Legal

Privacy Policy

Last updated: July 2026

Lumah ("the App") is a mobile mental well-being application operated by Lumah ("we," "us," or "our"). Your privacy is very important to us. This Privacy Policy explains how we collect, use, and protect your information when you use Lumah.

By using the App, you agree to this Privacy Policy.

1. Information We Collect

We collect minimal personal data only as needed to operate and improve the App.

a. Account & Authentication

When you sign in using Apple Sign-In or Google Sign-In, we may receive:

A unique identifier
Your email address (unless you choose to hide it via Apple)
Profile name if available

This authentication is managed via Supabase.

b. Journal Entries & AI Processing

When you write or speak an entry, its content is sent to Anthropic (Claude), which processes it to summarize how you are feeling and to suggest a matching soundscape or exercise. We ask for your explicit consent before this processing takes place for the first time.

Your conversation itself is not stored on our servers. Once an entry is complete, only the summary is saved — and only if you choose to keep it. Saved reflections are stored securely and linked to your account.

Your content is not used to train AI models, and is never used for advertising purposes. Our AI provider may retain content for a limited period for safety and abuse monitoring purposes, in accordance with its own policies.

c. Well-being Data

We store data related to your use of the App, such as saved reflections, mood indicators, completed exercises and programs, listening activity, and progress towards achievements. This data is used solely to operate the App's features, including your recaps and progress tracking.

d. Usage & Analytics

We may collect:

Device type and operating system version
Crash logs and error reports
Anonymous usage statistics

This information is used to improve app stability and user experience.

2. How We Use Your Information

We use collected data to:

Authenticate accounts and manage sessions
Generate AI reflections, summaries, and personalized recommendations
Provide and maintain the App and its features
Show you your recaps and track your progress over time
Process subscriptions and premium access
Monitor and improve app performance
Respond to support requests

We do not sell or rent your personal information to third parties.

3. Payments and Subscriptions

Premium features are available through in-app purchases. Payments and subscription status are processed by RevenueCat, which works with the App Store and Google Play. We do not directly store your payment card information.

4. Third-Party Services

To operate the App, we rely on third-party services, including:

Anthropic (Claude)AI processing of journal entriesPrivacy policy

SupabaseAuthentication and backend data storagePrivacy policy

RevenueCatSubscription managementPrivacy policy

AppleSign-In and App Store servicesPrivacy policy

GoogleGoogle Sign-In and Play servicesPrivacy policy

These providers process data according to their own privacy policies. Some of them are located outside the European Union; where this is the case, transfers are carried out under appropriate safeguards.

5. Data Storage and Security

We use industry-standard security measures, including:

Encryption in transit (HTTPS) for all data, including entries sent for AI processing
Secure cloud storage via Supabase, with access controls ensuring your saved reflections are accessible only to your own account
Local device protections for data stored on your device

While no system can guarantee absolute security, we strive to protect your information.

6. Data Retention

We keep your saved reflections and well-being data for as long as your account remains active. You can delete individual reflections at any time, or delete your entire account from within the App, which removes your data from our systems. Anonymous usage statistics and crash logs may be retained separately for a limited period to help us improve the App.

7. Your Privacy Choices

You may:

Access, update, or delete your reflections at any time
Delete your account and associated data directly from within the App
Withdraw your consent to AI processing, which will disable the AI journal features
Revoke access from Apple or Google via your device settings
Cancel subscriptions via App Store or Google Play settings
Delete locally stored data by uninstalling the App

If you are located in the European Economic Area or the United Kingdom, you also have the right to request access to, rectification of, or portability of your data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.

8. Age Requirement

Lumah is intended for users aged 16 and over. We do not knowingly collect personal information from anyone under this age. If we become aware that we have collected such data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top.

Continued use of the App after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or your data, contact us at hello@lumah.org.