Privacy Policy

Welcome to Lumi ("we", "our", or "us"). We value your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use our mobile application Lumi (the "App").

Please read this Privacy Policy carefully. By downloading, accessing, or using Lumi, you agree to the practices described in this policy. If you do not agree with the terms of this policy, please do not access or use the App.

Lumi is designed with an offline-first architecture. The core features of the App operate entirely on your device without transmitting data to external servers.

Data stored locally on your device:

• Alarm & schedule data — alarm times, recurrence schedules, custom labels, selected ringtones, snooze limits, and dismissal mission configurations (NFC tag IDs, QR code payloads, math challenges, etc.).
• Physical NFC & QR tag data — unique hardware identifiers (UIDs) or encoded string payloads of NFC tags and QR codes registered in the App to dismiss your alarms.
• Usage statistics & streaks — wake-up streak metrics, alarm dismissal timestamps, response times, and reliability check history.
• Local settings — application preferences, theme settings, sound preferences, and onboarding status.

If you voluntarily choose to sign in to Lumi to enable cloud backup and cross-device sync:

• Authentication information — Google Sign-In details, including your full name, email address, profile picture URL, and unique authentication identifier provided by Supabase / Google OAuth.
• Cloud backup records — backups of your alarms, registered tag mappings, and wake-up stats synchronized to our secure Supabase backend database.

If you purchase a premium subscription or one-time upgrade:

• Transaction information — purchase history, subscription status, expiration dates, and entitlement statuses processed through RevenueCat, Apple App Store, or Google Play Store.
• Financial information — we do NOT collect or store your payment card numbers, bank details, or billing address. All financial transactions are handled securely by Google Play Billing / Apple App Store.

To ensure alarm reliability and app stability, the App processes technical data:

• Device model, operating system version, app version, and unique installation identifiers.
• Background alarm state and device power configuration status (e.g., battery optimization settings).

Lumi requires specific device permissions to fulfill its core functionality. We only use these permissions for their intended features:

• NFC — required to scan NFC tags to dismiss alarms and register new tags. NFC hardware is accessed only while scanning.
• Camera — required to scan QR codes or barcodes to dismiss alarms or pair tags. Camera data is processed in real-time on your device and is never recorded, saved, or uploaded.
• Notifications & alarms (SCHEDULE_EXACT_ALARM, USE_FULL_SCREEN_INTENT) — required to set precise alarm notifications, show full-screen alarm ringing windows over the lock screen, and play alarm sounds.
• Storage / photos / media — required if you choose custom audio files from your device storage as alarm ringtones or if you export/save generated QR codes to your photo gallery.
• Vibration — required to vibrate the device during alarm ringing and physical feedback.

We use the collected information for the following purposes:

• Provide core app functionality — setting, scheduling, and ringing alarms, and enforcing mission dismissals (NFC/QR scanning).
• Account & backup management — managing your user account and synchronizing alarm configurations across devices (if enabled).
• Purchases & entitlements — managing premium feature access and validating subscription status via RevenueCat.
• App improvement & diagnostics — maintaining app stability, optimizing alarm delivery, and resolving crashes.

We do NOT sell, rent, trade, or monetize your personal data. We only share information with trusted third-party service providers essential for operating the App:

• Supabase — cloud authentication and database synchronization (only if signed in).
• RevenueCat — subscription and in-app purchase validation.
• Google Play Services / Apple App Store — processing payments, Google Sign-In, and app distribution.

Local data: All local data remains on your device until you clear app data, uninstall the App, or delete individual records inside the App.

Account & cloud data deletion: You can delete your account and all synchronized cloud backup data at any time through the in-app settings or by contacting us. Deleting your account permanently purges all your data from our Supabase servers.

Lumi does not knowingly collect or solicit personal information from children under the age of 13 (or 16 in certain jurisdictions).

We employ industry-standard technical security measures to protect your data both locally and in transit (TLS/SSL encryption).

We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: xevonlabs@gmail.com