Privacy Policy

Last Updated: February 3, 2026

Welcome to Lumi ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact us at strawhatapps@gmail.com.

This Privacy Policy describes how we collect, use, process, and disclose your information, including personal information, in conjunction with your access to and use of the Lumi mobile application (the "App") and our website. Please read this policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

You can read our Terms and Conditions here.

1. Information We Collect

We collect information that you strictly provide to us or that is automatically generated when you use the App.

A. Information You Provide to Us

• Account Registration Data: When you register for an account, we collect your email address, name, and authentication credentials (via Google Sign-In).
• User-Generated Content: We collect the data you input into the App, including your personal goals, daily habits, journal entries, "quests," and progress logs. This data is essential for the App's core functionality.
• Communications: If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

B. Information Collected Automatically

• Usage Data: We collect information about how you interact with our services, such as the features you use, the time spent on the App, and the frequency of your visits.
• Device Information: We may collect information about the device you use to access the App, including the hardware model, operating system and version, unique device identifiers, and mobile network information. This is used for debugging and ensuring compatibility.
• Log Data: Our servers automatically record information ("log data") created by your use of the App. Log data may include information such as your IP address, browser type, operating system, the referring web page, pages visited, location, your mobile carrier, device and application IDs, search terms, and cookie information.

2. How We Use and Process Your Information

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

• To Provide the Service: To create and manage your account, track your goals, and display your progress history.
• To Personalize Your Experience (AI): We use Artificial Intelligence (specifically Google's Gemini models) to analyze the goals and habits you input. This allows us to generate personalized "Quests," challenges, and motivational content tailored to your specific needs.
• To Improve the App: To analyze usage trends and preference data to improve the user experience, fix bugs, and develop new features.
• To Communicate with You: To send you administrative information, such as security alerts, technical notices, and support messages.
• To Enforce Terms: To enforce our Terms and Conditions and policies for business purposes, legal and regulatory reasons, or in connection with our contractual rights and obligations.

3. Sharing Your Information

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

A. Third-Party Service Providers

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. These include:

• Supabase: For secure database hosting and authentication services.
• Google Vertex AI / Gemini: We send text inputs (your goals/habits) to Google's AI services to generate personalized content. Google does not use this data to train their public models.
• RevenueCat: To manage subscriptions and in-app purchase validation.
• Google Play Services: For app distribution and standard analytics.

B. Legal Requirements

We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena.

4. Artificial Intelligence & Data Usage

Lumi utilizes Generative AI technology to provide its core service. By using the App, you acknowledge that:

• Your input data (goals, habits) is processed by AI models.
• The output is machine-generated and may not always be accurate.
• We have implemented safeguards (prompt engineering) to prevent the generation of harmful content, but we cannot guarantee that all AI outputs will be free from errors or offensive material.

5. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When you delete your account, your personal data is permanently removed from our active databases.

6. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

7. Use by Minors

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us at strawhatapps@gmail.com and we will take steps to remove that information and terminate the child's account.

8. Your Privacy Rights

Depending on your location (e.g., California, European Economic Area), you may have complying rights regarding your personal data:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
• Right to Deletion: You have the right to request that we erase your personal data (delete your account).
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

You can exercise these rights directly within the App settings (Delete Account) or by contacting us.

9. Updates to This Policy

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

10. Contact Us

If you have questions or comments about this policy, you may email us at: