Privacy Policy
Your thoughts, memories, and vulnerable reflections belong exclusively to you. Lumina is engineered around strict privacy isolation, zero advertising, and Bring-Your-Own-Key (BYOK) architecture.
We never sell, rent, or commercialize your personal journal entries or private data.
Your Google Gemini and ElevenLabs API calls run with your keys and are not used to train foundation models.
Download complete JSON archives or branded PDF books anytime with single-click export.
Information We Collect
Lumina collects only the minimal data required to provide you with a resilient, reflective journaling experience:
- Account Information: Your name, email address, and securely hashed passwords (Argon2id/Bcrypt) used exclusively for authentication.
- Journal Entries & Media: Your entries, mood tags, titles, timestamps, and optional banner images. All entries are row-scoped strictly to your authenticated user account.
- Third-Party API Credentials: Your personal API keys (such as Google Gemini and ElevenLabs) provided under our Bring-Your-Own-Key model. These are encrypted with AES-256 before disk storage.
- Billing Records: Handled securely by our merchant of record (Polar). Lumina never sees or stores full credit card numbers or banking secrets.
How Artificial Intelligence Interacts With Your Data
Unlike conventional AI applications that train corporate models on user journal entries, Lumina employs an isolated architecture:
When you interact with Lumi AI, prompts are communicated using your personal Google Gemini API key or narrated through ElevenLabs. Under Google AI Studio and ElevenLabs API terms, data submitted via paid/BYOK developer API endpoints is not used to train foundation models.
Ephemeral chat interactions (such as Quick Chat) are discarded immediately and never permanently persisted to database storage unless you explicitly choose to archive the session.
Data Retention & Deletion Rights
You maintain unconditional control over your data lifecycle:
- Individual Entry Deletion: Deleting an entry immediately executes hard database deletion and deletes any associated banner images from storage.
- Account Expungement: When you delete your Lumina account from Settings, all your database rows, entries, conversations, tags, and encrypted keys are purged permanently.
- Data Portability: You can download a complete archive of your journal history in standardized JSON and PDF formats at any time.
Cookies, Telemetry & Trackers
Lumina believes web analytics have no place in a private journal:
- We do not use third-party tracking pixels, Facebook Pixel, Google Analytics, or invasive ad tech.
- Cookies used are strictly functional HTTP session cookies required to keep you signed in securely (
HttpOnly,SameSite=Lax, andSecure).
Contact & Data Protection Officer
For any inquiries, requests to exercise your data rights, or clarification regarding our privacy practices, contact us directly: