Lumi is built for the hardest days after a breakup, so what you tell it is deeply personal. This policy explains in plain words what we collect, why, who helps us handle it, how long we keep it and what you can do about it.
In short: we collect what we need to run Lumi for you. We do not sell your data, we do not show you ads and we do not track you across other companies' apps and websites. You can export it or delete it at any time.
the team behind Lumi is the controller of the personal data described here. You can reach us at support@applumi.online.
1. What we collect
Account and profile. Your email address, your name or display name, and how you sign in (email and password, Sign in with Apple or Google). If you sign in with a provider, we receive what they share with us, such as a name and an email address (which can be a private relay address). Passwords are stored in a hashed form. You also give us details so Lumi can fit you: your age, gender, how your ex should be referred to (he, she or they), the kind of breakup, the date, your goals, the Coach style you prefer, your language, time zone and country.
What you do in Lumi. Your No Contact periods and any slip-ups, mood check-ins and feelings you tag, urges you used SOS for, Healing Score, badges, Journey progress and your answers to tasks, Reality Check and Social Detox items, and settings such as notification choices.
What you write and add. Journal entries, unsent messages and Closure Letters, and the photos, videos and voice notes you add to them. Messages you send to the Coach, screenshots you attach (Lumi+), the summaries of past conversations that help the Coach stay in context, and notes the Coach saves about you, which you can view and delete in the app.
Purchases. Whether you have Lumi+, which plan, and when it ends. Apple handles your payment, so we never see your card or payment details. If you buy or accept a gift, we also store the gift code, the gift length, the sender's first name, the note and whether and when it was accepted.
Device and technical data. Your push notification token, app version, device type and operating system, language, time zone, and your IP address when you use the Service. We use these to deliver notifications, prevent abuse, limit requests and find and fix problems.
Safety signals. Each message you send the Coach is automatically checked for signs of crisis. If a message looks like a crisis, we answer with support options and keep a flag that a crisis moment happened (so we can follow up with care), but we do not store the text of that message.
What we do not collect. We do not read your contacts, your messages in other apps or your precise location. Photos you pick in Burn the Memories stay on your phone.
2. Why we use it, and our legal basis
- To provide Lumi: to create your account, run the tracker, journal, tasks, charts, widgets and the Coach, and to send the reminders you ask for. Legal basis: performing our contract with you.
- To handle sensitive information. What you share about a breakup and how you feel can reveal information about your emotional wellbeing or health. We process it only to give you the service you ask for, and with your explicit consent, which you give when you choose to enter it. You can withdraw consent by deleting the entry or your account.
- To keep Lumi safe and secure: to check Coach messages for crisis, prevent fraud and abuse, enforce limits and fix bugs. Legal basis: our legitimate interest in a safe service, and, for crisis checks, protecting your vital interests.
- To manage subscriptions and gifts, and to meet tax and accounting rules. Legal basis: contract and legal obligation.
- To understand and improve the app, using product analytics and crash reports that are not used for advertising. Legal basis: our legitimate interest, or your consent where the law requires it.
- To answer you when you contact us. Legal basis: contract and legitimate interest.
We do not use your content to train language models of our own, and we do not sell it.
3. How the Coach handles your messages
When you chat with the Coach, or ask for a reflection, a closure letter or a recap, the text you send (and, for Lumi+, a screenshot you attach) and a short summary of earlier conversations are sent securely to a trained large language model operated by a third-party provider acting for us, so it can write a reply. The provider processes it to give us the reply, under terms that apply to our use of its service.
The Coach is automated. It does not make decisions about you that have legal or similarly significant effects, and a person at Lumi does not read your conversations as a matter of course. We may look at limited content only if needed to investigate abuse, a serious safety concern or a technical problem, or if the law requires it.
4. Who we share data with
We share data only with people who help us run Lumi, and only what they need:
- Hosting, database and storage providers, to store your data and run the app (for example Cloudflare).
- Subscription management, to know whether you have Lumi+ (for example RevenueCat), and Apple, which processes App Store payments.
- Sign-in providers you choose, such as Apple or Google.
- Notification services, to deliver push notifications to your device.
- A language-model provider, to power the Coach, as described above.
- Product analytics and crash reporting providers, if enabled, for diagnostics and improvement.
- Authorities and advisers, if the law requires it or to protect rights and safety, and a buyer or successor if Lumi is sold or reorganised (with the same protections for your data).
These providers act on our instructions under contract. We do not sell your personal data and we do not share it for advertising. If you accept a gift, the sender cannot see who you are. If you send a gift, the recipient sees only your first name and your note.
5. International transfers
Lumi and our providers operate globally, so your data can be processed in countries other than yours, including countries that may have different data protection laws. Where required, we use safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6. How long we keep it
We keep your data while your account is open. When you delete your account, your profile and everything you added are deleted from our active systems straight away, including your files in storage. Copies in backups are removed on a rolling basis, within 30 days.
We may keep a minimal record for longer if the law requires it (for example proof of a purchase), or to prevent fraud and abuse.
A gift you bought is removed with your account. Access that a gift already granted to someone else is not affected.
7. Your choices and rights
You are in control:
- Look at and change: edit your profile, journal and settings in the app. You can view and delete what the Coach remembers about you.
- Export: download a copy of your data from your Profile, or email us.
- Delete: delete your account and all its data in the app (Profile, Privacy and security, Delete account). See also the account deletion page.
- Notifications: change or turn them off in the app or in your device settings. Widgets and notifications can be set to discreet.
- Lock: use Face ID, fingerprint or a passcode to protect the app.
Depending on where you live (including the EEA, the UK, Switzerland, California and other US states, Brazil and elsewhere), you may also have the right to access your data, correct it, delete it, receive it in a portable format, object to or restrict some processing, withdraw consent, and not be discriminated against for using these rights. To use any of them, use the controls above or write to support@applumi.online. We may need to verify your identity first. We will reply within the time the law sets, usually one month.
If you think we have handled your data unlawfully, you have the right to complain to your local data protection authority. We would appreciate the chance to fix it first.
California and similar laws: we do not sell or share your personal information for cross-context behavioural advertising, and we do not knowingly do so for anyone under 18.
8. Security
We protect your data with encryption in transit, private storage for your files, access controls that tie every request to your account, and a session stored in your device's secure storage. Only you can reach your own records. No system is perfectly secure, so please use a strong password and the app lock. If a breach affects your data, we will tell you and the authorities as the law requires.
9. Children
Lumi is for adults only (18 and over). We do not knowingly collect data from anyone younger. If you think a child has an account, tell us at support@applumi.online and we will delete it.
10. Cookies and this website
This website does not use advertising or tracking cookies. It may remember your language choice on your device. If we later add analytics to the site, we will update this policy and ask for consent where the law requires it. When you open a gift link, our servers receive the gift code and your IP address to show you the gift and to prevent abuse.
11. Changes to this policy
We may update this policy. If the change matters, we will tell you in the app or by email before it applies. The date at the top shows when it was last changed.
12. Contact
Questions or requests about your privacy? Write to support@applumi.online.