Privacy Policy

Last updated 6 October 2026

Luma is a personal companion app. Your conversations are private, and this policy explains plainly what we keep, why, and how you stay in control.

What we store

• Your account: your email address, confirmation that you are 18 or older, and either a securely hashed password or, if you continue with Google, the name, profile picture and account ID that Google shares.
• Your companions: the names, avatars, personalities, interests, voices and instructions you choose.
• Your conversations: the messages you send and your companions’ replies, including text transcripts of voice calls and any reactions you add.
• Memories: short facts and preferences saved from your conversations, or that you ask to be remembered, so your companions can personalise future chats.
• Your profile: the name, interests and preferences you add, and a profile photo if you choose one. Photos are stored privately, with location and camera details removed.
• Photos you share in a chat, stored privately in the same way, so you and your companion can see them in that conversation.
• Your settings: your app and conversation languages, and your check-in and notification choices.
• Reports: if you report a companion’s reply, we keep the report with that message so it can be reviewed.
• We do not store recordings of your voice calls.

How we use it

• Only to run Luma for you: to generate replies, remember what matters to you, and let your companions check in.
• If you turn on notifications, your phone occasionally asks our server whether a companion has a check-in for you, sharing only your local hour so check-ins arrive during the day. The notification is created on your phone; no push notification service receives your messages.
• We do not sell your data, show you ads, or use your conversations to advertise to you.
• We look at a reply you report, and the conversation around it, only to review that report and keep Luma safe.

Services that process your data

• Supabase stores your account and data, and handles sign-in.
• Google, if you choose Continue with Google, confirms who you are. It does not receive your conversations.
• OpenAI generates replies, voice calls, and safety checks, and turns text into search data so memories can be found. Messages, and photos you share in a chat, are sent to OpenAI to produce each response and to check that photos are safe.
• Our server host and a rate-limiting store keep the service running and prevent abuse; they handle request details, not your conversation history.

Safety

Messages are automatically checked for safety. If you mention self-harm, your companion will share crisis resources, and those messages are not saved as memories.

Your choices and rights

• View, edit or forget any memory in the Memories screen.
• Download a copy of all your data from Settings → Download My Data.
• Delete a conversation, with any photos shared in it, from its history, or remove your profile photo from Profile, at any time.
• Delete your account from Settings → Delete Account. This permanently removes your account, profile, photos, companions, conversations and memories.
• Turn off check-ins or notifications at any time in Settings.

How long we keep it

We keep your data until you delete it or delete your account. Backups held by our providers expire on their normal schedule.

Age

Luma is for adults aged 18 and over. We do not knowingly collect data from anyone younger.

Contact

Luma is responsible for your data. Questions or requests: support@lumacompanion.app.