
Privacy Policy
Last updated: October 7, 2025
Our Commitment to Your Privacy
At Luma, we believe your notes are personal. We're committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your data.
Information We Collect
Account Information
When you create an account, we collect:
- Email address (for login and account recovery)
- Password (encrypted and never stored in plain text)
- Account preferences and settings
Your Notes & Content
We store the content you create in Luma:
- Text notes, voice recordings, and images you upload
- Tags, folders, and organizational data
- AI-generated summaries and insights (derived from your notes)
- Note metadata (creation dates, edit history, etc.)
Usage Data
To improve our service, we collect:
- Device information (browser type, operating system)
- Usage patterns (features used, session duration)
- Error logs and performance data
How We Use Your Information
- Provide the Service: Store and sync your notes across devices
- AI Features: Process your notes to generate summaries and insights
- Improve Luma: Analyze usage patterns to enhance features
- Account Management: Send important updates and password resets
- Security: Protect against fraud and unauthorized access
How We Protect Your Data
- Encryption: All data is encrypted in transit (HTTPS) and at rest
- Access Control: Only you can access your notes through secure authentication
- AI Processing: AI features run on secure servers; your content is not used to train models
- No Third-Party Sharing: We never sell your data to advertisers or third parties
Third-Party Services
Luma uses trusted third-party services to operate:
- Hosting & Database: Supabase (for secure data storage)
- Payment Processing: Stripe (for subscription payments)
- AI Services: Google AI (for note analysis and summaries)
- Authentication: Google OAuth (if you choose to sign in with Google)
These services have their own privacy policies and security measures.
Your Rights & Choices
You have the right to:
- Access Your Data: Download all your notes anytime
- Delete Your Data: Permanently delete your account and all associated data
- Control AI Features: Opt out of AI processing at any time
- Update Information: Modify your account details and preferences
Data Retention
We keep your data as long as your account is active. If you delete your account, all your notes and personal information are permanently deleted within 30 days. Deleted notes in your trash are automatically removed after 30 days.
Children's Privacy
Luma is not intended for children under 13. We do not knowingly collect information from children. If you believe a child has created an account, please contact us.
Changes to This Policy
We may update this privacy policy occasionally. We'll notify you of significant changes via email or in-app notification. Continued use of Luma after changes means you accept the updated policy.
Contact Us
If you have questions about this privacy policy or how we handle your data, please reach out to us at: privacy@lumanote.org
Thank you for trusting Luma with your ideas. We take that responsibility seriously. 🌟