Last updated: June 11, 2026

Luma (“Luma,” “we,” “us,” or “our”) provides a voice-first AI companion for emotional wellbeing and self-reflection. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using Luma, you agree to the practices described here.

Luma is a wellbeing companion, not a medical or mental-health service, and it is not a substitute for professional care. If you are in crisis, contact your local emergency services or a crisis hotline immediately.

Information we collect

• Account information. When you sign up, we collect your email address and basic profile details such as your name, preferred language, country/region, and confirmation that you meet our minimum age requirement.
• Conversation content. The messages you type and the audio of your voice conversations are processed to generate Luma’s responses. Transcripts and summaries of your sessions, and any reflections you keep, are stored in your account so the experience can remember the context of your story.
• Voice & microphone data. Audio is streamed only while you are in an active conversation. We use it to power real-time speech understanding and responses. We do not access your microphone outside of active sessions.
• Subscription & purchase information. If you subscribe, your purchase is processed by Apple or Google. We receive your subscription status and related identifiers (not your full payment card details) to unlock premium features.
• Usage & device data. We collect limited technical and usage information, such as app interactions, device type, app version, and diagnostic/crash data, to operate, secure, and improve the app.

How we use your information

• To provide the core experience, real-time conversations, reflections, and memory of your prior sessions.
• To manage your account, subscription, and access to premium features.
• To maintain safety, including surfacing crisis resources when a conversation suggests you may be at risk.
• To analyze, troubleshoot, and improve the app’s performance and reliability.
• To respond to your support requests and communicate important service updates.

We do not sell your personal information, and your conversations are not used to build advertising profiles.

AI processing

To generate responses, your messages and conversation audio are processed by third-party artificial-intelligence and voice providers acting on our behalf, including Google (Gemini) for conversational AI, LiveKit for real-time audio transport, and speech-to-text / text-to-speech providers. These providers process your content solely to deliver the service and under contractual confidentiality obligations. They are required to protect your information to a standard at least equal to this policy, and they do not use your conversations or audio to train their AI models.

Service providers we share data with

We share information with trusted vendors who process it on our behalf, only as needed to run Luma:

• Supabase, secure database, authentication, and storage of your account and session data.
• Google (Gemini), LiveKit, and speech providers, real-time voice and conversational AI.
• RevenueCat, Apple App Store, and Google Play, subscription processing and validation.
• PostHog, privacy-conscious product analytics.
• Sentry, crash and error diagnostics.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or in connection with a business transfer.

Data retention

We keep your information for as long as your account is active or as needed to provide the service. You can delete your conversations or your entire account at any time; when you delete your account, we remove your personal data from our active systems, except where we must retain limited records to meet legal, security, or financial obligations.

Security

We use industry-standard safeguards, including encryption in transit, to protect your information. Your conversations are private and are not read by our staff in the ordinary course of operating the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage much of this in the app, or contact us using the details below and we will respond as required by applicable law. You can manage or cancel your subscription anytime through your Apple ID or Google Play account.

Children’s privacy

Luma is intended for users 16 and older. We do not knowingly collect personal information from anyone under this age. If you believe a minor has provided us information, please contact us and we will delete it.

International data transfers

We and our service providers may process your information in countries other than your own. Where we transfer data internationally, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.

Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@heyluma.app.