Privacy Policy

Effective date: July 6, 2026 · Last updated: July 6, 2026

Lungo (“Lungo”, “we”, “us”, or “our”) is operated by Popup Moments Inc., a Delaware corporation. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use Lungo on lungo.chat or through the Lungo app inside ChatGPT.

Lungo is a home espresso companion. You tell it about your grinder and machine, the beans you are working through, and the shots you pull, and it remembers all of it so ChatGPT can help you dial in your next shot. We built Lungo to hold your coffee notes, not to profile you. This policy reflects that.

By using Lungo, you agree to this Privacy Policy. If you do not agree, please do not use Lungo.

Information we collect

We collect only what we need to run the service.

• Account email. When you sign in or connect Lungo, our authentication provider collects your email address. We use it to create your account, sign you in, and keep your coffee data scoped to you. We do not ask for or store your password ourselves.
• Your coffee data. The espresso details you choose to save: your rig (your grinder, machine, basket dose, and grind setting), the beans you log (roaster, name, roast date and level, origin, process, and the taste you are aiming for), and each shot you record (dose, yield, shot time, grind setting, how it tasted, and any notes), along with which bean is your current one and any recipe you lock in. Lungo saves only what you explicitly ask it to store.
• Usage data. Content-free metrics about how the app is used: which tools are invoked, how long they take, and whether they succeed, tied to a pseudonymous user id. This never includes the content of your coffee notes.
• Technical logs. Standard server logs (timestamps, request metadata, and error details) that we keep for a limited time to run the service reliably and securely.
• Cookies and similar technologies. On the lungo.chat website we use a small number of essential and analytics cookies. We do not use advertising cookies or sell any information collected through cookies.

We do not collect payment information, because Lungo is free.

How we use your information

We use the information above to:

• Provide and operate Lungo: store your rig, beans, and shots and return them so ChatGPT can help you dial in your next shot.
• Maintain your account and keep your coffee data scoped to you.
• Fix errors and improve the reliability, performance, and features of the service.
• Protect Lungo and our users against abuse, fraud, and security threats.
• Comply with our legal obligations.

We do not sell your personal information, and we do not use your information for advertising.

Emails we send

Lungo does not send coffee reminders or marketing on behalf of anyone else. The only emails you receive from us are:

• Sign-in and essential account emails. Messages needed to sign you in and to tell you about your account, security, or important changes to the service. You cannot opt out of these while you have an account, because they are part of operating Lungo.
• Occasional product updates. From time to time we may email you about new features or improvements to Lungo. You can opt out of these at any time using the unsubscribe link in the message or by emailing us.

We do not sell or rent your email address, and we do not send you marketing on behalf of third parties.

How Lungo works inside ChatGPT

Lungo is available as an app inside ChatGPT. When you use Lungo there, the prompts you send and the responses the app returns pass through ChatGPT and are processed by OpenAI under OpenAI’s own terms and privacy policy. We receive only what is needed to carry out your request (for example, the shot you asked us to log). Your use of ChatGPT itself is governed by OpenAI, not by Lungo, and we encourage you to review OpenAI’s policies.

AI and your content

Your coffee data is never used to train AI models, whether ours or anyone else’s, and it is never sold. We do not permit our service providers to use your content to train their models on our behalf.

We may use aggregated, de-identified, content-free usage data (for example, how often a feature is used or how long a request takes) to understand and improve Lungo. This data does not identify you and does not include the content of your coffee notes.

How we share information

We share information only in these limited situations:

• Service providers who run Lungo for us. These providers process data on our behalf, under agreements that limit them to providing their service:
  • Stytch: authentication and account connection.
  • Google Cloud (Firebase): data storage.
  • PostHog: content-free product analytics.
  • Vercel: hosting and server infrastructure.
  • OpenAI: when you use Lungo inside ChatGPT, as described above.
• Legal and safety. When we reasonably believe disclosure is required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Lungo, our users, or the public.
• Business transfers. If Lungo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or control of your personal information.

We do not sell your personal information to anyone.

Data retention

We keep your rig, beans, and shots for as long as your account is active, so your dial-in history is there when you come back. Technical logs are retained for a limited period for debugging and security.

When you delete your account, or ask us to delete your data, we delete your coffee data and account information within 30 days, except where we are required to retain certain records to comply with law. Residual copies may persist in encrypted backups for a short period before they are overwritten.

Security

We protect your information with industry-standard safeguards. Your data is encrypted in transit (TLS) and at rest. We use role-based access controls to limit who can access data, and we review our security practices regularly. No method of transmission or storage is completely secure, but we work to protect your information and to respond quickly to any issue.

Your rights and choices

You are in control of your Lungo data:

• Delete everything. You can delete your entire account and all of your coffee data at any time from your Lungo account page. This is immediate and cannot be undone.
• Access, export, or delete by request. Email hi@sponja.ai and we will act on your request within 30 days.
• Disconnect. You can revoke Lungo’s access at any time from ChatGPT’s settings (Apps and Connectors). This immediately stops new data flowing to us.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the rights to access, correct, delete, and port your personal information, and to object to or restrict certain processing. We honor these rights regardless of where you live. To exercise them, email hi@sponja.ai. We will not discriminate against you for exercising your rights.

Children’s privacy

Lungo is not intended for children under 13. You must be at least 13 years old to use Lungo. If you are under 18, you may use Lungo only with the involvement and consent of a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please email hi@sponja.ai and we will delete it.

International users

Lungo is operated from the United States, and the service providers we use may process and store data in the United States and other countries. If you access Lungo from outside the United States, you understand that your information may be transferred to, stored, and processed in countries whose data protection laws may differ from those of your country. We take steps to ensure your information receives an adequate level of protection wherever it is processed.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of Lungo after an update means you accept the revised policy.

Contact us

If you have any questions about this Privacy Policy or how we handle your information, contact us at hi@sponja.ai.