Privacy, plainly
What Lenio keeps
Your email address, which signs you in and is never shown to anyone else. Your first name, and your children as you describe them, in your words. Your conversations, the things in play this week, and the small trail of taps that makes the app work.
If an advert brought you here, Lenio keeps the name of that campaign too, a short label like google, so it knows which adverts are worth paying for.
That is the whole list. No advertising identifiers, no tracking across other websites, nothing bought from or sold to anyone.
Lenio measures which pages are visited and which steps of signup are reached, using self-hosted, first-party analytics on our own server; no third-party trackers, no advertising identifiers, and never the content of your conversations.
If you answer an optional research question, Lenio stores that answer on its own server with your account so the small product team can learn from themes across parents. Research answers never go into analytics, AI prompts, or model training, and your words are never published without asking you separately.
What happens when you talk
Lenio's replies are written by AI. When you send a message, the conversation on your screen goes to our AI provider so the reply can be written, along with your first name and the notes Lenio keeps. Your email address never goes with it, and nothing about payment ever does. Our agreement with the provider means your words are never kept to train anyone's models.
If you chat from Tonight
You can talk before creating an account. Lenio keeps that unsigned conversation on its own server for seven days so you can return to it. If you choose the free seven days, the conversation moves into your account only after you open the secure link sent to your email. If you do not continue, the unsigned conversation is deleted after seven days.
Lenio uses broad, anonymous patterns from these chats to learn what parents need help with. Those counts contain no names, quotes, summaries, or conversation text, and very small groups are not reported. The product team does not routinely read unsigned chats. Authorised access to the raw conversation is limited to keeping the service secure, investigating a fault, or meeting a legal obligation.
How Lenio remembers
Old conversations are never sent again. Once one ends, Lenio writes itself a few short notes about what mattered: what is in play, what you are trying, what helped. Even when Lenio says "this keeps coming up", it is reading its own notes. The conversations themselves stay in Lenio's own database and nowhere else.
Where it all lives
On our own server in the EU, encrypted on the way there and back. Payments are handled by Stripe; your card number never touches Lenio and Lenio never sends Stripe anything about your family beyond your email address. Our email service delivers your sign-in links and knows only your address. That is everyone. No one else receives anything.
The one exception
If a conversation raises a serious safety concern, a human reviews that conversation. Outside that safety process, conversation words are not read by people. If you separately choose to answer an optional research question, the small Lenio product team may read that answer only to improve Lenio.
Deleting everything
One tap in your account deletes your whole family's story: conversations, research answers, what's in play, everything. It is permanent and takes effect straight away. There is no archive we quietly keep. Unsigned Tonight chats are deleted after seven days. Sign-in links expire after 15 minutes and are useless afterwards.
Your rights, and who we are
You can ask for a copy of your data, ask us to correct it, or complain to the ICO if we ever let you down. Lenio is made by Recursively Curious Ltd, company number 16981626, registered in England and Wales. Write to hello@lenio.fyi and a human answers.