Privacy Policy

THE SHORT VERSION

Lumo stores the documents you upload and the information our AI extracts from them, so that you can search and organise them. We do not sell your data, we do not share it for advertising, and we do not track you across other apps or websites.

You can delete your account, and everything in it, from Settings → Delete Account at any time.

WHAT WE COLLECT

Account data — your email address, display name, profile photo if you add one, and a securely hashed password. If you sign in with Apple or Google we receive the identity token from that provider, which gives us your email address and, on first sign-in only, your name.

Your content — the documents and images you upload, the file name and type, and the structured information our AI extracts from them (for example amounts, dates and merchant names on a receipt), plus the folders, timeline events and reminders you create.

App and device data — your device language and time zone (used to schedule reminders at the right local hour), a push notification token if you enable notifications, crash reports, performance data, and which screens you open inside the app.

Subscription data — your subscription status, plan, renewal date and purchase history. Payments are taken by the App Store or Google Play; we never see or store your card details.

WHY WE COLLECT IT

To provide the service — storing your documents, analysing them, searching them, and sending the reminders you ask for.

To run your subscription — checking what your plan entitles you to and how many AI credits remain.

To keep the app working — crash and performance data tells us that something broke and on which build, which is the only way most bugs in a beta are ever found.

To answer you — if you email support, we use your message and the build details you send with it.

WHO PROCESSES IT

We use a small number of service providers, and they act on our instructions:

• Supabase — accounts, authentication and document storage.
• Vercel — hosting for the Lumo API.
• Google (Gemini) — analyses the content of a document you upload to extract structured information from it.
• RevenueCat, together with Apple and Google — subscription purchases and their status.
• Firebase Analytics and Crashlytics (Google) — crash reports, performance data and in-app screen usage.
• Resend — transactional email such as verification and account notices.

We do not sell your personal data, and we do not share it with advertisers or data brokers.

AI PROCESSING

When you upload a document, its contents are sent to Google’s Gemini API to extract structured data. Google processes it on our behalf under their API terms and does not use it to train their models. The extracted result is stored in your account; the original file stays in your Lumo storage until you delete it.

HOW LONG WE KEEP IT

Your documents and account data are kept while your account is open.

If you request deletion, your account enters a 30-day grace period and is then permanently erased. You can cancel during that window by signing back in.

If your subscription lapses, your data is preserved for a 30-day grace period so you can resume, and deleted afterwards. We email you before that happens.

Crash reports are retained by Firebase for up to 90 days.

YOUR RIGHTS

You can view and correct your profile in the app, and you can delete your account and all its content from Settings → Delete Account — no email or web form required.

Depending on where you live, you may also have the right to a copy of your data, to object to certain processing, or to complain to your local data protection authority. Contact us and we will help.

Deleting your Lumo account does not cancel an App Store or Google Play subscription. Cancel that in your Apple ID or Google Play settings, or you will keep being charged.

CHILDREN

Lumo is not directed at children, and you must be at least 16 years old to create an account.

SECURITY

Documents are stored in access-controlled storage and served over signed, expiring links. Your sign-in session is encrypted on the device, and the passcode you set for App Lock is stored in the device keychain, never on our servers. No system is perfect, but we do not keep anything we do not need.

CHANGES

If this policy changes in a way that affects you, we will update the effective date above and tell you in the app before the change takes effect.

CONTACT

Questions about this policy, or about your data? Contact us from Profile → Help.