Privacy Policy

Who we are

Lumara is a private treatment and regimen tracker for iPhone. It is operated by Alyara Apps Studio LLC ("Lumara", "we", "us"). This policy explains what we collect, why, who sees it, how long we keep it, and the choices you have.

The short version: you create your own log. Only you can see it. We do not sell your information, we do not show ads, and we do not track you across other apps or websites.

What we collect

Account: you sign in with Apple. Apple gives us a private user identifier, and the name and email address you choose to share (this can be Apple's private relay address). We store them to run your account.

Your log: the treatments you record (type, category, date, provider, cost, price, notes, side effects, rating, recovery days, and the zones and doses on a face map), your providers (name, specialty, clinic, location, phone, website, your notes, rating and photo), your appointments, your regimen items and reminders, a daily Glow rating, your budget plan, and the answers you give during onboarding or in Profile (for example goals, age range and routine). Treatments and notes can describe your health or body, so we treat all of this as sensitive. Treatment types, side effects, recovery days, face-map doses and Glow ratings may be health-related information.

Photos: the before, after and recovery photos you choose to add, the profile photo you choose, and any photo you add to a provider. We store them in private storage tied to your account. They are not public, and we show them back to you with short-lived links.

Spending: the costs you enter, and the totals we calculate from them.

Subscription status: if you buy Lumara Elite, Apple processes the payment and our subscription provider (RevenueCat) tells us whether your subscription is active. We never receive your card number.

Basic usage events: a small number of events about how the app is used (for example that a treatment was logged, with its category only; that a recap was shared; that the paywall was viewed or a plan was purchased). Each event carries your account identifier, the time, the app version and the device platform. Events never contain your notes, costs, provider names or photos. We keep them in our own database. We do not use a third-party analytics or advertising service.

Technical logs: our hosting provider records the IP address, the time and the type of each request to our servers, for security and debugging. These logs are kept for a short period (about 7 days) and are not joined to your log.

What stays on your device

Reminders and notifications are created on your device. Calendar sync is optional: if you turn it on, Lumara writes appointment events to your device calendar and keeps the links on your device only. Face ID for the Glow tab is checked by iOS on your device; we never receive your face data. Home Screen widgets and Live Activities read a small summary that Lumara keeps on your device. If you share a recap image or a consultation PDF, it goes only where you send it.

If you use "Book with the provider", Lumara prepares a short message (your first name, the treatment and your preferred times) and opens the messaging or email app you choose, or the provider's booking website. We do not send it; you do. The "Share with my provider" PDF holds your name, the treatments you choose (date, product, zones, provider, cost) and, if you switch them on, their photos. It is built on your device; you choose where it goes. Calendar events that Lumara created stay in your calendar after you sign out or delete your account; delete them in the Calendar app if you wish. Reminder notifications show generic prompts about appointments, recovery check-ins and rebooking. Home Screen widgets and Live Activities can show appointment times, recovery day counts, photo prompts and Glow Rhythm on your Home or Lock Screen. These surfaces do not show treatment names, provider names or costs.

How we use your information

To run the app: store and show your log, photos, plan and insights, and sync them to your devices.

To personalize the app using your onboarding answers.

To manage your subscription and unlock Lumara Elite features.

To keep the service secure, fix problems, and count how the app is used in general.

To meet legal obligations.

We do not use your treatment data or photos for advertising, for profiling, or to train any model. We do not sell or share them for advertising.

Who handles your information for us

Supabase hosts our database, file storage and sign-in. Your data is stored on its servers in the United States.

RevenueCat manages subscription status. It receives your account identifier, your App Store purchase receipt, and basic device information (a device identifier, device model, OS version, language and IP address) to validate purchases and prevent fraud. It never receives your log or photos.

Apple provides Sign in with Apple and processes payments and subscriptions.

These companies act on our instructions, only for the functions above, and are bound by contract to protect your data. Your data is stored in the United States. If you are in the EU or UK, email support@lumaraelite.com to ask about the safeguards for your data. We may also disclose information if the law requires it, or to protect the safety and rights of people. If Lumara is ever sold or merged, we will tell you before your information is handled under a different policy.

How long we keep it

We keep your information while your account is active. When you delete your account, the app removes your photos and files first, then your log and account data. A stored file that has no photo record may remain on the server after Log Out while we complete its removal. Email support@lumaraelite.com if you need help with a file. Our database provider keeps rolling backups; deleted data leaves those backups when they expire. We may keep limited records where the law requires it, for example proof of a purchase. Usage events stay while your account is active and are deleted with your account. Technical logs are kept for about 7 days.

Apple and RevenueCat keep their own purchase records under their own policies; we cannot delete those. Deleting your account does not remove Lumara from the Sign in with Apple list in your Apple ID settings. You can remove it there yourself.

Account and data deletion

You can delete your account and all its data at any time in the app: Profile, then Delete Account. This removes your log and your photos.

If you cannot use the app, email support@lumaraelite.com from the address on your account and we will confirm and process the request. If you want to stop Lumara from using Sign in with Apple, you can also remove Lumara in your Apple ID settings under Sign in with Apple.

Your rights and choices

You can see and edit your log in the app. You can ask us for a copy of your information, ask us to correct it, or ask us to delete it, by emailing support@lumaraelite.com. We answer within 30 days, or sooner where the law requires a shorter time. In the app, "Share with my provider" creates a PDF of your records that you can save or send.

Depending on where you live, you may have more rights, for example under the GDPR, the UK GDPR, the CCPA, or state laws on consumer health data. You can ask us to restrict or object to how we use your information, and to receive your data in a portable format. You may also have rights under your state's health-data laws. We make no automated decisions with legal effect about you. Lumara does not sell your information, does not share it for advertising, and uses your health-related information only to provide the app you asked for. You may complain to your local data protection authority.

You control photo, camera, calendar and notification access in iOS Settings. Lumara works without calendar and notification access.

We may ask you to confirm who you are before we answer a request. If you are in the UK, you may complain to the Information Commissioner's Office. If you are in the EU, you may complain to the data protection authority in your country.

Security

Your data is encrypted in transit. Photos are in private storage. Access to your data is limited to your own account by database rules that we test. No system is perfectly secure, so please use a strong device passcode.

Children

Lumara is not for anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a person under 18 has given us information, email support@lumaraelite.com and we will delete it.

Changes to this policy

We may update this policy as the app changes. We will change the effective date above and, for material changes, tell you in the app before they apply to you.

Contact

Questions or requests about your privacy: support@lumaraelite.com. Alyara Apps Studio LLC.