Privacy Policy

Information We Collect

• Account information, such as your email address, authentication provider, profile details, and subscription status.
• Journal content you choose to create, including memories, titles, text, dates, emotions, tags, locations, uploaded files, and generated exports.
• If external AI features are enabled and you choose to use them, AI feature data may include prompts, summaries, pattern analysis, usage metadata, and the limited journal context needed to generate the response you request. External AI is disabled in the current production release.
• Technical and security information, such as device/browser details, IP-derived request metadata, logs, rate-limit records, diagnostics, and error reports.
• Purchase and subscription information processed by Apple through StoreKit and validated by RevenueCat. We do not offer a web checkout or store full payment-card numbers or Apple payment credentials on Lumen Journal servers.
• We receive information directly from you, from the device or browser you use, and from service providers such as Apple, authentication providers, and RevenueCat when they operate a feature you request.

How We Use Information

• Provide the journal, account, search, upload, export, and subscription features, plus optional AI-assisted reflection only when it is enabled and requested.
• Protect accounts, enforce limits, debug errors, prevent abuse, and maintain service reliability.
• Process payments, manage subscriptions, send account or support messages, and respond to requests.
• Improve product quality using aggregated or diagnostic information where practical.
• Comply with legal, tax, security, and operational obligations.

Legal Bases for Processing

• Where applicable law requires a legal basis, we process account, journal, export, and subscription data to provide the service you request and perform our agreement with you.
• We process limited security, reliability, fraud-prevention, and support information for our legitimate interests in protecting users and operating Lumen Journal, provided those interests are not overridden by your rights.
• We rely on consent where applicable law requires it for optional processing, and you may withdraw that consent for future processing. We may also process limited information to comply with legal obligations or establish, exercise, or defend legal claims.
• Lumen Journal does not use journal content to make automated decisions that produce legal or similarly significant effects about you.

AI Processing

• External AI is disabled in the current production release. If it is enabled later and you choose to use it, Lumen will explain the processing before first use and may send limited relevant journal content to the configured AI provider to generate the response you request.
• Private journal content is not sold, and Lumen Journal does not intentionally use private journal entries to train a public AI model.
• AI output can be incomplete or inaccurate. It is for reflection and organization, not medical, mental health, legal, financial, or emergency advice.

How We Share Information

• Service providers that host, store, authenticate, email, process App Store subscriptions, or help operate the service. Current core providers include Supabase, Vercel, Apple, and RevenueCat. OpenAI or Anthropic, Resend, Sentry, and analytics tooling process data only if the corresponding optional service is configured and enabled.
• We require service providers handling personal information for Lumen Journal to protect it consistently with their role, our instructions, applicable contracts, and applicable law. They may not use private journal content for their own advertising.
• Legal, safety, or compliance recipients when required to protect users, comply with law, or enforce our terms.
• Other people only when you export content or disclose it outside the product yourself.

Cookies, Local Storage, and Analytics

• The web app uses essential cookies or similar storage to maintain authentication, security, preferences, and service continuity.
• Product analytics and performance monitoring are enabled only when configured. Lumen Journal does not use journal content for cross-app advertising and does not sell it to data brokers.
• Blocking essential storage may prevent sign-in or other account features from working correctly.

Your Choices and Rights

• You can export your account data as JSON or an archive from account settings.
• You can delete your account from account settings. Deletion removes active account data, subject to temporary backups, logs, security records, legal obligations, and payment records retained by processors.
• Deleting a Lumen account does not cancel an Apple auto-renewable subscription. Cancel it from App Store subscription settings before or after deletion to stop future renewal.
• You can contact us to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent for future processing where those rights apply.
• We do not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against you for exercising an applicable privacy right.
• If European data-protection law applies, you may lodge a complaint with the supervisory authority where you live or work or where an alleged infringement occurred. You may contact us first so we can try to resolve the concern.

Retention and Security

• We keep account and journal data while your account is active or until you delete the content or account, unless a longer period is needed to complete a request or meet a legal obligation.
• After account deletion, active Lumen account data is removed. Limited information may remain temporarily in provider backups, security and abuse-prevention records, support records, and transaction or tax records for the shortest period required by the purpose, provider backup cycle, or applicable law. Apple and RevenueCat may retain purchase records under their own legal obligations.
• We delete or de-identify diagnostic and operational information when it is no longer needed for security, reliability, support, or legal compliance. We do not keep private journal content merely for advertising or model training.
• We use access controls, row-level security, private storage paths, HTTPS, and operational monitoring to protect user data.
• No online service can guarantee absolute security. Please use a strong password and protect access to your email and OAuth accounts.

International Processing

• Lumen Journal and its service providers may process information in countries other than the one where you live. Privacy protections and government-access rules can differ by location.
• Where applicable law requires a transfer mechanism or additional safeguard, we will rely on the mechanism used by the relevant service provider or put an appropriate safeguard in place.

Children

• Lumen Journal is not directed to children under 13, and we do not knowingly collect their personal information. A higher minimum age may apply where local law requires it.
• If you believe a child provided personal information without appropriate permission, contact us so we can investigate and take appropriate action.

Changes to This Policy

• We may update this policy as the product, providers, or legal requirements change. The date at the top shows the latest revision.
• Material changes should be communicated in the product or by another reasonable method before they take effect when required by law.

Contact

For privacy questions or requests, contact support@lumenjournals.app.