Privacy Policy

Information We Collect

• Account information, such as your email address, authentication provider, profile details, and subscription status.
• Journal content you choose to create, including memories, titles, text, dates, emotions, tags, locations, uploaded files, and generated exports.
• If you enable an AI feature and choose to use it, AI feature data may include your question, a compact pattern summary, usage metadata, and only the journal excerpts or selected document needed to generate the response you request.
• Technical and security information, such as device/browser details, IP-derived request metadata, logs, rate-limit records, diagnostics, and error reports.
• Purchase and subscription information processed by Apple through StoreKit and validated by RevenueCat. We do not offer a web checkout or store full payment-card numbers or Apple payment credentials on Lumen Journal servers.
• We receive information directly from you, from the device or browser you use, and from service providers such as Apple, authentication providers, and RevenueCat when they operate a feature you request.

How We Use Information

• Provide the journal, account, search, upload, export, and subscription features, plus optional AI-assisted reflection only when it is enabled and requested.
• Protect accounts, enforce limits, debug errors, prevent abuse, and maintain service reliability.
• Process payments, manage subscriptions, send account or support messages, and respond to requests.
• Improve product quality using aggregated or diagnostic information where practical.
• Comply with legal, tax, security, and operational obligations.

Legal Bases for Processing

• Where applicable law requires a legal basis, we process account, journal, export, and subscription data to provide the service you request and perform our agreement with you.
• We process limited security, reliability, fraud-prevention, and support information for our legitimate interests in protecting users and operating Lumen Journal, provided those interests are not overridden by your rights.
• We rely on consent where applicable law requires it for optional processing, and you may withdraw that consent for future processing. We may also process limited information to comply with legal obligations or establish, exercise, or defend legal claims.
• Lumen Journal does not use journal content to make automated decisions that produce legal or similarly significant effects about you.

AI Processing

• AI features are optional, are off for each account by default, and require a separate, versioned privacy choice before first use. Saving a journal entry does not start AI processing.
• For the planned Lumen Plus release, OpenAI processes the question and limited relevant context needed for the requested response. Ask Lumen uses at most 10 relevant entry excerpts rather than your full journal. Dictation sends only the recording you choose to transcribe. The consent screen identifies the live provider and its current data-use terms before anything is sent.
• Lumen requests that text responses are not stored by the provider, does not save Ask Lumen chat transcripts or model answers, and stores only usage totals plus feedback or corrections you deliberately submit. OpenAI states that API data is not used to train its models by default, although standard abuse-monitoring retention may apply to text requests.
• You can disable future AI processing or erase Lumen's derived AI data without deleting your underlying journal. Private journal content is not sold and is not intentionally used to train a public AI model.
• AI output can be incomplete or inaccurate. It is for reflection and organization, not medical, mental health, legal, financial, or emergency advice.

How We Share Information

• Service providers that host, store, authenticate, process App Store subscriptions, or help operate the service. Current core providers include Cloudflare, Supabase, Apple, and RevenueCat. OpenAI processes limited content only when you enable and invoke an AI or dictation feature. Resend, Sentry, analytics tooling, or a replacement AI provider process data only if that service is configured, enabled, and disclosed before use.
• We require service providers handling personal information for Lumen Journal to protect it consistently with their role, our instructions, applicable contracts, and applicable law. They may not use private journal content for their own advertising.
• Legal, safety, or compliance recipients when required to protect users, comply with law, or enforce our terms.
• Other people only when you export content or disclose it outside the product yourself.

Cookies, Local Storage, and Analytics

• The web app uses essential cookies or similar storage to maintain authentication, security, preferences, and service continuity.
• Product analytics and performance monitoring are enabled only when configured. Lumen Journal does not use journal content for cross-app advertising and does not sell it to data brokers.
• If we introduce non-essential analytics or similar storage, we will provide consent or opt-out controls before use where applicable law requires them.
• Blocking essential storage may prevent sign-in or other account features from working correctly.

Your Choices and Rights

• You can export your account data as JSON or an archive from account settings.
• You can delete your account from account settings. Deletion removes active account data, subject to temporary backups, logs, security records, legal obligations, and payment records retained by processors.
• Deleting a Lumen account does not cancel an Apple auto-renewable subscription. Cancel it from App Store subscription settings before or after deletion to stop future renewal.
• You can contact us to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent for future processing where those rights apply.
• Withdrawing consent does not affect processing that was lawful before withdrawal. We may ask for information reasonably necessary to verify your identity and protect the account before completing a request.
• Where applicable law permits it, an authorized agent may submit a request for you. We may require proof of the agent's authority and may ask you to verify your identity or confirm the request directly.
• If we deny an applicable privacy request, you may appeal by emailing us with the subject “Privacy Appeal.” We will review the appeal and explain our decision, including any further complaint route required by applicable law.
• We do not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against you for exercising an applicable privacy right.
• Journal content may reveal sensitive information. We use it only to provide the features you request, protect the service, and meet legal obligations—not to infer traits for advertising or sell profiles about you.
• If European data-protection law applies, you may lodge a complaint with the supervisory authority where you live or work or where an alleged infringement occurred. You may contact us first so we can try to resolve the concern.

Retention and Security

• We keep account and journal data while your account is active or until you delete the content or account, unless a longer period is needed to complete a request or meet a legal obligation.
• After account deletion, active Lumen account data is removed. Limited information may remain temporarily in provider backups, security and abuse-prevention records, support records, and transaction or tax records for the shortest period required by the purpose, provider backup cycle, or applicable law. Apple and RevenueCat may retain purchase records under their own legal obligations.
• We delete or de-identify diagnostic and operational information when it is no longer needed for security, reliability, support, or legal compliance. We do not keep private journal content merely for advertising or model training.
• We use access controls, row-level security, private storage paths, HTTPS, and operational monitoring to protect user data.
• No online service can guarantee absolute security. Protect your device, email account, and Apple or other enabled sign-in account.

International Processing

• Lumen Journal and its service providers may process information in countries other than the one where you live. Privacy protections and government-access rules can differ by location.
• Where applicable law requires a transfer mechanism or additional safeguard, we will rely on the mechanism used by the relevant service provider or put an appropriate safeguard in place.

Children

• Lumen Journal is not directed to children under 13, and we do not knowingly collect their personal information. A higher minimum age may apply where local law requires it.
• If you believe a child provided personal information without appropriate permission, contact us so we can investigate and take appropriate action.

Changes to This Policy

• We may update this policy as the product, providers, or legal requirements change. The date at the top shows the latest revision.
• Material changes should be communicated in the product or by another reasonable method before they take effect when required by law.

Contact

For privacy questions or requests, contact support@lumenjournals.app.