Privacy policy

PRIVACY POLICY

Effective 23 October 2026. This policy explains how Lumize processes information when you use our web, iOS, and Android apps. Lumize, registered with the Dutch Chamber of Commerce under number 81617062, is the controller of your personal data and can be reached at [email protected].

INFORMATION WE PROCESS

You can start using the native app with an anonymous account. We process an account identifier, collection and lume content, learning progress, app settings, sharing and synchronization information, and technical information needed to operate the service. If you connect an email address, we also process that email address. If you send feedback, we process your message and, if you include it, your email address. We do not sell your personal information.

HOW WE USE INFORMATION

We use information to provide and synchronize Lumize, restore account access, deliver requested emails and notifications, process subscriptions, generate requested audio or AI-assisted content, prevent abuse, diagnose errors, improve reliability, and comply with legal obligations.

LEGAL BASES

We process personal data to perform our agreement with you (your account, content, synchronization, purchases, and the features you request), on the basis of our legitimate interests (security, abuse prevention, error diagnostics, and limited usage analytics to improve Lumize), to comply with legal obligations (such as tax and accounting records), and with your consent where we ask for it (such as notifications or photo access, which you can withdraw in your device settings).

USER CONTENT

Collections, lumes, learning progress, and related settings are stored so Lumize can provide synchronization, sharing, recovery, and other requested features. Content is not end-to-end encrypted. Please do not enter information that you do not want stored or processed as part of the service. Content you intentionally publish to the Vault or share through a link may be accessible to others.

AI AND AUDIO SERVICES

When you request AI-assisted generation or text-to-speech audio, the text needed to fulfill that request may be sent to the applicable service provider, such as OpenAI for AI-assisted generation and xAI for text-to-speech audio. When you scan a photo or create a collection from a photo, a reduced copy of that photo is sent to OpenAI to read or recognize what it shows; Lumize does not store the photo. Do not submit sensitive personal information for these features. Generated translations, learning material, and audio may contain errors and should be reviewed before use.

PAYMENTS

Web subscriptions are processed by Stripe. Native subscriptions are processed through Apple or Google and managed with RevenueCat. Lumize does not receive your full payment-card details. These providers process payment and subscription information under their own privacy policies.

SERVICE PROVIDERS

We use service providers where necessary to operate Lumize, including hosting and database providers, Resend for transactional email, Sentry for crash and error diagnostics, OpenAI for requested AI and audio features, xAI for text-to-speech audio, Stripe for web payments, RevenueCat for native subscription management, and Apple and Google for native purchases. Providers receive only the information needed to perform their services and process it under their own terms and privacy policies.

CRASH REPORTS AND TECHNICAL LOGS

We use Sentry and server logs to diagnose crashes, errors, security incidents, and service reliability. Reports may include device or app information, timestamps, route information, account identifiers, and technical details associated with an error. We do not use this information to sell advertising profiles.

USAGE ANALYTICS

We record a limited set of in-app events, such as viewing the Gold screen, starting a purchase, or scheduling a collection, together with the platform, app version, language, and how many days ago the account was created. These events are not linked to your account or identity. We use them only to understand and improve Lumize. They are stored on our own servers, not shared with third parties, and not used for advertising or cross-app tracking.

COOKIES AND LOCAL STORAGE

Lumize uses cookies, secure device storage, and local app storage for authentication, session continuity, preferences, offline functionality, and other essential features. We do not use this policy to authorize unrelated cross-site advertising tracking.

DATA RETENTION AND DELETION

We retain account information and user content while your account is active and as needed to provide the service. You can delete your account from the app. We delete active account data from our primary systems, except where retention is required for legal, security, fraud-prevention, payment, or backup purposes. Encrypted backups are kept for up to 12 months, after which deleted data is removed from them as well. We may remove anonymous or inactive accounts after an extended period of inactivity.

YOUR RIGHTS

Depending on where you live, including under the GDPR, you may have rights to access, correct, delete, restrict, object to processing of, or request portability of your personal data. You may also lodge a complaint with your local data-protection authority. Contact [email protected] to exercise a right that is not available directly in the app.

CHILDREN

Lumize is intended for people aged 13 and older. Users under 16, or under the age of digital consent where they live, need permission from a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact [email protected] so we can investigate and remove it where appropriate.

SECURITY

We use reasonable technical and organizational safeguards designed to protect information. No storage or transmission method is completely secure, and we cannot guarantee absolute security. You are responsible for keeping access to your email account and devices secure.

INTERNATIONAL PROCESSING

Our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers of personal data.

CHANGES TO THIS POLICY

We may update this policy as Lumize changes. If a change is material, we may provide notice in the app, on the website, or by email. The effective date at the top indicates the current version.

CONTACT

Questions or privacy requests can be sent to [email protected].