Privacy Policy.

Information you give us:

• ✦Account data — your name (or whatever you'd like to be called), email address, and password (stored only as a salted hash via our authentication provider).
• ✦Birth data — your birth date, birth time, and birthplace. This is the heart of the product and the most sensitive thing you give us. We treat it accordingly: see Section 03.
• ✦Journal entries — anything you write in your cosmic journal.
• ✦Messages — what you send us when you contact support.

Information created when you use Lumi:

• ✦Derived chart data — planetary positions, house cusps, aspects, and the AI-generated readings produced from your birth data.
• ✦Usage data — pages visited, features used, device and browser type, and approximate (city-level) location from your IP address, used for security and to understand what's working.
• ✦Payment metadata — if you subscribe, our payment processor (Stripe) handles your card; we never see or store full card numbers. We keep records of your subscription status and invoices.

We do not collect contacts, precise device location, or advertising identifiers, and we don't buy data about you from anyone.

• ✦To calculate your chart — your birth date, time, and place are geocoded and passed to the Swiss Ephemeris to compute your natal chart. This is the sole purpose of your birth data.
• ✦To generate readings — your chart placements (not your name or email) are sent to our AI provider to write your natal reading and daily horoscopes.
• ✦To run your account — authentication, syncing, subscription management, and support.
• ✦To keep Lumi safe and improving — aggregate, de-identified usage analytics; fraud and abuse prevention.
• ✦To talk to you — service emails (receipts, security notices) always; product updates only if you opt in, and every marketing email has a working unsubscribe link.

What we never do: we never sell or rent your personal data, never share your birth data with advertisers or data brokers, never run third-party ads, and never use your journal entries to train AI models. Lumi is funded by Premium subscriptions — you are the customer, not the product.

A birth date, exact time, and place is effectively a fingerprint. We hold ourselves to a higher standard with it:

• ✦Encrypted in transit (TLS 1.2+) and at rest (AES-256) in our database.
• ✦Minimally shared — it is sent only to our geocoding provider (place name → coordinates) and our chart-calculation service, and only to the extent needed to compute your chart. It is never included in analytics events.
• ✦Decoupled from readings — requests to our AI provider contain chart placements and first name only, not your raw birth data, email, or any account identifier, and our agreements prohibit the provider from training models on them.
• ✦Yours to correct — you can edit your birth time or place at any time from your profile, and your chart recalculates immediately.
• ✦Erasable — deleting your account permanently removes your birth data and everything derived from it (Section 07).

Only service providers who help us run Lumi, under contracts limiting them to that purpose:

• ✦Supabase — database, authentication, and storage (hosting our encrypted data).
• ✦Stripe — payment processing for Premium subscriptions.
• ✦Google Maps Platform — geocoding birthplaces into coordinates.
• ✦Our AI provider (xAI) — generating readings from de-identified chart placements.
• ✦Our hosting and email providers — running the app and sending service emails.

Beyond that, we disclose data only if required by law (we'll notify you unless legally barred), to protect the safety of users or the public, or as part of a merger or acquisition — in which case this policy continues to apply to your data and we'll notify you before any change takes effect.

We use a small number of first-party cookies: a session cookie to keep you logged in and a preference cookie for settings. Our analytics are privacy-respecting and aggregate — we don't use cross-site tracking cookies, advertising pixels, or fingerprinting, and we honor Global Privacy Control signals.

• ✦Account, birth, and chart data — kept while your account is active.
• ✦Journal entries — kept while your account is active (7-day rolling window on the free tier, unlimited on Premium).
• ✦After deletion — removed from production within 30 days; encrypted backups expire on a rolling 35-day window.
• ✦Invoices and tax records — kept as long as law requires (typically 7 years), without your birth data.
• ✦Inactive free accounts — after 24 months of inactivity we'll email you, and if you don't return within 60 days, delete the account.

Wherever you live, we extend the same rights to everyone — including those under GDPR (EU/UK) and CCPA/CPRA (California):

• ✦Access & export — download a copy of your data (birth details, chart, readings, journal) in a portable format from your profile, or by emailing us.
• ✦Correction — fix your birth time, place, name, or email at any time in settings.
• ✦Deletion — delete your account and all associated data from profile settings or by emailing privacy@lumi.app. This is permanent and includes your birth data, charts, readings, and journal.
• ✦Objection & restriction — opt out of marketing email with one click; object to or restrict specific processing by contacting us.
• ✦No sale, no profiling — we don't sell personal data or make automated decisions with legal or similarly significant effects, so there's nothing to opt out of.

To exercise any right, use your profile settings or email privacy@lumi.app. We'll respond within 30 days. If you're in the EU/UK you may also lodge a complaint with your supervisory authority; we'd appreciate the chance to resolve it directly first.

Encryption in transit and at rest, row-level security on our database, least-privilege access for staff (production access requires hardware-key MFA), and regular dependency audits. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authorities without undue delay, and within 72 hours where the law requires it.

Lumi is not directed at children under 16, and we do not knowingly collect personal data from them. Charts cast for your own children within your account are stored as your data, under your control. If you believe a child under 16 has created an account, tell us at privacy@lumi.app and we'll delete it.

Lumi is operated from the United States and our providers process data in the US and EU. Where data moves across borders from the EU/UK, we rely on Standard Contractual Clauses and equivalent safeguards with each provider.

If we change this policy in any material way, we'll email you and post a notice in the app at least 30 days before the change takes effect — and we will never retroactively weaken protections on data you've already given us without your consent.

Privacy questions, requests, or concerns: privacy@lumi.app · Lumi, Inc., 1209 N Orange St, Wilmington, DE 19801, USA. See also our Terms of Service.