Privacy Policy

Lumi ("we," "our," or "us") is a household management application developed by Endpoint Technology LLC. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Lumi mobile application and associated web services (collectively, the "Service").

By creating an account or using Lumi, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and name. This information is required to authenticate you and personalize your experience.

1.2 Household Information

During household setup, we collect your home address and details about household members. This information is used to organize your household data and provide location-relevant features.

1.3 Financial Data

Lumi allows you to track household finances. You may voluntarily enter receipts, transaction costs, mortgage details, insurance information, loan balances, and budget data. This information is stored solely to provide you with financial tracking and analysis features.

1.4 Health and Medical Records

You may choose to store health and medical recordsfor household members, including doctor visits, prescriptions, immunization records, and medical notes. This data is entered voluntarily and is used only to help you manage your household's health information in one place.

1.5 Photos and Camera Data

Lumi uses your device's camera to scan receipts and documents. Photos captured for scanning are processed to extract details (such as merchant, amount, and date) and are stored as part of your records. We do not access your photo library beyond images you explicitly provide to the app.

1.6 Calendar, Task, and Planning Data

You may create and manage calendar events, tasks, grocery lists, and meal plans within Lumi. This data is stored to provide planning and organizational features.

1.7 Equipment and Home Data

Lumi allows you to track home equipment, appliances, maintenance records, and home improvement projects. This information helps you manage warranties, service schedules, and project costs.

1.8 AI Interactions

When you use Lumi's AI features, your instructions and the context necessary to answer them (such as references to your stored household data) are processed to generate responses. We do not use your interactions to train models. See Section 3 for details on our providers.

2. How We Use Your Information

We use the information we collect exclusively to:

• Provide, maintain, and improve the Lumi Service
• Authenticate your identity and secure your account
• Process and display your household data (finances, medical, equipment, etc.)
• Enable Lumi to sort household instructions into app actions using your household data
• Process receipt and document images via optical character recognition (OCR)
• Send transactional emails related to your account (e.g., password resets)
• Process subscription payments through Apple's App Store

We do not sell, rent, or share your personal information with advertisers or data brokers. We do not use third-party analytics or tracking SDKs. We do not display advertisements.

3. Third-Party Services

Lumi relies on the following third-party services to operate:

3.1 Lumi app helper

Lumi is designed as an app-scoped household helper, not a general chatbot. In the current build, Lumi can sort messy instructions into app actions without calling a live AI model. If a live AI provider is enabled in the future, relevant portions of your household data and your instruction may be sent to that provider only to generate app-specific plans or recommendations.

3.2 Apple (App Store and StoreKit)

Subscription payments are processed entirely by Apple through the App Store. We do not collect or store your payment card details. Apple handles all billing, receipts, and payment processing in accordance with their Privacy Policy.

3.3 Cloudflare (R2 Storage)

Uploaded files (receipts, documents, photos) are stored on Cloudflare R2, a cloud storage service. Files are stored encrypted at rest and are accessible only through authenticated requests tied to your account. Cloudflare processes data in accordance with their Privacy Policy.

3.4 Neon (Database)

Your account and household data is stored in a PostgreSQL database hosted by Neon. All data is encrypted in transit and at rest. Neon processes data in accordance with their Privacy Policy.

4. Data Storage and Security

We take reasonable measures to protect your data, including:

• Encryption of all data in transit using TLS/HTTPS
• Encryption of stored data at rest on our database and file storage providers
• Secure authentication with hashed passwords (we never store plaintext passwords)
• Session-based access control scoped to your household
• Signed, time-limited URLs for file downloads

While we implement industry-standard security practices, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention and Deletion

We retain your data for as long as your account is active. You may delete individual records (transactions, documents, medical records, etc.) at any time through the app.

Account Deletion: You may request deletion of your entire account and all associated data at any time by contacting us at support@lumifamily.app or through the Settings page in the app. Upon receiving a deletion request, we will permanently delete your account and all associated household data, including files stored on Cloudflare R2, within 30 days. Some data may persist in encrypted backups for up to 90 days before being purged.

6. Children's Privacy

Lumi is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. While household members of any age may be listed within a household managed by an adult account holder, only users aged 13 or older may create accounts.

If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@lumifamily.app.

7. Your Rights

7.1 General Rights

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data in your account
• Delete your account and all associated data
• Export your data in a portable format

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• No Sale of Personal Information: We do not sell or share your personal information for cross-context behavioral advertising.

7.3 European Economic Area and UK Residents (GDPR/UK GDPR)

If you are located in the EEA or the United Kingdom, you have additional rights under the General Data Protection Regulation, including:

• Legal Basis: We process your data based on your consent (account creation), contractual necessity (providing the Service), and legitimate interest (improving the Service and ensuring security).
• Right to Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to Object: You may object to processing based on legitimate interest.
• Right to Lodge a Complaint: You may file a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@lumifamily.app. We will respond to requests within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: