Your Data Is Yours

When you open up to Lumis about your anxiety, your relationships, your 2 AM struggles — that's the most personal data you'll ever share with any app. We take that responsibility seriously.

Here's exactly how we protect your data, written in plain language without corporate hedging.

What We Collect

Your conversations. Text and voice sessions are stored to power long-term memory. Voice is transcribed to text; we don't store audio files.

Your mood and wellness data. Mood check-ins, journal entries, goals, and habits — only what you choose to share.

Basic analytics. Anonymized usage data (which features you use, how often) to improve the app. This is never linked to your conversations.

Device info. OS version and device type for crash reporting. That's it.

What We Never Do

This is the part most companies bury in legalese. We're putting it in bold.

• We never sell your data. Not to advertisers. Not to data brokers. Not to anyone. Ever.
• We never use your conversations for ad targeting. You'll never see an ad based on something you told Lumis.
• We never train general AI models on your data. Your conversations stay yours. We use Anthropic's Claude API, which does not retain your data for training.
• We never share with employers or insurers. No one outside of you can access your Lumis data.

How We Protect It

Encryption in transit. Every message between your phone and our servers is encrypted using TLS 1.3.

Encryption at rest. Your data is encrypted on our servers using AES-256 — the same standard used by banks and governments.

Row-level security. Our database uses Supabase with row-level security policies, meaning even at the database level, your data is isolated from every other user.

No third-party access. Our AI provider (Anthropic) processes your messages to generate responses but does not retain them for training, per their data usage policy.

Your Rights

You have full control over your data:

• See it: The "What I Know About You" feature shows everything Lumis remembers.
• Export it: Download a complete copy of all your data anytime.
• Delete it: Permanently erase everything — conversations, memories, mood data, all of it.
• Opt out: Turn off analytics data collection in settings.

These aren't empty promises buried in a settings menu. They're built into the core app experience because we believe data control is a feature, not an afterthought.

Why This Matters

The mental health space has a trust problem. Users have seen apps sell their data, share it with employers, or use it for advertising. Every breach of trust makes it harder for the next company — and harder for users to get help.

We're building Lumis for the long term. That means earning trust through actions, not words. Every architecture decision, every policy choice, every line of code is written with the assumption that your data is sacred.

Because it is.

Questions?

If you have any questions about how we handle your data, we're here:

• Privacy requests: privacy@getlumis.app
• General support: support@getlumis.app
• Full policy: Privacy Policy