Privacy Policy

We collect the following types of information: • Account data: Apple ID identifier and email if signed in, guest device identifier, language, and timezone • Relationship content: letters you send, letters from your Lumean, storybook chapters, letter paper cards, and PDF export state • Health data: HealthKit step count if you grant permission • Usage data: events such as opening letters, sending letters, entering storybooks, Keeper Pass entry, sharing, and purchase funnel activity • Device and diagnostic information: notification token, IP address or coarse region derived from IP, crash logs, performance data, and basic diagnostics • Purchase and export information: Keeper Pass entitlement, transaction verification state, PDF export state, and short-term file access records

Your information is used to: • Generate and display proactive letters, replies, storybooks, letter paper cards, and PDF exports • Maintain your account, language, timezone, notification settings, and Keeper Pass entitlement • Turn steps, presence, focus, and letters into light and relationship continuity in Lumea • Deliver notifications for letters, chapters, and storybooks • Verify purchases, restore purchases, and complete export requests • Improve reliability and experience through aggregate analytics, coarse region statistics, crash logs, and performance data

User letter text and generated content are stored on our servers to maintain relationship continuity, generate future letters and storybooks, support export, and enable recovery. To provide replies, proactive letters, storybooks, and related notifications, some content may be processed by third-party AI service providers. We do not use user letter text for ad targeting, and we do not place letter text, mutters, or push notification copy inside analytics event properties.

If you grant HealthKit permission, Lumea reads step count only to turn everyday activity into light in your Lumean's world. Lumea does not write data to Apple Health and does not use step count for advertising, data brokerage, diagnosis, or treatment advice. You can revoke permission at any time in iOS Settings or Apple Health.

If you allow notifications, we store your device notification token to deliver letter and storybook alerts. Keeper Pass entitlement is verified through the App Store and our server. PDF export files are used to complete your export request and short-term access.

We use analytics to understand whether features are working, such as opening letters, sending letters, entering storybooks, sharing, and purchase funnels. We use diagnostic tools to collect crashes, performance data, and network errors. The server may use IP address for coarse region statistics and diagnostics. Letter text, generated content, mutters, and push notification copy are not included in analytics event properties.

We do not sell, rent, or share your personal information with third parties for marketing purposes, and we do not perform cross-app or cross-website advertising tracking. We process data with service providers only as needed to operate Lumea, including Apple (sign-in, IAP, notifications, HealthKit), server and database infrastructure (VPS / Dokploy / Postgres), Cloudflare R2 (file storage), Sentry (crashes and diagnostics), PostHog (product analytics), and third-party AI service providers (letters and storybooks). We may also share necessary information if required by law or to protect users and the service.

Your data is stored on secure servers. We use industry-standard encryption for data in transit (TLS) and at rest. Guest account credentials are stored in your device's Keychain. We retain account and relationship data while your account is active; PDF export files are retained only to complete export and short-term access; crash, diagnostic, and analytics data are retained as needed to operate the service.

You have the right to: (a) access your personal data; (b) request correction of inaccurate data; (c) delete your account and associated content inside the App; (d) revoke notification permission in system settings; (e) revoke HealthKit permission in Apple Health or system settings. To exercise these rights, contact us at [email protected].

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App. Continued use after changes constitutes acceptance.

If you have questions about this Privacy Policy, please contact us at [email protected].