Privacy

Last updated: October 2026 (draft).

The promises

• Audio is never stored. Not by Lumo, not on our servers, not for training.
• What Lumo remembers is a list you can read, edit and delete.
• You can delete your account and everything in it in two taps.
• There are no ads, no advertising identifiers and no tracking cookies.
• We do not sell your data, and we do not share it for advertising. Ever.

What happens during a session

While you talk, your voice is streamed to our servers and turned into text in real time. The audio is not written to disk and is discarded as it is processed. The text is used to work out what Lumo says next.

To do this, we use outside providers for speech to text, for the language model that writes Lumo's replies, and for Lumo's voice. They process your words only to provide the service. [Launch task: name each provider here and confirm each one's retention settings in writing.]

What we keep, and for how long

• Conversation text: used to create a short summary and a few memories, then deleted when the session finishes.
• Session summary: a title, a one-line takeaway and the technique used, so you can look back. Kept until you delete it or your account.
• Memories: short notes about people, worries, preferences, wins and routines. Kept until you edit or delete them, or your account.
• Account basics: a sign-in identifier, your creature's name, your chosen region, your plan and the minutes you have used. If you use a guest account, only a random device identifier. Kept while your account exists.
• Age check: we record that you confirmed you are an adult, not your birth year. If you say you are under 18, nothing is stored except that fact, on your device.
• Safety: if a session ends because it may involve danger, we record that a safety step was taken, not what was said.
• Product events: a short, fixed list of privacy-safe counts, such as “session started”. They never contain what you say.
• Waitlist email: kept until we send the launch email and for up to 12 months after, or until you ask us to remove it.
• Backups: deleted data leaves our backups within [Launch task: confirm backup window, for example 30 days].

Your controls

• See, edit or delete any memory, or forget everything, in “What I remember”.
• Download everything we hold about you from Settings.
• Delete your account from Settings in two taps. It removes your data in one step.
• Turn reminders on or off at any time.

Your rights

Depending on where you live, you may have the right to access, correct, delete or move your data, to object to or restrict how it is used, and to complain to your data protection authority. Most of these are buttons in the app. For anything else, write to privacy@lumo.example.

Waitlist and email

If you join the waitlist, we use your email only to tell you when Lumo is ready. We store the address, the time, and which version of the consent wording you saw. To be removed, email privacy@lumo.example.

This website

This site sets no tracking cookies, loads no third-party scripts or fonts, and runs no analytics. If that ever changes, we will ask first and update this page.

Children

Lumo is for adults, 18 and over, and is not designed for anyone younger.

Who we are

[Company name, to be confirmed], [Registered address, to be confirmed]. Contact: privacy@lumo.example.