Privacy Policy

Information We Collect

• Account information, such as your email address, authentication provider, profile details, and subscription status.
• Journal content you choose to create, including memories, titles, text, dates, emotions, tags, locations, uploaded files, and generated exports.
• AI feature data, including prompts, summaries, pattern analysis, usage metadata, and the journal context needed to generate requested AI responses.
• Technical and security information, such as device/browser details, IP-derived request metadata, logs, rate-limit records, diagnostics, and error reports.
• Billing information processed by Stripe. We do not store full payment card numbers on Lumen Journal servers.

How We Use Information

• Provide the journal, account, search, upload, export, subscription, and AI-assisted reflection features.
• Protect accounts, enforce limits, debug errors, prevent abuse, and maintain service reliability.
• Process payments, manage subscriptions, send account or support messages, and respond to requests.
• Improve product quality using aggregated or diagnostic information where practical.
• Comply with legal, tax, security, and operational obligations.

AI Processing

• When you use AI features, relevant journal content may be sent to AI infrastructure providers so they can generate the response you requested.
• Private journal content is not sold, and Lumen Journal does not intentionally use private journal entries to train a public AI model.
• AI output can be incomplete or inaccurate. It is for reflection and organization, not medical, mental health, legal, financial, or emergency advice.

How We Share Information

• Infrastructure providers that host, store, monitor, email, process payments, or help operate the service, including services such as Supabase, Vercel, Stripe, OpenAI or Anthropic when AI is configured, Resend, Sentry, and analytics tooling when configured.
• Legal, safety, or compliance recipients when required to protect users, comply with law, or enforce our terms.
• Other people only when you export content or disclose it outside the product yourself.

Your Choices and Rights

• You can export your account data as JSON or an archive from account settings.
• You can delete your account from account settings. Deletion removes active account data, subject to temporary backups, logs, security records, legal obligations, and payment records retained by processors.
• You can contact us to request access, correction, deletion, portability, or other privacy rights available under laws that apply to you.
• We do not sell personal information in the ordinary meaning of that phrase. If this changes, this policy and product controls must be updated before launch.

Retention and Security

• We keep account and journal data while your account is active or as needed to provide the service.
• We use access controls, row-level security, private storage paths, HTTPS, and operational monitoring to protect user data.
• No online service can guarantee absolute security. Please use a strong password and protect access to your email and OAuth accounts.

Contact

For privacy questions or requests, contact support@lumenjournals.app.