Lumi Privacy Policy

• Information you provide voluntarily: a preferred name, gender, and zodiac sign. These do not have to be your real personal details — they simply define how you want the app to address and identify you. Optionally, you may set a profile photo for visual personalization — this photo is stored only on your device and is never transmitted to our servers or any third party.
• Automatically collected information: device type, operating system version, app usage patterns, crash logs, and anonymous analytics data (collected via Firebase, see Section 4).

Lumi does not require you to create an account, provide an email address, or submit any personal identifiers. All information you enter (name, gender, zodiac sign) is kept locally on your device and is only transmitted temporarily to our secure servers at the moment of generating a reading, as described in Section 3. We do not permanently store any user-provided data on our servers.

What data is sent to our servers:

• Your preferred name, gender, and zodiac sign. These do not have to be your real personal details — they simply define how you want the app to address you.
• Your selected spread preferences (e.g., reversed cards, arcana type).
• Any specific questions or prompts you enter for a reading.

What data is NOT sent to our servers:

• Your profile photo — it is never transmitted anywhere and remains solely on your device.
• Device identifiers, precise location, or any other personal identifiers.

How data is handled:

• Data is transmitted securely via encrypted connections (HTTPS/TLS).
• Data is sent only at the moment of generating a reading and is used solely to process that individual request. Our servers do not permanently store this data — it is discarded immediately after the response is generated.
• Our servers are hosted on AWS infrastructure in the European Union, which provides enterprise-grade security and complies with applicable data protection regulations.

User consent for AI data processing:

Before any data is sent to our servers for AI processing for the first time, Lumi will present you with a clear notice explaining what data will be sent and how it will be processed. You must provide explicit consent before any data is transmitted. You may withdraw your consent at any time through the app settings, which will disable AI-powered features that require data processing.

• Firebase Analytics (Google LLC, Mountain View, CA, USA) — collects anonymous usage data such as screen views, feature usage frequency, session duration, and device type. This data is aggregated and does not personally identify you.
• Firebase Crashlytics (Google LLC, Mountain View, CA, USA) — collects crash logs and diagnostic data to help us identify and fix app issues. This may include device model, operating system version, and the state of the app at the time of a crash.

Google processes this data in accordance with its privacy policy available at policies.google.com/privacy. Google provides data protection measures equivalent to or greater than those described in this policy.

• As required by law.
• As necessary to process refund requests for in-app purchases (in which case certain anonymized data may be shared with Apple).
• As described in Section 4 (analytics and crash reporting) of this policy.

All third parties with whom we share data (as described in this policy) are contractually obligated to maintain the confidentiality and security of your information and to provide a level of data protection that is equivalent to or greater than the protections described in this policy.

• Withdraw consent for AI data processing at any time through the app settings.
• Clear all locally stored personal data by deleting the app or clearing app data through your device settings.
• Contact us with any questions about your data at the email address provided below.