Your relationship is not our business.
This policy explains what information Luma collects, how we use it, and what choices you have. See also Terms of use.
1) What we collect
We collect information you provide directly, such as account email, profile preferences, reflections, journal-like text, and tool inputs (for example, chat prompts, conflict replay entries, and onboarding responses).
If you use image-enabled features, we process the images you upload for analysis. We may also store metadata such as timestamps, feature usage events, and device/session context needed to run the product.
2) How we use your information
We use your information to provide reflections, personalize insights, maintain your history, improve feature quality, and support product reliability and abuse prevention.
We do not use your private reflections to run ad targeting. We do not sell your personal data.
3) AI processing and third-party providers
Luma uses trusted infrastructure and AI providers to generate outputs. Data sent to these providers is limited to what is required to perform the requested feature.
Providers may temporarily process data for security and service operation. We configure integrations to prioritize privacy and minimize retention where possible.
4) Storage and retention
Reflection data and related profile context are stored to support continuity across sessions and devices. We retain data while your account is active, or as needed for legitimate operational, legal, or security reasons.
You can request deletion. Some logs may persist for a limited period in backups or security systems.
5) Security
We use reasonable technical and organizational safeguards, including encrypted transport and restricted system access. No system is 100% secure, but we continuously improve protections and monitoring.
6) Sharing and disclosure
We do not sell personal information. We may share limited data with service providers who help us run Luma, and only under contractual confidentiality and processing obligations.
We may disclose information if required by law, legal process, or to protect users, rights, and service safety.
7) Your choices and rights
Depending on where you live, you may have rights to access, correct, export, restrict, or delete your data. You may also object to certain processing.
To make a request, email privacy@luma.app.
8) Children's privacy
Luma is not intended for children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided personal information, contact us and we will take appropriate action.
9) International users
Your information may be processed in countries other than your own. Where required, we use safeguards designed to protect personal data transferred across borders.
10) Policy changes
We may update this policy as Luma evolves. Material updates will be reflected by the revised date and, where appropriate, by additional notice in product.
Contact
Questions about privacy, data handling, or deletion requests:
Last updated: April 2026