Summary: a prayer is saved only when you tap Save, and it is encrypted. Conversations with Lumi are temporary. Follow-up memory for saved requests starts on and can be turned off during onboarding or in Settings. Analytics only with your consent. You can request an export and delete your account in the app; other requests can be sent to the privacy contact.
1. Controller and contact
The data controller is Raphael Malburg, in Portugal. Privacy contact: infra.devstudio@gmail.com.
2. Data we process
Account: an account identifier and, if you create a login, email, optional name, and password (stored only as a hash). An anonymous account is also available.
Prayers and journal: only what you choose to save, encrypted on the device and on the server.
Preferences and usage: language, protection schedule, apps chosen for the pause (identifiers, not their content), reminders, 16+ age confirmation, pause counts, and Voice Time minutes used.
Subscription: subscription status, product, and renewal dates received from the store through RevenueCat. We never receive card details.
Diagnostics: technical crash reports filtered to reduce inclusion of prayer text, transcripts, audio, credentials, or personal identifiers.
Product and website analytics: aggregated usage events, only when you accept. They never include prayer text, audio, or transcripts.
Sensitive information
Prayers, messages and audio may reveal religious beliefs, health or information about others. Consider their privacy and applicable rights before submitting their information. Accepting the Terms does not replace any specific consent required by law.
3. Memory and conversations
Conversations with Lumi are temporary: the server keeps no automatic memory of conversation events. Follow-up memory lets Lumi gently return to requests you saved; it starts on and can be turned off during onboarding or in Settings > Memory at any time. When it is off, saved requests are not used in future conversations.
4. Voice and AI
When you use AI reflections or conversations, the text needed is sent to the AI provider to generate the response, with minimal context. In turn-based voice, you start recording and the clip is sent for transcription; necessary text may be sent to the AI provider and the answer to the voice provider. Audio is not saved as a journal. Provider and backup retention must be considered separately.
5. Purposes and legal bases
Providing the service you signed up for (contract); processing subscriptions and preventing fraud (contract and legitimate interest); security and bug fixing (legitimate interest); analytics and reminders (consent, which you can withdraw at any time); complying with legal obligations.
6. Who we share data with
We use processors that handle data on our behalf: website and API hosting (OVHcloud), database (Neon), AI provider (OpenRouter, which routes to the configured model), voice (Fish Audio through OpenRouter), subscriptions (RevenueCat, Apple App Store, and Google Play), crash diagnostics (Sentry), and website analytics (Vercel Web Analytics, only with consent). Prayer content is not used for advertising or rankings in the app.
Some of these providers are located in other countries; international transfers rely on the safeguards required by applicable law and our provider agreements.
7. Retention
We keep account data and preferences while your account is active; saved prayers remain until you delete them. Technical, security, and billing records are kept only as long as needed for those purposes and legal obligations. When you delete your account, we delete or anonymize data whose purpose has ended, except records we must keep to comply with law or resolve disputes. Backup copies may remain until they are replaced or expire under the provider’s normal process. External providers may apply their own retention periods.
8. Your rights
You can access, correct, export (portability), and delete your data, withdraw consent, and ask how it is shared. In the app: Privacy > Export data and Account > Delete account. For other requests, write to the contact above. You may also complain to your data protection authority.
Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your store account subscription settings.
9. Security and age
We use encryption in transit and at rest for saved prayers, access control, and data minimization. Lumi is intended for people aged 16 or older and does not knowingly collect data from younger people.
10. Changes
We may update this policy. Material changes will be announced in the app or on this site before they take effect.