Lumi writes short, personal stories about the life you want and reads them to you. To do that, it has to know some things about you. This policy says what Lumi collects, why, who helps us process it, how long we keep it, and how you can see it, change it or delete it. It covers the Lumi app and the website at lumimanifest.com.
Lumi is run by Lis Roa ("Lumi", "we", "us"), who is responsible for your personal information. Write to [email protected] with any question or request about your privacy.
Lumi is for adults. You must be 18 or older to use it.
The short version
| What we collect | Your email and sign-in details. What you choose to tell Lumi about yourself and the life you want, which can include sensitive things like your gender, your sexual orientation, your relationships and how you feel. The stories written for you, and which ones you keep. Basic app details such as your time zone, language and app version. Your subscription status. |
| Why | To write your stories, read them aloud, keep them for you, and know what you have access to. |
| Sensitive information | Collected only if you choose to share it, with your explicit consent, and used only to write your stories. |
| Do we sell it? | No. We do not sell your personal information or share it for advertising. |
| Advertising or tracking? | None. There are no ads in Lumi, no advertising identifiers and no tracking across other apps or websites. |
| Who helps us | A small number of service providers that host Lumi, write the stories with AI, turn them into audio, send account emails, and process payments. They act on our instructions. |
| AI training | We instruct our AI providers not to use your content to train their models. |
| How long | While your account exists. Delete your account and it is erased, apart from short-lived backups and logs. |
| Your controls | See, correct, download or delete your information, from the app or by writing to us. |
1. What Lumi collects
Your account
Your email address and a password, which is stored hashed so that nobody can read it. If you sign in through another service, that service tells us your email address (or a private relay address, if it offers one) and confirms who you are. It never gives us your password.
What you tell Lumi about yourself
During onboarding, and later whenever you edit it, Lumi asks about you and the life you want. Depending on what you answer, this can include:
- your first name, your age, and where you live
- your gender and your sexual orientation
- your relationship status, and the people who matter to you: their name, how they relate to you, and anything you choose to say about them
- your work, what you want to change, what feels possible, what stands in the way, and what feels out of reach
- your ideal place to live and your ideal day
- anything else you decide to write
Some questions are needed to write a story at all, such as what you want to bring into your life. The sensitive ones always let you skip them or choose "Prefer not to say", and you can change or empty any answer later in the app. Please don't share anything you don't want Lumi to use in your stories.
What you want to manifest
The desires you write, with the reasons and obstacles you give for them. When you remove a desire, it stops being used for new stories, but it stays linked to the stories already written from it until you delete your account.
What Lumi makes for you
The stories written for you, their audio, the phrases inside them, which ones you keep as favourites, and any rating or comment you give a story.
How you use the app
- Your time zone and language, so that your stories fit your day and your words
- The app version you are running
- When you last opened Lumi
- The days you listen to a story to the end, which is how your streak is counted
- Where people leave onboarding: which step was shown, answered or skipped, and whether a purchase was made. This never includes anything you wrote. It is tied to a random identifier for your installation of the app. Once you create an account, it is linked to your account too, and deleted with it.
There is no third-party analytics, advertising or marketing software in the app.
Your subscription
When you subscribe, the app store you use tells us which plan you have, its status, when the current period ends, and a transaction identifier, so that we know what you have access to. We never see your card, bank details or billing address. Those stay with the store.
When you write to us
Your email address and whatever you tell us, so that we can help you.
The website
The website sets no cookies and uses no analytics. Like any website, our hosting provider receives standard technical information when you visit, such as your IP address and browser type, and keeps it briefly in its logs for security.
What Lumi does not do
- We do not sell your personal information, and we do not share it for targeted or cross-context behavioural advertising.
- We do not use advertising identifiers, and we do not track you across other companies' apps or websites.
- We do not use your information to decide anything about you that has legal or similarly significant effects.
2. Why we use it, and on what basis
| What | Why | Legal basis (for the EU and similar laws) |
|---|---|---|
| Account details | To create your account, sign you in, and keep it secure | Performing our contract with you |
| Your answers and desires | To write stories about your life | Performing our contract with you; for sensitive information, your explicit consent |
| Stories, audio, favourites | To read your stories to you and keep the ones you love | Performing our contract with you |
| Ratings and comments | To make the stories better | Our legitimate interest in improving Lumi |
| App details, listening days | To time your stories, count your streak and keep the app working | Performing our contract with you |
| Onboarding drop-off | To learn where onboarding is confusing and fix it | Our legitimate interest in improving Lumi, or your consent where the law requires it |
| Subscription | To know what you have paid for | Performing our contract with you |
| Messages to us | To answer you | Performing our contract with you, or our legitimate interest in helping you |
| Security and abuse prevention | To protect you, other users and Lumi | Our legitimate interest, and our legal obligations |
We do not use your information for anything else without telling you first and, where the law requires it, asking for your consent.
3. Sensitive information
Some of what Lumi asks about is sensitive under data protection laws, in particular your sexual orientation, your gender, your relationships and anything about how you feel or your health that you choose to write.
- We collect it only if you choose to share it. Before anything you share is sent to write a reflection or a story, a consent screen in the app tells you that your answers, including any sensitive ones, go to our AI provider in the United States. Tapping Continue on that screen is your explicit consent.
- We use it only to write your stories and keep them for you. We never use it for advertising, to profile you for anyone else, or to infer anything about you beyond what you told us.
- You can withdraw your consent at any time by emptying those answers in the app or deleting your account. This doesn't affect stories written before.
If you live in Washington State or Nevada, our Consumer Health Data Notice also applies to you.
4. AI, and who helps us run Lumi
How your stories are written
Lumi's stories and onboarding reflections are written by an AI language model, and read aloud by an AI voice. Both are run by specialised service providers on our behalf.
- Only what a story needs is sent. Our server picks the fields a story needs from what you shared and sends only those. Your email address, your account identifier and your payment details are never sent.
- The people you add are sent as relationships, not by name. Before anything is sent, our server turns "Mara (my sister)" into "my sister" and removes her name from the note you wrote about her. Your own first name may be used, so that the story can speak to you. A name you type in another answer is sent as you wrote it.
- Onboarding reflections. While you set up Lumi, a few screens reflect back what you just wrote. If you agree when the app asks, the answer being reflected and your first name are sent to write that reflection. Reflections are not stored.
- The voice. To read a story aloud, its text is sent to our voice provider, which returns the audio. We keep that audio with the story, so that you can listen again.
- No training. We use our providers' business services and instruct them, by contract and in our account settings, not to use your content to train their models.
When a story needs care instead
If what you share points to self-harm, abuse, a crisis or a medical emergency, Lumi does not write or keep a story or reflection about it. It shows you a screen with help lines instead. This is an automatic check, not monitoring by a person, and it is not an emergency service.
Our service providers
These providers process your information only on our instructions, under contracts that require them to protect it and not to use it for their own purposes.
| What they do | What they receive |
|---|---|
| Cloud hosting, database and sign-in | Everything stored in your account |
| AI text generation | The fields a story or reflection needs, as described above |
| AI voice | The text of each story |
| Account email delivery | Your email address and the message, such as a password reset code |
| App stores | Your purchase and, if you use it, your sign-in with them. The store handles payment under its own privacy policy |
| Website hosting | Standard technical information about your visit |
Most of them are based in the United States, and some may process information in other countries. Write to us for the current list of providers by name, and we will send it to you.
Other disclosures
We may disclose information if the law requires it, to protect someone's safety, or as part of a transfer of Lumi to a new owner, who would have to keep this policy's promises. Where we are allowed to, we will tell you first.
5. How long we keep it
- Your account and everything in it: while your account exists. That includes the stories written for you, which you can delete with your account.
- Saved stories after your subscription ends: they stay in your account so that you can keep reading and listening to them.
- Onboarding drop-off records that were never linked to an account: up to 12 months.
- Stories and reflections that need care: never stored.
- Our backups: they expire on their own within 30 days.
- Server and website logs: kept for a short time for security, and they never contain what you wrote.
- AI providers: they may keep what is sent to them for a limited time to detect abuse, usually up to 30 days, and longer only when their safety systems flag something or the law requires it.
- Messages to us: as long as we need them to help you, and no more than two years after your last message.
- Unused accounts: if an account isn't used for two years, we may delete it, after writing to you first.
Deleting your account
You can delete your account at any time inside the app, from your account settings, or by writing to us. Deleting it erases, on our servers and on your device, your account and everything attached to it: your answers, the people you named, your desires, your stories and their audio, phrases, favourites, ratings, your subscription record, and the onboarding records linked to you. If you signed in with another service, Lumi's access to it is revoked too. It happens right away and can't be undone, except for the backup copies above, which expire on their own.
Deleting your account does not cancel your subscription. The store you subscribed through bills it, so cancel it in your subscription settings.
6. Your rights
We give these rights to everyone who uses Lumi, wherever you live.
- Access. Ask what we hold about you, what we do with it and who receives it, and get a copy.
- Correction. Fix anything inaccurate. Most of it you can change directly in the app.
- Deletion. Delete your account in the app, or ask us to.
- Portability. Get your information in a common, machine-readable format.
- Withdraw consent. Empty an answer, or delete your account. It doesn't affect what happened before.
- Object or restrict. Ask us to stop or limit a use of your information that relies on our legitimate interest.
- No sale or sharing to opt out of. We don't sell or share your personal information. If that ever changed, we would tell you first and give you a way to say no.
- No retaliation. Using these rights will never get you a worse price or a worse Lumi.
How. Use the settings in the app, or write to [email protected] from the email address on your account, so that we know the request is yours. You can ask someone to act for you; we will ask for proof that you authorised them. We answer within 30 days, or sooner where the law that applies requires it. Access is free.
If you disagree with our answer, reply and we will look at it again and answer you in writing. You can also complain to the data protection authority where you live, such as:
- The European Union: your country's data protection authority.
- Brazil: the Autoridade Nacional de Proteção de Dados (ANPD).
- Argentina: the Agencia de Acceso a la Información Pública (AAIP). In its words: "LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales."
7. International transfers
Lumi is run from Argentina, and our providers store and process information mainly in the United States, and sometimes in other countries. Wherever your information goes, we protect it the same way:
- with contracts that include the safeguards the law requires, such as the European Commission's Standard Contractual Clauses, or providers certified under the EU–U.S. Data Privacy Framework; and
- where a law relies on it, with your consent, which you give when you agree to share your information on the app's consent screen.
Write to us for a copy of the safeguards that apply.
8. Security
Traffic between the app and our servers is encrypted. Your sign-in session is stored in your device's secure storage. Each account can only reach its own data, and the keys that could get around that live only on our servers, never in the app. We give our providers only what they need.
No system is perfect. If a breach ever puts your information at risk, we will tell you and the relevant authorities without undue delay.
9. Children
Lumi is for people 18 and over. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, write to us and we will delete it.
10. Do Not Track
Lumi doesn't track you across other companies' apps or websites, so there is nothing for a browser's Do Not Track signal to switch off. The website treats every visit the same way.
11. Changes to this policy
If we change this policy in a way that matters, we will tell you in the app, or by email, before the change takes effect. The date at the top shows when it last changed.