Privacy Policy
Effective date: May 23, 2026
1. Introduction
LumAlma is a wellness companion app helping you track moods, journal, and take care of your emotional health. We respect your privacy and keep data collection minimal. This policy explains what we collect, how we use it, and your rights.
2. Data we collect
- Account: email address, password hash, display name, birth date, gender, optional avatar. Birth date and gender are used to tune the tone and language of the AI companion (age-appropriate phrasing).
- Wellness content (linked to you): mood entries, journal entries, dream notes, meditation sessions, achievements. This may include sensitive information about your mental health.
- Location (optional): if you enable weather insights or grant device geolocation, we store your city name, country code, approximate coordinates (latitude/longitude with limited precision), and timezone. We use this to fetch weather conditions and the geomagnetic activity index (Kp) for your region — these signals help the companion adjust its tone (e.g. on a stormy day or during a geomagnetic storm if you're weather-sensitive). You can disable location, weather, and geomagnetic alerts independently in Settings.
- Usage: app interactions, feature use, push notification tokens (Apple Push Notification service), tutorial / onboarding progress flags.
3. How we use your data
- Provide and personalize wellness features (insights, AI reflections, dream interpretation).
- Send notifications you opt-in to (mood reminders, weekly reports).
- Process subscription payments through Apple In-App Purchase and RevenueCat.
- Improve the app — aggregated, non-personal statistics only.
We do not sell your data. We do not share it with advertisers or data brokers.
4. AI features
For dream interpretation, journal reflections and personal insights, your text is sent to our self-hosted language model (Ollama on private infrastructure). It is processed in real time and is not retained beyond the response. We do not use your content to train third-party models.
5. Apple Sign In
If you sign in with Apple, we receive the Apple ID identifier (sub) and, optionally, an email or relay address you choose to share. We store only what's needed to identify your account.
6. Subscriptions
Subscriptions are billed through your Apple ID. RevenueCat handles validation and webhooks. We store the subscription status; Apple stores payment details.
7. Your rights
- Access: view your data in the app at any time.
- Export: Settings → Data → Export — full JSON of your moods and journal.
- Delete: Settings → Delete account — irreversibly removes all your data.
- Withdraw consent: disable notifications, location, or AI features in Settings.
8. Security
Passwords are hashed with bcrypt. Traffic uses HTTPS (HTTP/2 and HTTP/3 via QUIC). JWT tokens for sessions. We never log raw passwords or full credit card numbers.
9. Children
LumAlma is intended for users 13 years and older. We do not knowingly collect data from children under 13. If you believe a child has provided personal data, contact us and we will delete the account.
10. Not a medical service
LumAlma is a wellness and self-awareness companion, not a medical device. It does not diagnose, treat, or cure any condition. If you experience emotional distress, please contact a qualified mental health professional.
11. Contact
Questions or requests: [email protected]
12. Changes
We will notify you about material changes via the app or by email. Continued use after the effective date constitutes acceptance of the updated policy.