Lumen is operated by Lumen Wisdom — lumenwisdom.com, based in Portugal (European Union). We are responsible for your personal data under the General Data Protection Regulation (GDPR).
Contact: hello@lumenwisdom.com
We collect the following personal data:
• Account data: email address, display name, profile photo (if you sign in with Google).
• Chat messages: your conversations with Lumen AI, stored for 60 days then automatically deleted.
• Journal entries: text you write in the diary section.
• Community posts: content you share publicly in the community.
• Payment data: subscription status, Stripe customer ID (web/Android), or Apple transaction ID (iOS). We do not store card details — these are handled securely by Stripe or Apple depending on your platform.
• Technical data: session tokens and authentication logs necessary for the app to function. Cookies are only used in the web version (PWA) — the native iOS app does not use cookies.
We use your data to:
• Provide and personalise the Lumen service.
• Generate AI responses in the chat (your messages are sent to Anthropic's API).
• Process your subscription payments — via Stripe (web/Android) or Apple In-App Purchase (iOS).
• Authenticate you via Google OAuth (Supabase handles this).
• Improve the service and ensure security.
We process your data under the following legal bases:
• Contract: to provide the service you signed up for.
• Legitimate interest: to ensure security and prevent abuse.
• Consent: for non-essential cookies on the web version (you can withdraw at any time). The native iOS app does not use cookies.
We share data with the following trusted third parties:
• Supabase (database and authentication) — EU-compliant infrastructure.
• Anthropic (AI responses) — your chat messages are processed to generate responses.
• Stripe (payments for web & Android) — processes subscription billing securely.
• Apple (payments for iOS) — processes In-App Purchase subscriptions. Apple's privacy policy applies to these transactions.
• Google (OAuth sign-in) — if you choose to sign in with Google.
All third parties are bound by data processing agreements and comply with GDPR.
Our website (lumenwisdom.com) uses analytics and advertising tools to understand how visitors find us and to improve our reach. No personally identifiable information is shared with these services. You can opt out via your browser settings or by using an ad blocker.
• Chat messages: automatically deleted after 60 days.
• Journal entries: retained until you delete them or close your account.
• Community posts: retained until you delete them.
• Account data: retained while your account is active. Deleted within 30 days of account closure.
• Payment records: retained for 7 years as required by Portuguese tax law.
As an EU resident, you have the right to:
• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict processing of your data.
• Data portability — receive your data in a structured format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time.
You can delete your account and associated personal data at any time, directly within the app, from the account menu. To exercise any other right, contact us at hello@lumenwisdom.com. We will respond within 30 days.
Web version (PWA): We use cookies and similar technologies:
• Essential cookies: required for authentication and session management (Supabase). Cannot be disabled.
• Preference cookies: remember your language and theme settings.
• Third-party cookies: Google OAuth may set cookies when you sign in with Google.
You can manage cookie preferences via the banner shown on your first visit.
Native iOS app: The iOS app does not use cookies. Session management is handled via secure tokens stored locally on your device. The app does not track you across other apps or websites.
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), Row Level Security in our database, and API key protection via server-side Edge Functions.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of Lumen after changes constitutes acceptance of the updated policy.
For any privacy-related questions or to exercise your rights, contact us at: