Privacy Policy
Last updated September 24, 2026
Lumina ("we", "us") is a journaling app with an AI "Active Listener" that reflects on what you write. This page explains what we collect, why, and how it's handled. It is not a substitute for legal advice — if you need a policy vetted for your specific jurisdiction or business, have a lawyer review this before relying on it.
What we collect
- Account data: your email address and password (handled by our authentication provider, Supabase — we never see or store your raw password).
- Journal entries: the text you write, the Active Listener's replies, and, on the Paid plan, the values, recurring patterns and milestones our AI extracts from your entries over time (the "Identity Board").
- Preferences: the onboarding choices you make about what you're journaling for, how you process things, and what tone you want from Lumina.
- Billing data, if you subscribe: our payment processor, Lemon Squeezy, collects your payment details directly — we never receive or store your card number. We receive only your subscription status, renewal dates, and a customer/subscription ID from them.
- Basic technical data: standard server logs (IP address, timestamps) generated by normal web hosting, used only for security and abuse prevention.
How we use it
Your journal entries are sent to Anthropic's Claude API to generate each reflection and, on the Paid plan, to extract patterns and values for your Identity Board. They are not used to train Anthropic's models. We use your account data to run the service (authentication, showing you your own entries) and your billing data to know which plan you're on. We do not sell your data, and we do not use your journal entries for advertising.
Who we share it with
Only the service providers required to run Lumina: Supabase (database and authentication), Anthropic (generating reflections), and Lemon Squeezy (billing, as the merchant of record for subscriptions — they handle payment and tax compliance on our behalf). We don't share your journal content with anyone else, and we don't sell personal data.
Your choices
You can update your preferences at any time from the Preferences page. To export or permanently delete your account and everything tied to it (entries, patterns, billing links), email us at support@lumina.app — we'll confirm and complete the deletion promptly. If you're in the EU/UK or California, this includes the access, correction, deletion and portability rights you have under GDPR/UK GDPR or the CCPA.
Security & retention
Data is encrypted in transit and at rest by our infrastructure providers. Row-level security ensures only you (and, for the minimum necessary processing, the AI services above) can access your entries. We keep your data for as long as your account is active, and delete it on request or account closure.
Cookies
We use one strictly-necessary cookie to keep you signed in. We don't use advertising or cross-site tracking cookies.
Changes
If we materially change this policy, we'll update the date above and, for significant changes, notify you by email.
Contact
Questions about this policy or your data: support@lumina.app