Privacy Policy
Effective date: June 17, 2026
1. Introduction
LumAlma is a wellness companion app helping you track moods, journal, and take care of your emotional health. We respect your privacy and keep data collection minimal. This policy explains what we collect, how we use it, and your rights.
2. Data we collect
- Account (Contact Info): email address, password hash, display name, birth date (optional), gender (optional). Birth date and gender are used to tune the AI companion's tone.
- Avatar photos (User Content → Photos): optional. You may upload an avatar from your camera or photo library. The image is stored on our server, linked to your account, never shared with third parties, and never analyzed by AI. You may remove or replace it at any time.
- Voice recordings (User Content → Audio Data): optional, when using voice input in the journal. The recording is transmitted to our server, transcribed via a local faster-whisper model, and immediately deleted — we do not store raw audio. Only the transcribed text remains.
- Wellness content (Sensitive Info / Other User Content): mood entries, journal entries, dream descriptions, AI-generated reflections and dream interpretations. May contain sensitive mental health information. Used only for in-app personalization, never shared with third parties.
- Location (Precise Location): optional. If you enable weather insights or grant geolocation, we store your city name, country code, coordinates (lat/lon, ~1 meter precision), and timezone. Used to fetch weather and the geomagnetic activity index (Kp) — these signals help the companion adjust its tone. Location, weather and geomagnetic alerts can be disabled independently in Settings. We do not track location in the background.
- Identifiers:
- Internal User ID (UUID, not Apple ID, not IDFA)
- Apple ID sub — when signing in with Apple, for account identification
- Apple refresh token — stored to allow us to revoke the Apple connection when you delete your account (Apple App Store Guideline 5.1.1(v))
- Device ID — APNs push token and a local device identifier for sending notifications to your device
- Purchases — Apple transaction ID and subscription status in our DB to verify access to premium features. Payment details (card numbers, banking info) are never received — all handled by Apple StoreKit.
- Diagnostics (Crash Data): when the app crashes we receive an anonymized error report (stack trace, iOS version, device model) via our self-hosted Bugsink service. PII (email, journal text, tokens) is redacted before sending. Used only to fix bugs.
3. How we use your data
- Provide and personalize wellness features (insights, AI reflections, dream interpretation).
- Send notifications you opt-in to (mood reminders, weekly reports).
- Process subscription verification through Apple In-App Purchase (StoreKit 2 + App Store Server API).
- Improve the app via anonymized error reports (Bugsink on our infrastructure).
We do not sell your data. We do not share it with advertisers or data brokers. We do not use third-party analytics SDKs (no Firebase, Mixpanel, Amplitude, etc.). We do not request IDFA (no App Tracking Transparency prompt).
4. AI features and AI data processing
LumAlma does not use any third-party AI service. All AI runs on our own self-hosted infrastructure — a private Hetzner server in Germany that we control. Your data is never sent to OpenAI, Anthropic, Google, or any other third-party AI provider, and is never used to train any model.
What is sent, and to whom:
- Voice transcription — when you record a voice note, the audio is sent only to our own backend (api.lumalma.com) and transcribed by a self-hosted faster-whisper speech model on our server. The raw audio is deleted immediately after transcription; only the resulting text is kept, linked to your account.
- AI reflections, dream interpretation, insights (Premium) — when you request an AI reflection, the relevant journal or dream text is sent only to our own backend and processed by a self-hosted large language model (Ollama gemma3) on the same private server. The text is processed in real time and is not retained beyond generating the response.
In both cases the data goes only to our own server and is processed by software we host ourselves. We ask for the microphone permission before any voice recording, and AI text features run only on content you create inside the app and choose to analyze.
5. Apple Sign In
If you sign in with Apple, we receive the Apple ID identifier (sub) and, optionally, an email or relay address you choose to share. We also store an Apple refresh token to allow us to revoke the Apple connection when you delete your account (Apple App Store Guideline 5.1.1(v)).
6. Subscriptions
Subscriptions are billed through your Apple ID. We use our own integration with the App Store Server API V2 (without intermediaries such as RevenueCat) — the client sends an Apple-signed JWS, our server verifies the signature via Apple Root CA certificates, and stores the subscription record. Payment details (card, banking) are stored by Apple — we never receive or store them.
7. Your rights
- Access: view your data in the app at any time.
- Export: Settings → Data → Export — full JSON of your moods and journal.
- Delete: Settings → Delete account — irreversibly removes all your data.
- Withdraw consent: disable notifications, location, or AI features in Settings.
8. Security
Passwords are hashed with bcrypt. Traffic uses HTTPS (HTTP/2 and HTTP/3 via QUIC). JWT tokens for sessions. We never log raw passwords or full credit card numbers.
9. Children
LumAlma is intended for users 13 years and older. We do not knowingly collect data from children under 13. If you believe a child has provided personal data, contact us and we will delete the account.
10. Not a medical service
LumAlma is a wellness and self-awareness companion, not a medical device. It does not diagnose, treat, or cure any condition. If you experience emotional distress, please contact a qualified mental health professional.
11. Contact
Questions or requests: [email protected]
12. Changes
We will notify you about material changes via the app or by email. Continued use after the effective date constitutes acceptance of the updated policy.