Lumi Privacy Policy

• Information you provide voluntarily: a preferred name, gender, and zodiac sign. These do not have to be your real personal details — they simply define how you want the app to address and identify you. Optionally, you may set a profile photo for visual personalization — this photo is stored only on your device and is never transmitted to our servers or any third party.
• Automatically collected information: device type, operating system version, app usage patterns, crash logs, and anonymous analytics data (collected via Firebase, see Section 4).

Lumi does not require you to create an account, provide an email address, or submit any personal identifiers. We do not store any user-provided data on our servers. All information you enter (name, gender, zodiac sign) is kept locally on your device and is only transmitted temporarily to AI service providers at the moment of generating a reading, as described in Section 3.

• OpenAI (OpenAI, L.L.C., San Francisco, CA, USA) — used to generate natural language interpretations of tarot cards and personalized astrological guidance.
• Google Gemini (Google LLC, Mountain View, CA, USA) — used to generate natural language interpretations of tarot cards and personalized astrological guidance.

What data is sent to AI providers:

• Your preferred name, gender, and zodiac sign.
• Your selected spread preferences (e.g., reversed cards, arcana type).
• Any specific questions or prompts you enter for a reading.

What data is NOT sent to AI providers:

• Your profile photo — it is never transmitted anywhere and remains solely on your device.
• Device identifiers, precise location, or any other personal identifiers.

How data is handled:

• Data is transmitted securely via encrypted connections (HTTPS/TLS).
• Data is sent only at the moment of generating a reading and is used solely to process that individual request. Neither Lumi nor our AI service providers permanently store this data.
• Both OpenAI and Google have their own privacy policies and data protection measures that provide a level of protection equivalent to or greater than this policy. You can review their policies at openai.com/privacy and policies.google.com/privacy.

User consent for AI data sharing:

Before any personal data is sent to a third-party AI service for the first time, Lumi will present you with a clear notice explaining what data will be shared and with whom. You must provide explicit consent before any data is transmitted. You may withdraw your consent at any time through the app settings, which will disable AI-powered features that require data sharing.

• Firebase Analytics (Google LLC, Mountain View, CA, USA) — collects anonymous usage data such as screen views, feature usage frequency, session duration, and device type. This data is aggregated and does not personally identify you.
• Firebase Crashlytics (Google LLC, Mountain View, CA, USA) — collects crash logs and diagnostic data to help us identify and fix app issues. This may include device model, operating system version, and the state of the app at the time of a crash.

Google processes this data in accordance with its privacy policy available at policies.google.com/privacy. Google provides data protection measures equivalent to or greater than those described in this policy.

• As required by law.
• As necessary to process refund requests for in-app purchases (in which case certain anonymized data may be shared with Apple).
• As described in Section 3 (AI data processing) and Section 4 (analytics and crash reporting) of this policy.

All third parties with whom we share data are contractually obligated to maintain the confidentiality and security of your information and to provide a level of data protection that is equivalent to or greater than the protections described in this policy.

• Withdraw consent for data sharing with third-party AI services at any time through the app settings.
• Clear all locally stored personal data by deleting the app or clearing app data through your device settings.
• Contact us with any questions about your data at the email address provided below.