This Privacy Policy explains how Laff AI Inc. (“LaffAI,” “we,” “us” or “our”) collects, uses, shares and protects personal information when you visit our website, create an account, subscribe, or receive and play our daily laughter sessions (together, the “Service”). By using the Service, you agree to the practices described here. Please also read our Terms of Service.
1. Information we collect
Information you give us
- Account details: your name, email address and password. Passwords are stored only in hashed form; we never see them in plain text.
- Sign-in with Google: if you sign in with Google, we receive your name, email address and profile image from Google.
- Preferences: your timezone, preferred delivery time for daily emails, and email notification settings.
- Subscription details: your plan, billing period, trial and subscription status. Payment card details are entered directly with our payment processor, Stripe; we do not receive or store your full card number.
- Communications: messages you send us, such as support requests.
- Practitioner accounts: if you are a therapist or other practitioner using the Service with clients, the client names, email addresses, delivery preferences and notes you enter.
Information we collect automatically
- Listening activity: which sessions you play, from where (website or email), how long you listen and whether you finish, which we use to provide features such as streaks.
- Email engagement: whether our emails are opened and whether their audio is played, together with the device’s IP address and browser or email client (user agent).
- Device and usage data: IP address, browser type, pages visited, referring page and similar technical information recorded in our server logs.
- Cookies: see section 6.
Information from third parties
- Stripe tells us whether a payment or subscription succeeded, and gives us limited billing details such as the last four digits and expiry of your card and your billing address.
- Google provides the profile details above when you choose Google sign-in.
2. How we use your information
- To create and manage your account and sign you in.
- To provide the Service, including generating and delivering daily laughter sessions at your chosen time.
- To process subscriptions, free trials, renewals, prorated charges and cancellations.
- To send service emails, such as account verification, receipts, billing notices and changes to these policies.
- To send the daily laughter emails you signed up for, and, where permitted, product updates. You can opt out of non-essential emails at any time.
- To understand how the Service is used and improve it.
- To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
- To comply with legal obligations and respond to lawful requests.
3. Legal bases (EEA, UK and similar jurisdictions)
Where data protection law requires a legal basis, we rely on:
- Contract: to provide the Service and process your subscription.
- Legitimate interests: to secure, analyze and improve the Service, where those interests are not overridden by your rights.
- Consent: for optional marketing emails and non-essential cookies, which you can withdraw at any time.
- Legal obligation: for tax, accounting and other legal requirements.
4. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:
- Service providers that process data on our behalf under contract, including: Stripe (payments and billing), Resend (email delivery), Google (sign-in), our hosting provider GoDaddy (servers and data storage), Google Analytics (understanding how our pages are used), and AI audio providers such as ElevenLabs (generating laughter audio; we do not send them your personal information).
- Practitioners: if a practitioner enrolled you as a client, they can see whether you opened and played the sessions they sent you.
- Legal and safety: where required by law, or to protect the rights, property or safety of LaffAI, our users or others.
- Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.
- With your consent or at your direction.
5. Emails and tracking
Our daily emails contain links and may contain small images that tell us whether an email was opened and whether its audio was played. We use this to measure engagement and to show practitioners how their clients use the Service. You can limit open tracking by turning off automatic image loading in your email client. To stop receiving daily emails, use the “Unsubscribe / Manage preferences” link at the bottom of each email, or contact us at support@laffai.com. Unsubscribing from daily emails does not cancel a paid subscription; account and billing emails will still be sent.
6. Cookies
We use a small number of cookies and similar technologies:
- Essential cookies to keep you signed in, secure your session and remember settings needed for the Service to work.
- Analytics cookies from Google Analytics, to understand how visitors use our pages, such as which pages are visited and how people find us, so we can improve the Service. Google Analytics collects information such as your IP address, browser and device type, and the pages you visit, and Google processes it on our behalf. Where required by law, we ask for your consent before setting these cookies. Learn how Google uses information from sites that use its services, or opt out with the Google Analytics opt-out browser add-on.
You can block or delete cookies in your browser settings, but parts of the Service, such as signing in, will not work without essential cookies.
7. How long we keep information
We keep your information for as long as your account is active and as needed to provide the Service. After you close your account, we delete or anonymize your personal information within 90 days, except where we must keep it longer for legal, tax, accounting or fraud-prevention reasons. Backups are overwritten on a rolling schedule.
8. Security
We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), hashed passwords, encrypted storage of API credentials and restricted access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct inaccurate information;
- delete your information or close your account;
- object to or restrict certain processing, and withdraw consent;
- receive your information in a portable format;
- opt out of marketing emails using the unsubscribe link in any email.
California residents: you have the right to know what personal information we collect, use and disclose; to request deletion and correction; and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.
To exercise any right, contact us at privacy@laffai.com. We may need to verify your identity before acting on a request. You may also complain to your local data protection authority.
10. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
11. International transfers
We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards such as standard contractual clauses for these transfers.
12. Practitioner accounts and client information
When a practitioner adds clients to the Service, the practitioner decides what client information to enter and is responsible for having the right to share it with us and for meeting any professional or legal obligations that apply to them. We process that information on the practitioner’s behalf to deliver sessions and engagement reports. Clients with questions about their information should contact their practitioner, or us.
13. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The effective date at the top shows when it was last updated.
14. Contact us
Laff AI Inc.
21163 Newport Coast Drive #1010
Newport Coast, CA 92657
Phone: 310-924-1303
Email: privacy@laffai.com