Privacy

Last updated 16 October 2026.

LrC Buddy is run by one person. This page says what we keep about you and your photos, why, and for how long. If anything here is unclear, write to hello@mail.lrcbuddy.com.

Your account

We keep your email address, a hash of your password (never the password), when you signed up and when you last signed in, and the devices you sign in from. We send mail only to confirm your address, to sign you in, and about your account; never marketing. Mail goes out through Resend.

Your photos and words

Every time the plug-in asks the model for an edit or a critique, our server records the request and the answer. A request holds your message, the photo's Develop settings and how it was taken (camera, lens, exposure, capture time, GPS position if the photo has one), and a small JPEG preview of the photo. The answer is the model's text and the edits it proposed. We also record the model used, how many tokens it read and wrote, what that cost, and timings.

The previews are stored once per image, in a private bucket; the texts and settings in our database. They are stored so that we can see what the product does, find mistakes, and work out what to charge. Nobody but the person running the service reads them, and they are never used to train a model.

To produce the answer, the same request goes to Anthropic's API. Their handling of it is under their privacy policy; by default they do not train on API traffic.

How long

The accounting rows (who, when, which model, tokens, cost) are kept for as long as the account exists. The request and answer texts and the previews are kept for a limited period that is still being decided; this page will say what it is once a retention job is in place. Until then they are kept.

Deleting your account

Write to hello@mail.lrcbuddy.com from your account's address and we delete the account, its devices, and the recorded requests, answers and previews. A self-service button is planned.

Where

Everything runs on one server at Amazon Web Services in Ohio, United States, with daily backups kept for seven days. Our own logs record requests by id, never their content.

Cookies

One cookie, which keeps you signed in. No analytics, no third-party scripts.