Lemon AI Privacy Policy & Sovereign Data Charter
Clear, legally binding disclosures regarding the collection, processing, and protection of user data across the Lemon AI Mobile Application (Android / Google Play Store), Web dApp, and associated protocols.
Voice & video streams flow peer-to-peer using DTLS-SRTP and ChaCha20-Poly1305. We never record, tap, or store your call audio.
Real-time speech translation models execute locally on-device. No voice prints or translation transcripts are sold or saved to cloud databases.
Identity is anchored to cryptographic Web3 wallet public addresses. We never request, access, or hold your private keys or seed phrases.
We strictly deploy zero third-party advertising SDKs, cross-site trackers, or data-broker monetizers. Your usage data is never sold.
1. Overview, Identity & Scope of Protocol
This Privacy Policy governs the decentralized communications protocol, software applications, and web services operated under the brand Lemon AI ("Lemon AI", "Protocol", "We", "Us", or "Our"), accessible via our website at https://lemonaiglobal.com and our mobile application distributed through the Google Play Store and related client platforms.
Lemon AI is architected upon principles of user data sovereignty, cryptographic privacy, and decentralized Web3 governance. By downloading, accessing, or using the Lemon AI mobile application or connecting a Web3 wallet to the Lemon AI network, you acknowledge and agree to the data practices described in this Privacy Policy. If you do not agree with this policy, please refrain from using our software.
2. Mobile App Permissions & Runtime Justification (Google Play Compliance)
In strict adherence to the Google Play Developer Program Policy regarding User Data and Device Permissions, this section comprehensively outlines every runtime and declared Android OS permission requested by the Lemon AI application, along with its specific, limited purpose:
android.permission.RECORD_AUDIO
Core Feature
Purpose & Scope: Utilized strictly when the user initiates, answers, or engages in an active voice call, or activates the live AI voice translation feature. Audio captured from the device microphone is converted into encrypted real-time audio streams (via WebRTC) and transmitted directly to the remote peer. Audio is NEVER recorded in the background, NEVER stored on centralized servers, and NEVER harvested for advertising or biometric profiling.
android.permission.CAMERA
Optional / Interactive
Purpose & Scope: Utilized solely when you intentionally initiate or accept a video call, or scan a cryptographic QR code (such as a Web3 WalletConnect address or contact DID). Video frames are encrypted end-to-end and streamed in real time. We do NOT capture, archive, or analyze photographs or video recordings.
android.permission.FOREGROUND_SERVICE_MICROPHONE
Active Call Continuity
Purpose & Scope: Enables active call continuity when you navigate away from the app, minimize it, or turn off your device screen during an ongoing telephone conversation. A persistent notification is visibly displayed while the foreground call service is operating.
android.permission.POST_NOTIFICATIONS
Call Signaling
Purpose & Scope: Required on Android 13+ (API level 33+) to alert you of incoming encrypted calls, active call status, and critical security or network status updates.
android.permission.INTERNET & ACCESS_NETWORK_STATE
Network Protocols
Purpose & Scope: Required to communicate with decentralized WebRTC signaling channels, resolve STUN/TURN ICE candidates for P2P connection establishment, and query public Binance Smart Chain (BSC) nodes.
android.permission.BLUETOOTH_CONNECT
Hardware Audio
Purpose & Scope: Allows routing call audio through your wireless Bluetooth earphones, headsets, or automotive hands-free systems.
READ_CONTACTS), SMS records (READ_SMS), phone call logs (READ_CALL_LOG), fine-grained GPS location (ACCESS_FINE_LOCATION), or external storage media files without explicit, isolated user prompts.
3. Categories of Data Processed & Collected
We adhere to the strict principle of Data Minimization. We collect and process only the minimum information technically necessary to execute encrypted communications and decentralized protocol interactions:
When you connect to Lemon AI, your public Web3 wallet address (e.g., BSC BEP-20 address 0x...) acts as your decentralized identifier. We NEVER have access to, request, or store your private keys, seed phrases, or wallet passwords.
During call initiation, WebRTC Session Description Protocol (SDP) tokens and Interactive Connectivity Establishment (ICE) candidate IP addresses are exchanged to facilitate direct peer-to-peer media routing. This transient data is immediately purged upon call termination.
Basic hardware specifications (device model, operating system version, CPU architecture) are examined locally to determine whether on-device Neural AI inference models can be hardware-accelerated (via NPU/GPU).
Purchases of LAI token packages, staking records, and vesting contracts executed through Binance Smart Chain are stored immutably on the public blockchain by inherent blockchain architecture.
4. Neural AI Voice & Real-Time Translation Processing
Lemon AI features a proprietary, multilingual neural speech engine designed to translate verbal dialogue between call participants across 100+ languages in real time:
- Local On-Device Inference: Whenever supported by your device hardware, audio speech-to-speech AI models run directly in the local application execution environment.
- No Biometric Voice Fingerprinting: Audio processed for translation is analyzed as momentary acoustic phonemes and discarded millisecond-by-millisecond. We do not extract biometric voiceprints, vocal biomarkers, or emotional profiling.
- Zero Model Training Retention: Audio dialogue processed through the Lemon AI calling engine is NEVER used to train proprietary machine learning models or sold to third-party AI companies.
5. How We Use Collected Information & Legal Basis
We process information exclusively under the following legal bases recognized by international regulations (including GDPR Article 6):
6. Data Sharing, Disclosures & Third-Party Infrastructure
We NEVER sell, rent, monetize, or trade your personal data to any third parties or commercial entities.
Data is transferred or disclosed only under the following strictly defined conditions:
- Decentralized Relays (TURN/STUN): When direct peer-to-peer NAT traversal cannot be completed due to firewall restrictions, media packets pass through encrypted TURN relays. Relay operators receive only encrypted packets (DTLS-SRTP) and lack cryptographic keys to decrypt the media content.
- Public Blockchain Nodes: On-chain transactions are broadcast to the decentralized Binance Smart Chain validator network. These transactions are public and pseudonymous.
- Legal & Regulatory Mandates: We may disclose information only if required by a valid, legally binding court order or statutory requirement from a competent court of jurisdiction. Because we maintain a zero-logs architecture, we cannot produce call recordings or transcripts that do not exist.
7. Cryptographic Security & Zero-Logs Architecture
Lemon AI incorporates defense-in-depth cryptographic standards to ensure sovereign privacy:
Direct media streams are encrypted using DTLS 1.3 and SRTP with AES-GCM or ChaCha20-Poly1305 ciphers.
Cryptographic handshake session keys are generated dynamically per session and destroyed upon call termination.
Signaling servers do not keep persistent transaction logs of caller-callee communication timestamps or call content.
8. Data Retention & Account / Data Deletion Policy (Google Play Mandatory)
In compliance with the Google Play Data Safety and User Account Deletion Policy, Lemon AI provides users with complete autonomy over their data lifecycle, including clear pathways to request permanent deletion:
- Active Call Streams: Retained for 0 seconds. Call audio, video, and translation packets are stream-based and wiped from RAM immediately upon session termination.
- Signaling Metadata: Ephemeral session tokens are purged automatically within 1 hour.
- Off-Chain Account Data: Stored only while your wallet is linked or as long as needed to service your account.
You can immediately wipe all locally cached session credentials, chat caches, and cryptographic wallet pairings directly through your Android device settings:
To request complete deletion of any off-chain accounts, email correspondences, or registered profile data, please submit an official request:
- Send an email to: privacy@lemonaiglobal.com
- Subject line:
Account and Data Deletion Request - Include: Your public Web3 wallet address or registered email address.
Note: Blockchain transactions committed to the Binance Smart Chain public ledger cannot be modified or deleted due to decentralized EVM consensus rules.
9. User Rights & International Protections (GDPR & CCPA/CPRA)
Depending on your geographic residency, you are entitled to statutory rights under privacy frameworks such as the European General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA):
To exercise any of these statutory rights, please contact our legal team at privacy@lemonaiglobal.com.
10. Children's Online Privacy Protection (COPPA Compliance)
The Lemon AI application and network are strictly intended for individuals aged 18 years or older (or the age of majority in your jurisdiction) who possess legal capacity to engage in digital software protocols.
We do not knowingly solicit, collect, or process personal data from children under the age of 13 (or under 16 in certain European member states). If we discover that personal data from a child has been collected inadvertently, we will delete that data immediately upon notice. If you believe a minor has accessed our service, please alert us at privacy@lemonaiglobal.com.
11. Policy Modifications & Version History
Lemon AI reserves the right to revise this Privacy Policy periodically to reflect enhancements in protocol architecture, cryptographic standards, or changes in regulatory obligations. Any material modifications will be highlighted by updating the "Last Updated" date at the top of this document. Continued use of our mobile app or web platform following any updates constitutes acceptance of the amended policy.
12. Official Contact Information & Grievance Officer
If you have questions, feedback, or concerns regarding this Privacy Policy, your rights, or data safety practices, please contact our Data Protection and Compliance team:
https://lemonaiglobal.com/privacy-policy