Privacy Policy

This Privacy Policy explains how Lumorya (“we”, “us”) handles your information when you use our website (lumorya.app) and the Lumorya desktop application (the “Service”). You can reach us at contact@lumorya.app.

Data controller

The controller responsible for your personal data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS], registered under [SIRET / RCS]. Full details are available in our Legal Notice. For any privacy question, contact contact@lumorya.app.

Our privacy philosophy

Lumorya is designed to be local-first. The AI runs entirely on your own machine. Your conversations, your companions and any generated images are stored on your device and are never sent to us or to any third party. We cannot read them.

Information we collect

• Account information. When you create an account on our website, we collect your email address and (optionally) your name, via Firebase Authentication (Google).
• Payment information. Purchases are processed by Lemon Squeezy, our Merchant of Record. We never see or store your card details; we only receive confirmation of your purchase and your subscription/license status.
• Usage analytics. Our website uses privacy-friendly analytics (Vercel Analytics) that measure aggregate traffic without tracking you across other sites.
• Technical data. Standard server logs (e.g. IP address, timestamps) needed to operate and secure the Service.

What we do not collect

We do not collect your conversations, your companions, your prompts or your generated content. These never leave your device.

How we use your information

• To create and manage your account and license.
• To send you transactional emails (e.g. email verification), via Resend.
• To process and confirm your purchases.
• To operate, secure and improve the Service.
• To comply with our legal obligations.

Legal bases (GDPR)

Where the GDPR applies, we process your data on the basis of the performance of our contract with you (providing the Service), our legitimate interests (securing and improving the Service), your consent (where required), and compliance with legal obligations.

Sharing your information

We share data only with the service providers needed to run Lumorya: Google Firebase (authentication), Lemon Squeezy (payments), Resend (transactional email) and Vercel (hosting and analytics). We do not sell your personal data.

Cookies

We use a strictly necessary cookie to keep you signed in (your session). We do not use advertising cookies.

Data retention

We keep your account data for as long as your account exists. You can delete your account at any time from your account page, which removes your associated data and license.

Your rights

Depending on your location, you may have the right to access, correct, delete or export (portability) your personal data, to object to or restrict certain processing, and to withdraw your consent at any time (without affecting prior processing). To exercise these rights, contact us at contact@lumorya.app. If you are in the EU, you also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

International transfers

Some of our service providers may process data outside your country. Where required, such transfers are covered by appropriate safeguards (e.g. EU Standard Contractual Clauses).

Children

Lumorya is intended for adults only (18+). It is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time. We will update the “Last updated” date above and, where appropriate, notify you.

Contact

Questions about this policy? Email us at contact@lumorya.app.