Lumi - Privacy Policy

Lumi ("we", "our", or "the app") is a mental wellness app made by Lumi Studios. This policy explains what the app keeps on your phone, what leaves your phone and why, who processes it, and your rights.

The short version

Your journal, moods, check-ins and chats live on your phone. We can't read them.
When you use an AI feature, only the words that request needs leave your phone. They pass through our servers without being stored.
No ads, no analytics, no tracking, and we never sell your data.

1. Data We Collect

Data stored on your device only (never sent to our servers)

Data processed by our servers

Data we never collect

2. How We Use Your Data

We process your data only for the following purposes. For each purpose, we identify the legal basis under GDPR Article 6 where applicable.

3. Third-Party Services

Our providers may process data outside the UK and the EEA, including in the United States, under their data processing terms.

4. Data Retention

5. Your Rights

General rights (all users)

For California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
Right to Delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions. To submit a deletion request, contact us at [email protected] with the subject line "CCPA Deletion Request."
Right to Opt-Out of Sale or Sharing: We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this at any time.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not be denied goods or services, charged different prices, or provided a different level of quality as a result of exercising these rights.
Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information beyond the purposes for which it was collected (account management and AI feature delivery).

To exercise your CCPA rights, contact us at [email protected]. We will respond to verifiable requests within 45 days.

6. Children's Privacy

Lumi is for people aged 13 and over and is not directed at children under 13. We do not knowingly collect data from children under 13. During onboarding, the app asks your age before it asks anything else about you. If you are under 13, onboarding stops there and nothing is saved except that answer. If you believe a child under 13 has provided us with personal information, please contact us at [email protected] and we will promptly delete it.

Users aged 13–17 may use Lumi with the consent of a parent or guardian, as stated in our Terms of Service. We encourage parents and guardians to take an interest in their teen's use of the app, particularly the AI features.

7. Security

We use industry-standard security measures, including encrypted connections (TLS), secure authentication (Supabase Auth with OAuth 2.0), and an optional on-device app lock with PIN or biometric authentication.

8. Changes to This Policy

We may update this policy from time to time. We will tell you about significant changes in the app. Continued use after changes constitutes acceptance.

9. Contact Us

If you have questions about this privacy policy, want to exercise your rights, or want to request data deletion, contact us at: