Privacy Policy

Lumi ("we," "our," or "us") is a household management application developed by Endpoint Technology LLC. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Lumi mobile application and associated web services (collectively, the "Service").

By creating an account or using Lumi, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and name. This information is required to authenticate you and personalize your experience.

1.2 Household Information

During household setup, we collect your home address and details about household members. This information is used to organize your household data and provide location-relevant features.

1.3 Financial Data

Lumi allows you to track household finances. You may voluntarily enter receipts, transaction costs, mortgage details, insurance information, loan balances, and budget data. This information is stored solely to provide you with financial tracking and analysis features.

1.4 Health and Medical Records

You may choose to store health and medical records for household members, including doctor visits, prescriptions, immunization records, and medical notes. This data is entered voluntarily and is used only to help you manage your household's health information in one place.

1.5 Photos and Camera Data

Lumi uses your device's camera to scan receipts and documents. Photos captured for scanning are processed to extract details (such as merchant, amount, and date) and are stored as part of your records. We do not access your photo library beyond images you explicitly provide to the app.

1.6 Calendar, Task, and Planning Data

You may create and manage calendar events, tasks, grocery lists, and meal plans within Lumi. This data is stored to provide planning and organizational features.

1.7 Equipment and Home Data

Lumi allows you to track home equipment, appliances, maintenance records, and home improvement projects. This information helps you manage warranties, service schedules, and project costs.

1.8 AI Interactions

Lumi's assistant features are powered by artificial intelligence provided by a third-party AI service, Anthropic (see Section 3.1). When you use these features, the following data is sent to Anthropic to generate a response:

• The text you type or dictate — brain dump entries, chat messages, and natural-language commands
• Photos you choose to capture or share for scanning — receipts, flyers, appointment cards, and similar documents
• The household context needed to act on your request — such as family member names, and relevant tasks, events, lists, and records you have stored in Lumi

You give explicit permission before any of this processing happens: Lumi asks for your consent before the first AI feature runs, and nothing is sent to Anthropic until you agree. You can turn AI features on or off anytime in the app under Settings → AI & Your Data. Your data is not used to train Anthropic's models and is never sold. See Section 3.1 for details on our AI provider.

1.9 App Usage and Diagnostics

We collect anonymous app-usage and crash information to understand how Lumi is working and to fix problems: which screens are viewed, which onboarding step you reached, whether an action succeeded or failed, error and crash reports, and basic device and app version information.

This data contains none of your household content — no tasks, events, lists, notes, photos, documents, or family details — and is not linked to your name or email address. It is processed by Google Firebase; see Section 3.6. Lumi does not use an advertising identifier and does not track you across other companies' apps or websites.

2. How We Use Your Information

We use the information we collect exclusively to:

• Provide, maintain, and improve the Lumi Service
• Authenticate your identity and secure your account
• Process and display your household data (finances, medical, equipment, etc.)
• Enable Lumi to sort household instructions into app actions using your household data
• Share the data described in Section 1.8 with our AI provider, Anthropic, to power Lumi's assistant features, as disclosed in the app
• Process receipt and document images via optical character recognition (OCR)
• Respond to support requests and account inquiries you send us
• Process subscription payments through Apple's App Store
• Understand how the app is used and diagnose crashes and errors, using the anonymous usage data described in Section 1.9

We do not sell, rent, or share your personal information with advertisers or data brokers. We use analytics and crash-reporting tools (see Section 3.6) solely to operate and improve Lumi, and they receive no household content. We do not use advertising or cross-app tracking SDKs, and we do not display advertisements.

3. Third-Party Services

Lumi relies on the following third-party services to operate:

3.1 Anthropic (AI Processing)

We use a third-party artificial intelligence provider, Anthropic, to power Lumi's assistant features. Lumi's features are built on Anthropic's Claude models. When you use them, your instruction, the household context needed to act on it (such as family member names, tasks, events, and lists), and — for photo features — the image you submit are sent to Anthropic's API to generate the response.

Anthropic processes this data as a service provider under a data processing agreement that provides protection equivalent to this policy. Anthropic does not use your data to train its models and does not retain it beyond what is needed to provide the service. This disclosure is shown in the app — each AI feature is labeled with our provider, and a full summary is available anytime in Settings → AI & Your Data. Lumi is app-scoped by design: it acts only on your household's data, and sensitive actions require your confirmation. Anthropic processes data in accordance with their Privacy Policy.

3.2 Apple (App Store and StoreKit)

Subscription payments are processed entirely by Apple through the App Store. We do not collect or store your payment card details. Apple handles all billing, receipts, and payment processing in accordance with their Privacy Policy.

3.3 Cloud File Storage

Uploaded files (receipts, documents, photos) are stored in S3-compatible cloud object storage. Files are stored encrypted at rest and are accessible only through authenticated, time-limited requests tied to your account.

3.4 RevenueCat (Subscription Management)

We use RevenueCat to manage subscription state. RevenueCat receives your purchase history and an app-specific user identifier — never your payment details, which stay with Apple. RevenueCat processes data in accordance with their Privacy Policy.

3.5 Neon (Database) and Vercel (Hosting)

Your account and household data is stored in a PostgreSQL database hosted by Neon, and the Service runs on Vercel's hosting platform. All data is encrypted in transit and at rest. Neon processes data in accordance with their Privacy Policy.

3.6 Google Firebase (Analytics and Crash Reporting)

We use Google Firebase Analytics and Firebase Crashlytics to understand how the app is used and to detect crashes and errors. This tells us things like which onboarding step people stop at, whether the subscription screen failed to load, and where the app is breaking — so we can fix problems we would otherwise never see.

Your household content is never sent to Firebase. Analytics events contain only anonymous app-usage information: which screen was viewed, whether an action succeeded or failed, counts, and error codes. They never include your tasks, calendar events, lists, notes, photos, documents, names, or anything else you or your family put into Lumi. We do not send your email address or name to Firebase, and we do not link analytics data to your identity.

We use the privacy-minimal configuration of Firebase: Lumi does not collect an advertising identifier, does not track you across other companies' apps or websites, and does not use this data for advertising. Google processes this data as our service provider under its Firebase Privacy and Security policy.

4. Data Storage and Security

We take reasonable measures to protect your data, including:

• Encryption of all data in transit using TLS/HTTPS
• Encryption of stored data at rest on our database and file storage providers
• Secure authentication with hashed passwords (we never store plaintext passwords)
• Session-based access control scoped to your household
• Signed, time-limited URLs for file downloads

While we implement industry-standard security practices, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention and Deletion

We retain your data for as long as your account is active. You may delete individual records (transactions, documents, medical records, etc.) at any time through the app.

Account Deletion: You may request deletion of your entire account and all associated data at any time by contacting us at support@lumifamily.app or through the Settings page in the app. Upon receiving a deletion request, we will permanently delete your account and all associated household data, including uploaded files, within 30 days. Some data may persist in encrypted backups for up to 90 days before being purged.

6. Children's Privacy

Lumi is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. While household members of any age may be listed within a household managed by an adult account holder, only users aged 13 or older may create accounts.

If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@lumifamily.app.

7. Your Rights

7.1 General Rights

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data in your account
• Delete your account and all associated data
• Export your data in a portable format

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• No Sale of Personal Information: We do not sell or share your personal information for cross-context behavioral advertising.

7.3 European Economic Area and UK Residents (GDPR/UK GDPR)

If you are located in the EEA or the United Kingdom, you have additional rights under the General Data Protection Regulation, including:

• Legal Basis: We process your data based on your consent (account creation), contractual necessity (providing the Service), and legitimate interest (improving the Service and ensuring security).
• Right to Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to Object: You may object to processing based on legitimate interest.
• Right to Lodge a Complaint: You may file a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@lumifamily.app. We will respond to requests within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: