Luma logo

    Privacy Policy

    Last updated: October 7, 2025

    Our Commitment to Your Privacy

    At Luma, we believe your notes are personal. We're committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your data.

    Information We Collect

    Account Information

    When you create an account, we collect:

    • Email address (for login and account recovery)
    • Password (encrypted and never stored in plain text)
    • Account preferences and settings

    Your Notes & Content

    We store the content you create in Luma:

    • Text notes, voice recordings, and images you upload
    • Tags, folders, and organizational data
    • AI-generated summaries and insights (derived from your notes)
    • Note metadata (creation dates, edit history, etc.)

    Usage Data

    To improve our service, we collect:

    • Device information (browser type, operating system)
    • Usage patterns (features used, session duration)
    • Error logs and performance data

    How We Use Your Information

    • Provide the Service: Store and sync your notes across devices
    • AI Features: Process your notes to generate summaries and insights
    • Improve Luma: Analyze usage patterns to enhance features
    • Account Management: Send important updates and password resets
    • Security: Protect against fraud and unauthorized access

    How We Protect Your Data

    • Encryption: All data is encrypted in transit (HTTPS) and at rest
    • Access Control: Only you can access your notes through secure authentication
    • AI Processing: AI features run on secure servers; your content is not used to train models
    • No Third-Party Sharing: We never sell your data to advertisers or third parties

    Third-Party Services

    Luma uses trusted third-party services to operate:

    • Hosting & Database: Supabase (for secure data storage)
    • Payment Processing: Stripe (for subscription payments)
    • AI Services: Google AI (for note analysis and summaries)
    • Authentication: Google OAuth (if you choose to sign in with Google)

    These services have their own privacy policies and security measures.

    Your Rights & Choices

    You have the right to:

    • Access Your Data: Download all your notes anytime
    • Delete Your Data: Permanently delete your account and all associated data
    • Control AI Features: Opt out of AI processing at any time
    • Update Information: Modify your account details and preferences

    Data Retention

    We keep your data as long as your account is active. If you delete your account, all your notes and personal information are permanently deleted within 30 days. Deleted notes in your trash are automatically removed after 30 days.

    Children's Privacy

    Luma is not intended for children under 13. We do not knowingly collect information from children. If you believe a child has created an account, please contact us.

    Changes to This Policy

    We may update this privacy policy occasionally. We'll notify you of significant changes via email or in-app notification. Continued use of Luma after changes means you accept the updated policy.

    Contact Us

    If you have questions about this privacy policy or how we handle your data, please reach out to us at: privacy@lumanote.org

    Thank you for trusting Luma with your ideas. We take that responsibility seriously. 🌟