (ZDR) means that a provider will not store your data for any period of time. Providers that do not retain your data are also unable to train on it. (Some providers may retain data temporarily for abuse detection or legal compliance without training on it – OpenRouter gives you separate controls for training policies.)"

ZDR is an OpenRouter feature, not an LMSA feature

Zero Data Retention is a privacy feature provided by OpenRouter. LMSA does not have its own ZDR mechanism. Instead, for every chat request sent to OpenRouter, LMSA automatically adds the zdr: true parameter and only allows models that OpenRouter lists as ZDR‑compatible.

Models that support ZDR are marked with a green shield icon in the model picker. Models that do not support ZDR will not have this icon.

You cannot turn ZDR off within LMSA – this protection is always active for qualifying models. However, this does not override your own OpenRouter account settings: any ZDR-related preferences you have configured directly with OpenRouter always take precedence over the zdr: true parameter that LMSA sends with each request.

How OpenRouter handles ZDR requests

Per OpenRouter: OpenRouter routes your requests only to endpoints that have a verified Zero Data Retention policy. OpenRouter tracks the specific retention and training policy for each individual endpoint, works with providers to keep these policies up to date, and in some cases negotiates special agreements with providers to secure data retention or training terms that are more privacy-focused than that provider's default policy. If a clear policy cannot be established, OpenRouter assumes the endpoint both retains and trains on data and will not send ZDR‑enforced requests to it. You can also enforce ZDR globally in your OpenRouter account settings, per model group, or per request. OpenRouter itself has a ZDR policy; your prompts are not retained unless you explicitly opt in to prompt logging.

LMSA's role and limitation of liability

TechMitten LLC and LMSA act only as a conduit – we send the zdr: true flag and respect OpenRouter's model compatibility list. We are not responsible for any failure on OpenRouter's part to properly handle ZDR. If, for any reason, Zero Data Retention is not actually applied by OpenRouter or a downstream provider – whether due to OpenRouter bugs, misconfigurations, provider policy changes, API errors, or any other circumstance – LMSA cannot be held liable. The ZDR feature is provided "as is", and your use of it is at your sole risk. LMSA and TechMitten LLC have no involvement in, oversight of, or control over how OpenRouter or its providers manage data retention – it is managed entirely by OpenRouter and the underlying providers.

LMSA does not control OpenRouter's internal systems, we encourage you to:

• Check your OpenRouter activity logs to confirm that requests show ZDR enforcement.
• Review OpenRouter's current list of provider endpoints and how each one handles data retention and logging.
• Contact OpenRouter support if you believe a request was improperly retained.

Learn more

For the complete, authoritative explanation of Zero Data Retention (including which providers support it, how to configure it at the account level, and OpenRouter's own retention practices), please read OpenRouter's official documentation: https://openrouter.ai/docs/features/zdr

Our Web Search feature is optional and privacy-focused

LMSA offers an optional “Web Search” feature powered by Brave Search to fetch live information from the web. When enabled, the app on your device sends queries directly to Brave Search. Here is how your privacy is handled:

• It is strictly opt-in: Web Search is turned off by default. You must explicitly enable it in your app settings, and you can turn it off at any time.
• Direct connection to Brave: LMSA only transmits the specific search query generated by the AI to get real-time web context. We never attach your name, email, or other personal identifiers. However, because your device connects directly to Brave Search, your queries are processed under the Brave Search Privacy Policy. By enabling this feature, you agree to their policy.
• All connections are secure: All queries sent to Brave Search are transmitted over secure, encrypted HTTPS channels.
• Accuracy and safety: Brave Search is highly accurate, but we cannot guarantee that the information it returns from the live web is completely correct or safe.

How we handle Voice Mode (Local Transcription & TTS)

LMSA includes an optional Voice Mode feature that allows you to have real-time conversations using your voice. To protect your privacy, this feature is built with a local-first design:

• Voice Transcription via Native Android Services: Your voice input is transcribed using your device's native speech recognition service. TechMitten LLC does not collect, store, or receive your raw vocals or voice recordings. Please note that the native Android transcription service may connect to Google/Android servers to process the audio, and is governed by the Google Privacy Policy you accepted when setting up your device.
• Automated Text-to-Speech (TTS): The app automates text-to-speech playback using your device's native text-to-speech engine. While many native voice models are processed entirely on-device, some voice options are processed over the network by the device's native TTS service (these are marked with a "network" tag in the voice settings and are pre-existing native options on your device). TechMitten LLC does not host or process these voices, and any network-based synthesis is governed by your device manufacturer's or OS provider's privacy terms.
• Standard Text Prompts to Backend Models: Because the voice transcription and text-to-speech synthesis are managed via native services on your device (either locally or via native network-based TTS), LMSA only sends the resulting text prompts to your selected AI backend (such as local servers or OpenRouter). The backend models never receive your voice or audio recordings, allowing you to use standard text-only models without needing specialized multimodal audio or voice recognition capabilities.

How we handle biometric locking

If you upgrade to LMSA Premium, the app offers enhanced security features that run entirely on your own device:

• We have no access to your biometrics: If you turn on Fingerprint or FaceID locking, we do not collect, store, or see your biometric data. The app simply requests authentication through Android’s BiometricPrompt API, and your device's secure hardware handles the rest.

Any information processed is kept to an absolute minimum

We aim to keep your experience entirely anonymous, but our third-party partners require a few basic details to keep our services running. Here is exactly what is processed and why:

Our commitment to regional privacy rights

TechMitten LLC highlights the regional privacy disclosures below for the sole purpose of confirming that we are aware of these rights and will fully respect and honor them.

We will only disclose your information if we are legally forced to

If law enforcement, a court, or a government agency sends us a valid legal request to share data, we will comply. But we will make sure to protect your privacy as much as possible:

• We will comply with valid legal requests only as required by law.
• Where legally permitted, we will give you notice of such requests.
• We will limit what we disclose to the absolute minimum required by law.
• We will challenge any requests that are too broad or invalid.

We review and validate every government request to make sure it is legally required before we share anything.

We respect your inbox and your marketing preferences

If you give us your email, we may send you messages about app updates, new features, or support requests. We will never use your email to send marketing messages unless you explicitly sign up for them.

You can opt out of emails at any time

You can unsubscribe from non-essential emails by:
• Clicking the unsubscribe link at the bottom of any email we send
• Contacting us at privacy@lmsa.app to request removal from our mailing list
Please give us up to 10 business days to update our list.

We are not responsible for websites we link to

Our website and app contain links to other services, like OpenRouter, the Google Play Store, and external websites. This Privacy Policy only covers our own site and app. We don't control and aren't responsible for the privacy practices of other companies, so we encourage you to read their privacy policies before giving them any information.

We will notify you when we update this policy

We might update this privacy policy from time to time. When we do, we will let you know by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Displaying a notice on our website for any significant changes